Privacy policy

PRIVACY POLICY

Last updated: August 30, 2026

This Privacy Policy describes how ChillZone collects, uses, discloses, stores, and otherwise processes personal information when you visit https://www.chillzonehome.store, create an account, place an order, request a return, communicate with us, or otherwise use our products and services.

ChillZone is operated by Individual Entrepreneur Nizam Kenzhebekovich Duisheev, trading as ChillZone.

For the purposes of applicable data protection laws, Individual Entrepreneur Nizam Kenzhebekovich Duisheev is the controller of personal information processed for the purposes described in this policy, except where another party, such as Shopify or a payment provider, acts as an independent controller.

If this Privacy Policy conflicts with our Terms of Service regarding the collection, use, or disclosure of personal information, this Privacy Policy controls.

1. Personal Information We Collect

Depending on how you interact with ChillZone, we may collect or process the following categories of personal information.

Contact and identification information

  • Name;

  • Billing and shipping addresses;

  • Email address;

  • Telephone number; and

  • Other information needed to identify or contact you regarding an order.

Order and transaction information

  • Products viewed, added to a cart, purchased, returned, exchanged, or cancelled;

  • Order numbers;

  • Transaction history;

  • Shipping and tracking information;

  • Customs and delivery information;

  • Return and refund requests; and

  • Payment status and confirmation.

Payment information

Payments are processed by Shopify and third-party payment providers.

Depending on the payment method, we may receive limited payment information, such as payment status, transaction reference, payment method, billing address, and limited card details.

ChillZone does not normally receive or store complete payment card numbers, security codes, or full online-banking credentials.

Payment providers process payment information under their own privacy policies and security requirements.

Account information

  • Account identifier;

  • Login and authentication information processed through Shopify;

  • Saved addresses;

  • Account preferences;

  • Order history; and

  • Return or cancellation requests.

We do not normally have access to your complete account password.

Communications

We may process information you provide when you:

  • Contact customer support;

  • Submit a question or complaint;

  • Request a return or refund;

  • Leave a product review;

  • Participate in a survey; or

  • Communicate with us through email, forms, social media, or other channels.

Device, usage, and technical information

We and our service providers may collect:

  • IP address;

  • Browser and device type;

  • Operating system;

  • Device identifiers;

  • Network information;

  • Pages viewed;

  • Search and navigation activity;

  • Cart activity;

  • Referring website;

  • Approximate location derived from an IP address; and

  • Dates and times of visits and interactions.

Information relating to fraud and security

We may process information used to identify, investigate, or prevent suspected fraud, abuse, security incidents, unlawful transactions, or violations of our policies.

2. How We Collect Personal Information

We may collect personal information:

  • Directly from you when you create an account, place an order, contact us, request a return, subscribe to marketing, or otherwise provide information;

  • Automatically through cookies, pixels, local storage, server logs, and similar technologies;

  • From Shopify, payment providers, fraud-prevention services, carriers, fulfillment partners, suppliers, and customer-support providers;

  • From advertising, analytics, and marketing partners where permitted by law; and

  • From publicly available sources or other parties where legally permitted.

3. How We Use Personal Information

We may use personal information to:

  • Operate and provide the website and Services;

  • Process and confirm orders and payments;

  • Arrange fulfillment, DDP shipping, customs clearance, tracking, and delivery;

  • Share delivery information with suppliers, fulfillment partners, carriers, and customs service providers;

  • Provide customer accounts;

  • Process cancellations, returns, exchanges, repairs, replacements, and refunds;

  • Communicate about orders, accounts, deliveries, returns, or customer-support requests;

  • Prevent fraud, abuse, chargebacks, and security incidents;

  • Comply with accounting, tax, customs, consumer-protection, and other legal obligations;

  • Establish, exercise, or defend legal claims;

  • Improve our products, website, customer service, and user experience;

  • Measure website performance and understand how customers use the Services;

  • Send marketing communications where permitted by law;

  • Provide personalised advertising where permitted and, where required, with consent; and

  • Enforce our Terms of Service and other policies.

