Privacy policy

Last updated: 2 August 2026

1. Who is responsible for your information

Muzdan Limited, company number 13304038, of Benwell Road N77BJ, London, United Kingdom is the controller of personal information collected through the Website and for Website sales, marketing and customer accounts. Contact: cs@muzdan.cp.

Muzdan SARL, is responsible for personal information it collects for Tripoli store sales and local operations. For Lebanon Website fulfilment, it processes and may independently control limited information necessary for warehousing, delivery, returns, fraud prevention and legal compliance. Contact: commerce@muzdan.co. Where the companies jointly determine a specific use, they will provide any additional information required by law.

2. Information we collect

  • Identity and contact details, such as name, email, telephone, billing and delivery address.
  • Order, return, payment-status, gift-card and customer-service records. Complete card details are handled by our payment provider rather than stored by us.
  • Account information, preferences, wish lists, sizes and communication choices.
  • Technical and usage information, such as IP address, device/browser identifiers, pages viewed, referral source and cookie choices.
  • Marketing engagement, survey responses, reviews, user-submitted images and social interactions where you choose to engage.
  • Fraud-prevention, security and compliance information, including transaction risk indicators.
  • In-store information, such as purchase/return records and CCTV.

3. How and why we use it

To perform our contract or act before contracting

  • Process payment, accept and fulfil orders, provide delivery updates, manage accounts, returns, exchanges, refunds, gift cards and customer support.

For legitimate interests

  • Operate, secure, troubleshoot and improve the Website and our business; prevent fraud and misuse; understand aggregate performance; manage stock; protect legal rights; and provide proportionate service communications.

Where we rely on legitimate interests, we consider whether the use is necessary and balanced against your rights. You may object in certain circumstances.

To comply with law

  • Maintain tax, accounting, customs, product-safety and transaction records; respond to lawful requests; and establish, exercise or defend legal claims.

With consent

  • Send marketing where consent is required; use non-essential cookies or similar technologies; and use content for any purpose that requires specific permission. You may withdraw consent at any time without affecting earlier lawful use.

4. Marketing

We send email or SMS marketing only where permitted, including with consent or the UK “soft opt-in” for our own similar products where applicable. You can unsubscribe using the link in a message or by contacting us. We may keep a minimal suppression record so we respect your choice. Service messages about an order or account are not marketing.

5. Cookies and similar technologies

We use essential technologies needed for the Website and, with any consent required, functional, analytics and advertising technologies. See the Cookie Policy and use “Cookie Preferences” to change optional choices.

6. Who receives information

We share only what is reasonably necessary with service providers and recipients including:

  • Shopify and Website/app hosting providers;
  • Shopify Payments, Stripe, and fraud-prevention services;
  • Muzdan SARL for Lebanon fulfilment and support;
  • warehouses, couriers, customs agents and returns providers;
  • META, Facebook, Google Ads.
  • professional advisers, insurers, auditors, banks and prospective purchasers or investors subject to appropriate safeguards; and
  • courts, regulators, tax/customs authorities and law-enforcement bodies where required or reasonably necessary.

We do not sell personal information for money. Some advertising disclosures may be treated as “sale” or “sharing” under certain US state laws; if such laws apply, we will provide the required notice and opt-out mechanism.

7. International transfers

Because we operate between the UK, Lebanon and other countries and use global service providers, information may be transferred outside the country where it was collected. For transfers subject to UK data protection law, we use a lawful transfer mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses, together with supplementary measures where required. Contact us for more information about relevant safeguards.

8. Retention

We keep information only as long as reasonably necessary for the purposes described, including legal, tax, accounting, fraud and dispute requirements. Our working retention periods, subject to confirmation, are:

  • order, payment-status, refund and tax records: normally 7 years after the relevant financial year;
  • customer accounts: while active and normally up to 2 years after closure or sustained inactivity, except information retained for another lawful reason;
  • customer-service correspondence: normally 3 years after closure of the enquiry, longer for a dispute or legal claim;
  • marketing contact data: until opt-out, loss of permission or sustained inactivity, with minimal suppression data retained to honour opt-outs;
  • fraud and security logs: according to risk and legal needs; and
  • cookie data: for the durations stated in the live cookie inventory.

9. Your rights

Depending on the law that applies, you may have rights to access, correct, delete or restrict information; object to processing; receive certain information in portable form; withdraw consent; and complain to a regulator. Some rights have legal limits. We may need to verify your identity.

UK complaints may be made to the Information Commissioner’s Office at ico.org.uk, although we would appreciate the opportunity to address the issue first. Lebanese consumers may contact the competent authorities, including the Consumer Protection Directorate where relevant. Residents elsewhere may contact their local data protection authority.

10. Automated decisions

We may use automated risk signals to help identify fraud or secure payments. “We do not currently make solely automated decisions that produce legal or similarly significant effects.”]

11. Children

The Website is intended for adults purchasing products, including products for children. We do not knowingly collect personal information directly from children under 13 in the UK or below another applicable minimum age. Contact us if you believe a child provided information without appropriate authorisation.

12. Security

We use appropriate technical and organisational measures designed to protect information. No internet system is completely secure. You are responsible for keeping account credentials confidential and should contact us if you suspect misuse.

13. Changes and contact

We may update this Policy and will post the new date and give additional notice where required. Privacy questions or rights requests: cs@muzdan.co , Muzdan Limited.