1. Introduction
This Privacy Policy describes how ZMR International Ltd. ("ZMR", "we", "us") collects, uses, and protects personal information when you use the ZMR Store website and related services at getzmr.com (collectively, the "Services"). It applies to customers and visitors in our active markets, including Nigeria, South Africa, Ghana, and Pakistan.
By using the Services you acknowledge this Policy. For contractual terms, see our Terms of Service .
2. Data We Collect
| Category | Examples | Purpose |
|---|---|---|
| Identity data | Name, date of birth, age verification | Account creation, age compliance |
| Contact data | Email, phone number, address | Order fulfilment, communications |
| Transaction data | Purchase history, payment method type | Order processing, fraud prevention |
| Device data | IP address, browser type, operating system | Security, analytics |
| Usage data | Pages visited, clicks, search queries | Site improvement, personalisation |
| Marketing data | Communication preferences | Targeted offers (with consent) |
We do not store full card numbers. Payment processing is handled by certified PCI-DSS compliant partners.
3. How We Use Your Data
- Process and fulfil your orders
- Verify your age and identity for compliance with tobacco regulations
- Send order confirmations, shipping updates, and receipts
- Improve our products, website, and services
- Prevent fraud, chargebacks, and unauthorised access
- Send marketing communications (only with your consent)
- Comply with legal obligations
4. Legal Basis (GDPR)
Where the EU or UK GDPR applies, we process personal data on one or more of the following bases: performance of a contract with you; compliance with a legal obligation; our legitimate interests (such as fraud prevention, security, and improving the Services), balanced against your rights; or your consent, where required.
5. Data Sharing
We may share data with service providers who assist us with hosting, payments, delivery, analytics, marketing platforms, and customer support—only as needed for their services and subject to appropriate safeguards. We may disclose information if required by law, to protect rights and safety, or in connection with a business transfer (for example a merger), where permitted.
6. International Transfers
Your information may be processed in countries other than where you live. Where we transfer personal data from the EEA, UK, or Switzerland, we use mechanisms recognised by applicable law (such as standard contractual clauses) unless another valid transfer tool applies.
7. Data Retention
We retain personal data only as long as necessary for the purposes described, including legal, tax, and accounting requirements. Retention periods vary by data type and market; marketing preferences and logs may be kept for shorter or longer periods as described in our systems and applicable law.
8. Your Rights
Depending on your location, you may have the right to access, correct, delete, or restrict processing of your personal data, to object to certain processing, to data portability, and to withdraw consent where processing is based on consent. You may lodge a complaint with a supervisory authority. To exercise your rights, contact us using the details in Contact DPO below.
9. Cookies
We and our partners may use cookies and similar technologies to operate the site, remember preferences, measure performance, and (where allowed) deliver relevant marketing. You can control cookies through your browser settings and, where available, our cookie preference tools.
10. Children's Privacy
Our Services are not directed at minors. We do not knowingly collect personal information from anyone under the legal age to purchase tobacco or vaping products in their region. If you believe we have collected such data, please contact us and we will take appropriate steps to delete it.
11. Security
We implement technical and organisational measures designed to protect your personal data against unauthorised access, loss, or misuse. No online transmission is completely secure; please use strong passwords and protect your account credentials.
12. Changes
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the current version. We encourage you to review this page periodically. Material changes may be communicated through the Services or by email where appropriate.
13. Contact DPO
For privacy-related questions, requests, or to contact our Data Protection Officer (where appointed), use the contact options published on the ZMR Store website (support email or contact form). We will respond within a reasonable time and in line with applicable law.