4. Legal Bases for Processing in the EEA and United Kingdom

Where the GDPR, UK GDPR, or similar law applies, we process personal information under one or more of the following legal bases:

Performance of a contract

We process information when necessary to:

  • Accept and fulfil an order;

  • Process payment;

  • Arrange shipping and delivery;

  • Provide an account;

  • Communicate about an order;

  • Process a return, cancellation, replacement, or refund; or

  • Take steps requested before entering into a contract.

Compliance with legal obligations

We may process information to comply with:

  • Tax and accounting requirements;

  • Customs and import requirements;

  • Consumer-protection laws;

  • Product-safety obligations;

  • Valid legal requests; and

  • Other applicable laws and regulations.

Legitimate interests

We may process information where necessary for our legitimate interests or those of another party, including:

  • Operating and improving our business;

  • Protecting the website, customers, and business from fraud or security threats;

  • Providing customer support;

  • Maintaining business records;

  • Measuring website performance;

  • Preventing abuse and enforcing our policies; and

  • Establishing, exercising, or defending legal claims.

We only rely on legitimate interests where those interests are not overridden by your rights and freedoms.

Consent

Where required by law, we rely on consent for:

  • Non-essential cookies;

  • Certain analytics;

  • Personalised advertising;

  • Marketing communications; and

  • Other optional processing activities.

You may withdraw consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

5. Cookies and Similar Technologies

We and our service providers use cookies and similar technologies to operate the website, remember preferences, understand website usage, prevent fraud, and support analytics and advertising.

Cookies may include:

  • Strictly necessary cookies, required for checkout, accounts, security, shopping-cart functions, and operation of the website;

  • Preference cookies, used to remember settings such as language, currency, and region;

  • Analytics cookies, used to measure website traffic and performance; and

  • Advertising cookies, used to measure campaigns and provide relevant advertising.

Where required by law, non-essential analytics and advertising technologies will not be activated until you provide consent.

You can accept, refuse, or change your cookie choices through the cookie banner or privacy settings available on the website. You may also control cookies through your browser settings, although disabling necessary cookies may affect website functionality.

6. Marketing Communications

We may send marketing emails where you have consented or where another lawful basis permits us to do so.

You may unsubscribe at any time by:

Even if you unsubscribe from marketing, we may continue sending non-promotional messages concerning orders, deliveries, accounts, returns, refunds, safety notices, or other service-related matters.

7. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients when reasonably necessary.

Shopify

Our store is hosted by Shopify, which provides ecommerce, hosting, account, checkout, analytics, fraud-prevention, and related services.

Shopify may process information as our service provider and, for certain enhanced services, as an independent controller.

For additional information, review the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Payment providers

We disclose information to payment processors, banks, card networks, fraud-prevention providers, and other financial service providers required to process and secure payments.

Suppliers and fulfillment partners

Because products may be shipped directly by suppliers or fulfillment partners, we may disclose information necessary to fulfil an order, including:

  • Customer name;

  • Shipping address;

  • Telephone number;

  • Email address where required for delivery;

  • Products ordered;

  • Order and variant details; and

  • Customs or delivery information.

Suppliers and fulfillment partners may be located outside your country, including outside the EEA and United Kingdom.

They may only use the information for fulfilment, shipping, delivery, returns, legal compliance, fraud prevention, or other purposes permitted by contract and applicable law.

Carriers and customs providers

We may disclose delivery information to postal operators, freight companies, couriers, customs brokers, warehouses, and other logistics providers.

Professional and technical providers

We may disclose information to providers of:

  • Website hosting;

  • Information technology;

  • Cloud storage;

  • Customer support;

  • Email delivery;

  • Analytics;

  • Advertising;

  • Fraud prevention;

  • Accounting;

  • Legal services; and

  • Business administration.

Legal and business purposes

We may disclose information:

  • To comply with applicable law, court orders, or lawful government requests;

  • To enforce our agreements and policies;

  • To protect customers, ChillZone, Shopify, or other parties;

  • To investigate fraud, security incidents, or unlawful conduct; or

  • In connection with a merger, sale, restructuring, financing, or transfer of all or part of the business.

We do not disclose personal information to third parties for their unrelated direct marketing unless you have provided consent or the disclosure is otherwise permitted by law.

8. Personalised Advertising and Data-Sharing Choices

Depending on your location, you may have the right to opt out of certain uses of personal information for targeted advertising or activities defined by applicable law as the sale or sharing of personal information.

