Privacy Policy

This policy explains what personal data we collect when you visit this website, place an order, write to us, or verify a serial number; why we collect it; who we share it with; and what you can ask us to do about it.

1. Who we are

This website is operated by RAINHOPE LLC FZ, trading as Zudax International. We are the controller of the personal data described below.

RAINHOPE LLC FZ
Meydan Free Zone, Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba 1, Dubai, United Arab Emirates
E-mail: info@zudaxinternational.com

If you are in the European Economic Area or the United Kingdom and have a question or a request about your personal data, write to us at info@zudaxinternational.com and we will answer within one month.

2. The personal data we collect

Order and delivery data — your first and last name, e-mail address, telephone number, billing address, delivery address, the items you ordered, the amount and currency paid, and the order and shipment history attached to them.
Payment data — we never receive or store your full card number. Payment is completed by our payment provider, which returns to us only a transaction reference, the payment status, the amount, and the card brand with the last four digits.
Account data — if you open an account: your e-mail address, an encrypted form of your password, the addresses you save, and your order history.
Enquiries — when you write through the contact form, by e-mail or on WhatsApp: your name, e-mail address, telephone number if you give one, the message itself, the page you wrote from, and the language you wrote in. Messages sent through the form are stored in this website’s database as well as delivered to our mailbox.
Serial verification data — when a serial number is entered on the verification page we record the number typed, the result, the date and time, the interface language, the IP address of the device used, and the browser identification string. We use this to identify counterfeit codes and to detect repeated abuse of the verification service.
Technical data — IP address, browser and device information, and the pages requested, recorded in our hosting provider’s standard web server logs and in the cookies described in section 8.

We do not ask for health data and we do not want it. Please do not send us medical information. If you do, we will use it only to answer you and delete it once we have.

3. Why we process it, and on what basis

To take, prepare, ship and invoice your order, and to handle returns and refunds — because it is necessary to perform the contract between you and us.
To operate an account you have opened and to answer your enquiries — performance of that contract, or the consent you gave when you sent us the message.
To verify serial numbers, identify counterfeits, prevent fraudulent payment and keep this website secure — our legitimate interest in protecting our customers, our products and our business, weighed against your interests and rights.
To keep accounting, tax and customs records — compliance with legal obligations that apply to us.
To send you commercial messages — only with your consent, which you may withdraw at any time.

We do not use your personal data for automated decision-making or profiling that produces legal effects for you.

4. Who we share it with

We do not sell personal data and we do not trade it. We share it only with the service providers we need in order to run the shop, only for that purpose, and only under agreements that bind them to confidentiality and to our instructions.

Stripe — payment processing and fraud prevention. Your payment and billing details are submitted directly to Stripe. Stripe also processes some of that data as an independent controller for its own anti-fraud and regulatory obligations.
Postmark — delivery of transactional e-mail such as order confirmations. It receives your name, e-mail address and the content of the message sent to you.
Google — our business mailboxes run on Google Workspace, so correspondence with us is stored there. This website also loads its typefaces from Google Fonts, which means your IP address is disclosed to Google each time a page loads.
Hostinger — hosting of this website and its database, including web server logs.
Cloudflare — management of the domain name records for zudaxinternational.com.
Carriers and customs authorities — the name, address, telephone number and package details needed to deliver your order and clear it through customs in the destination country.
Professional advisers and public authorities — where we are required by law to disclose data, or need to establish, exercise or defend a legal claim.

5. Transfers outside your country

We are established in the United Arab Emirates, and the providers named above operate in the United States and the European Union. Personal data you give us will therefore be transferred to and stored in countries other than the one you live in, including outside the European Economic Area and the United Kingdom. Where such a transfer is made from the EEA or the UK, it takes place under the data processing terms and the European Commission’s standard contractual clauses — with the United Kingdom addendum where it applies — that form part of our agreements with those providers, together with the technical and organisational safeguards they maintain. You may ask us for further detail at the address in section 1.

6. How long we keep it

Order, invoice and payment records — for as long as we are required to keep commercial and tax records, which we treat as seven years from the end of the year in which the order was placed.
Account data — for as long as your account remains open. If you close it we delete the account and keep only the order records described above.
Contact form messages and correspondence — 24 months after our last exchange with you, unless the matter is still open.
Serial verification logs — 12 months, after which they are deleted.
Web server logs — for the short period applied by our hosting provider as part of its standard security logging.
Records of marketing consent — until you withdraw your consent, and for a reasonable period afterwards as evidence of the withdrawal.

7. Your rights

Subject to the law that applies to you, you may ask us to:

confirm whether we hold personal data about you and give you a copy of it;
correct data that is inaccurate or incomplete;
delete data we no longer have a reason to keep;
restrict how we use it, or object to our use of it where we rely on our legitimate interests;
give you the data you provided in a portable, machine-readable form, or send it to another provider;
withdraw a consent you gave earlier, without affecting what we lawfully did before you withdrew it.

Write to info@zudaxinternational.com. We will answer within 30 days. We may need enough information to be satisfied that the request comes from you; anything you send us for that purpose will be used for nothing else.

8. Cookies

This website sets a small number of cookies that are necessary for it to work. They hold your shopping basket, keep you signed in if you have an account, remember the language you chose, and carry the security token that protects our forms from misuse. These cannot be switched off without breaking the shop.

At the payment step our payment provider sets its own cookies to detect fraudulent transactions. They are set by Stripe and read only by Stripe.

We run no advertising cookies, and we use no analytics or tracking scripts on this website. If that ever changes we will ask for your consent first and update this page before doing so.

Because our typefaces are loaded from Google Fonts, your browser contacts Google’s servers when a page opens, and your IP address is visible to Google in that request.

9. Security

The whole site is served over an encrypted connection. Access to the order database and to our mailboxes is limited to the people who need it and is protected by individual accounts. No system is perfect: if a breach ever affects your data and is likely to put you at risk, we will inform you and the competent authority as the law requires.

10. Children

Our products and this website are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, write to us and we will delete it.

11. Complaints

If you are unhappy with how we have handled your data, please tell us first — we would rather put it right. You also have the right to complain to a supervisory authority: in the United Arab Emirates, the UAE Data Office; in the European Economic Area or the United Kingdom, the data protection authority of the country where you live or work.

12. Changes to this policy

If we change the way we handle personal data we will update this page and change the date below. Where a change is significant we will say so on this page before it takes effect.

Last updated: 6 September 2026.