Privacy policy

Last updated: 12 September 2026

Zicboo sells retail products to customers in the United Kingdom through zicboo.com. This policy explains how personal information is collected, used and shared when you browse our website, buy products or contact us.

Bilawal Shamir, trading as Zicboo, is the controller responsible for our use of your personal information. Our contact details appear at the end of this policy. Shopify and payment partners may also process information for their own purposes, as explained in their privacy notices.

1. Information we collect

Depending on your interaction with us, we collect your name, billing and delivery addresses, email address, telephone number, order details, transaction and payment-status information, and correspondence about enquiries, deliveries, returns and refunds. Where you use an account, we also process relevant account information.

When you browse, information may include your IP address, device and browser details, pages viewed, interactions with the store, cookie identifiers and privacy or marketing preferences.

We obtain information directly from you, through website technologies, and from Shopify, payment services and delivery or fulfilment providers involved in your order.

We need the contact, delivery and payment information requested as mandatory at checkout to process your purchase. Without it, we may be unable to accept payment or deliver your order. Marketing consent is optional.

2. Why we use information and our lawful bases

We use order and contact information to accept and fulfil purchases, arrange delivery, send order updates and administer contractual returns. Our basis is performance of our contract with you, or steps you request before entering a contract.

We keep records required by tax, accounting and other applicable laws on the basis of legal obligation. This also applies when handling statutory consumer rights or responding to legally binding requests.

We use relevant information to answer general enquiries, secure the store, investigate suspected fraud and manage disputes on the basis of legitimate interests. Those interests are operating a reliable retail business, protecting customers and preventing losses. We consider the impact on individuals when relying on this basis.

We rely on consent for promotional email or SMS and for advertising or other optional tracking where consent is required. You can withdraw consent without affecting the lawfulness of earlier processing.

3. Shopify Payments

We use Shopify Payments to process payments. Payment credentials are handled through Shopify Payments and its payment partners. We receive information needed to manage transactions, such as payment status and relevant transaction details. Please do not send full card details or security codes by email or customer messaging.

Payment services also process information for authentication, fraud prevention and applicable legal obligations. Further information is available in Shopify's Consumer Privacy Policy.

4. Shopify hosting and Network Intelligence

Shopify hosts our store and processes visitor and purchase information to operate it. We have enabled Shopify Network Intelligence. This allows Shopify to use information about interactions with our store alongside interactions with other merchants and Shopify to support enhanced services, including personalisation, advertising and business improvements.

We share relevant information with Shopify and service partners for these services; processing can involve other countries. Shopify's own processing is explained in its Consumer Privacy Policy.

For advertising based on activity across these services, consent is required for UK customers. You can change your choices through our cookie preferences. You can also use Shopify's privacy portal to exercise relevant rights, including withdrawing consent or objecting to its enhanced-services processing.

5. Other service providers

We share information as needed with payment partners, delivery and fulfilment providers, IT and communications services, professional advisers, and authorities where disclosure is legally required.

Our store has Simprosys Google Shopping Feed installed to support product listings, and Messaging to support customer communications. The personal information processed depends on the features used and their permissions. Product-feed synchronisation does not, by itself, establish that customer conversion tracking is active.

6. Marketing and cookies

If you subscribe to promotional messages, you can unsubscribe using the instructions in the message or contact support@zicboo.com. Unsubscribing from promotions does not stop necessary order or service communications.

You can object to direct marketing at any time, including related profiling.

We use essential technologies for functions such as shopping baskets, checkout and security. Optional technologies may support measurement, personalisation and advertising. Our Shopify cookie banner is configured for UK visitors. Where consent is required, optional technologies should only operate after your consent. You can review and withdraw choices through cookie preferences. Browser controls also let you remove cookies, although blocking essential cookies can affect store functions.

7. How long information is retained

Retention depends on the record and its purpose. For order and transaction records, we consider applicable tax and accounting requirements, outstanding returns, payment disputes and legal claims. For support correspondence, we consider whether the enquiry is resolved and whether the record remains needed for a related dispute or order.

Marketing information is retained while the relevant permission remains valid. A limited suppression record may be kept after an opt-out to avoid sending further promotions. Technical records are retained according to their security or operational purpose and the relevant service settings. Information should be deleted or anonymised when it is no longer needed for these purposes.

8. International processing

Our Shopify data-hosting setting is the European Union. This does not mean all processing is confined there: Shopify, payment partners and other providers may access or process information elsewhere.

Transfers outside the UK must use an applicable lawful mechanism. Depending on the provider and destination, this may involve UK adequacy regulations or approved contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum to standard contractual clauses. Contact us for details of safeguards applicable to your information and how to obtain a copy. Shopify also explains its international processing in its Consumer Privacy Policy.

9. Your rights

Subject to applicable conditions, you can request access, correction, deletion, restriction or portability of your personal information. You can withdraw consent where processing relies on it.

You can object to processing based on legitimate interests on grounds relating to your circumstances. Your right to object to direct marketing is unconditional.

Contact support@zicboo.com to make a request. We may need proportionate information to verify your identity. Some records may need to be retained to meet legal obligations even where deletion is requested.

10. Security and children

We use organisational and technical measures intended to protect personal information. No online system can guarantee absolute security.

Our store is intended for general retail customers and is not specifically directed at children. If you believe a child has provided information inappropriately, please contact us.

11. Complaints and changes

Please contact us with privacy concerns. You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator. You do not have to contact us before exercising that right.

We may update this policy when our practices or legal requirements change. The current version and its update date will appear on this page. Where required, we will provide additional notice of significant changes.