You can submit an opt-out request through our Data Sharing Opt-Out Page.

Where supported, we may also recognise the Global Privacy Control signal as an opt-out request for the applicable browser or device.

For information about Global Privacy Control, visit https://globalprivacycontrol.org/.

9. Relationship With Third-Party Websites

The Services may contain links to websites, applications, or social-media platforms operated by third parties.

We are not responsible for the privacy or security practices of third-party services. You should review their privacy policies before providing personal information.

Information posted publicly or semi-publicly on social-media platforms may be visible and used by other parties according to the settings and policies of those platforms.

10. International Data Transfers

ChillZone is established in the Kyrgyz Republic. Shopify, payment providers, suppliers, carriers, and other service providers may process personal information in other countries.

Those countries may have data-protection laws that differ from the laws where you live.

Where the GDPR, UK GDPR, or other applicable law requires safeguards for an international transfer, we rely on an applicable lawful transfer mechanism, which may include:

  • An adequacy decision;

  • European Commission Standard Contractual Clauses;

  • The UK International Data Transfer Agreement or UK Addendum;

  • Contractual and organisational safeguards; or

  • Another legally recognised transfer mechanism.

You may contact us for further information about the safeguards relevant to your information.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy.

Retention periods depend on factors including:

  • Whether your account remains active;

  • Whether information is needed to fulfil an order or provide customer support;

  • Applicable tax, accounting, customs, and recordkeeping requirements;

  • The duration of return, refund, warranty, chargeback, or legal-claim periods;

  • Fraud-prevention and security requirements; and

  • Whether you have consented to marketing.

When personal information is no longer required, we will delete, anonymise, or securely isolate it, subject to applicable legal requirements and technical limitations.

12. Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information.

However, no security system or method of transmission is completely secure. You should not send passwords, complete payment card details, or other highly sensitive information through ordinary email.

If you create an account, you are responsible for keeping your login information confidential.

13. Automated Processing

Shopify, payment providers, or fraud-prevention services may use automated systems to identify potentially fraudulent, abusive, or high-risk transactions.

Where applicable law provides a right concerning a decision based solely on automated processing that produces legal or similarly significant effects, you may request information, human review, or otherwise exercise the rights provided by law.

14. Children’s Personal Information

The Services are not directed to children, and we do not knowingly collect personal information from children who are not legally permitted to provide it.

If you believe a child has provided personal information without appropriate authorisation, contact support@chillzonehome.store so that we can review and, where required, delete it.

15. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

  • Be informed about how personal information is processed;

  • Request access to personal information;

  • Request correction of inaccurate or incomplete information;

  • Request deletion of personal information;

  • Restrict certain processing;

  • Object to processing based on legitimate interests;

  • Object to direct marketing;

  • Receive certain information in a portable format;

  • Withdraw consent;

  • Opt out of certain targeted advertising, sale, or sharing;

  • Request safeguards relating to certain international transfers;

  • Request human review of certain automated decisions; and

  • Lodge a complaint with an applicable data-protection authority.

These rights may be subject to legal limitations and exceptions.

To exercise a right, contact support@chillzonehome.store and describe your request.

We may need to verify your identity before processing a request. We will only request information reasonably necessary for verification.

You may use an authorised representative where permitted by law. We may request proof of the representative’s authority.

We will not unlawfully discriminate against you for exercising a privacy right.

16. EEA and UK Complaints

If you are located in the European Economic Area, you may lodge a complaint with the data-protection authority in your country. A list of EEA supervisory authorities is available through the European Data Protection Board.

If you are located in the United Kingdom, you may lodge a complaint with the Information Commissioner’s Office.

We encourage you to contact us first so that we can attempt to resolve the issue.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our business, technologies, service providers, or legal obligations.

We will publish the revised policy on this page, update the “Last updated” date, and provide additional notice where required by law.

18. Contact and Controller Information

Data controller and legal seller:
Individual Entrepreneur Nizam Kenzhebekovich Duisheev, trading as ChillZone

Registered address:
49 Toktogul Street
Birdik Village, Dostuk Aiyl Aimak
Alamudun District, Chuy Region
Kyrgyz Republic

Email: support@chillzonehome.store
Telephone: +996 999 980 505
Website: https://www.chillzonehome.store