0
Zudax

Privacy Policy

This policy explains what personal data we collect when you visit this website, place an order, write to us, or verify a serial number; why we collect it; who we share it with; and what you can ask us to do about it.

1. Who we are

This website is operated by RAINHOPE LLC FZ, trading as Zudax International. We are the controller of the personal data described below.

RAINHOPE LLC FZ
Meydan Free Zone, Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba 1, Dubai, United Arab Emirates
E-mail: info@zudaxinternational.com

If you are in the European Economic Area or the United Kingdom and have a question or a request about your personal data, write to us at info@zudaxinternational.com and we will answer within one month.

2. The personal data we collect

  • Order and delivery data — your first and last name, e-mail address, telephone number, billing address, delivery address, the items you ordered, the amount and currency paid, and the order and shipment history attached to them.
  • Payment data — we never receive or store your full card number. Payment is completed by our payment provider, which returns to us only a transaction reference, the payment status, the amount, and the card brand with the last four digits.
  • Account data — if you open an account: your e-mail address, an encrypted form of your password, the addresses you save, and your order history.
  • Enquiries — when you write through the contact form, by e-mail or on WhatsApp: your name, e-mail address, telephone number if you give one, the message itself, the page you wrote from, and the language you wrote in. Messages sent through the form are stored in this website’s database as well as delivered to our mailbox.
  • Physician registrations — when a physician registers with us to receive product and safety information for a case report: name, e-mail address, telephone number if given, specialty, country of licence, professional registration number or a link to the public register entry, the material requested, the date and result of our licence check, and a record of the material we sent and when. To check a licence we may consult the public register kept by the licensing authority; we use no other source.
  • Safety reports — when a physician tells us about a suspected unwanted effect: the physician’s name and e-mail address and the report itself. We ask for reports that contain nothing that could identify the patient — only the batch number, what happened, how many days after first use it began, and the patient’s sex, age range and country — and we delete any identifying detail that reaches us.
  • Serial verification data — when a serial number is entered on the verification page we record the number typed, the result, the date and time, the interface language, the IP address of the device used, and the browser identification string. We use this to identify counterfeit codes and to detect repeated abuse of the verification service.
  • Technical data — IP address, browser and device information, and the pages requested, recorded in our hosting provider’s standard web server logs and in the cookies described in section 8.

Apart from safety reports, which we ask to receive without anything that could identify the patient, we do not ask for health data and we do not want it. Please do not send us medical information. If you do, we will use it only to answer you and delete it once we have.

3. Why we process it, and on what basis

  • To take, prepare, ship and invoice your order, and to handle returns and refunds — because it is necessary to perform the contract between you and us.
  • To operate an account you have opened and to answer your enquiries — performance of that contract, or the consent you gave when you sent us the message.
  • To verify serial numbers, identify counterfeits, prevent fraudulent payment and keep this website secure — our legitimate interest in protecting our customers, our products and our business, weighed against your interests and rights.
  • To keep accounting, tax and customs records — compliance with legal obligations that apply to us.
  • To send you commercial messages — only with your consent, which you may withdraw at any time.
  • To verify that a registering physician is licensed, to send the material requested, and to keep a record of what we provided so that it can be disclosed accurately in a publication — our legitimate interest in making scientific material available only to licensed physicians and in keeping an accurate record of it, weighed against the physician’s interests and rights. We never use these details for sales or marketing.
  • To record and assess safety reports and, where the law requires, notify the competent authorities — our legitimate interest in the safety of our product and, where one applies, compliance with a legal obligation.

We do not use your personal data for automated decision-making or profiling that produces legal effects for you.

4. Who we share it with

We do not sell personal data and we do not trade it. We share it only with the service providers we need in order to run the shop, only for that purpose, and only under agreements that bind them to confidentiality and to our instructions.

  • Stripe — payment processing and fraud prevention. Your payment and billing details are submitted directly to Stripe. Stripe also processes some of that data as an independent controller for its own anti-fraud and regulatory obligations.
  • Postmark — delivery of e-mail sent by this website: order and account messages to you, and notifications of contact-form messages and physician registrations to our mailbox. It receives the names and e-mail addresses in those messages and, except for registration notifications, their content.
  • Google — our business mailboxes run on Google Workspace, so correspondence with us is stored there. This website also loads its typefaces from Google Fonts, which means your IP address is disclosed to Google each time a page loads.
  • Hostinger — hosting of this website and its database, including web server logs.
  • Cloudflare — management of the domain name records for zudaxinternational.com.
  • Carriers and customs authorities — the name, address, telephone number and package details needed to deliver your order and clear it through customs in the destination country.
  • Professional advisers and public authorities — where we are required by law to disclose data, including notifying a safety report to the competent authority, or need to establish, exercise or defend a legal claim.

5. Transfers outside your country

We are established in the United Arab Emirates, and the providers named above operate in the United States and the European Union. Personal data you give us will therefore be transferred to and stored in countries other than the one you live in, including outside the European Economic Area and the United Kingdom. Where such a transfer is made from the EEA or the UK, it takes place under the data processing terms and the European Commission’s standard contractual clauses — with the United Kingdom addendum where it applies — that form part of our agreements with those providers, together with the technical and organisational safeguards they maintain. You may ask us for further detail at the address in section 1.

6. How long we keep it

  • Order, invoice and payment records — for as long as we are required to keep commercial and tax records, which we treat as seven years from the end of the year in which the order was placed.
  • Account data — for as long as your account remains open. If you close it we delete the account and keep only the order records described above.
  • Contact form messages and correspondence — 24 months after our last exchange with you, unless the matter is still open.
  • Serial verification logs — 12 months, after which they are deleted.
  • Web server logs — for the short period applied by our hosting provider as part of its standard security logging.
  • Records of marketing consent — until you withdraw your consent, and for a reasonable period afterwards as evidence of the withdrawal.
  • Physician registrations — registrations we cannot verify are deleted three months after we receive them; the others, including our correspondence, 24 months after our last exchange.
  • Safety reports — ten years from receipt, so that they remain available for as long as a question about the product’s safety could reasonably arise.

7. Your rights

Subject to the law that applies to you, you may ask us to:

  • confirm whether we hold personal data about you and give you a copy of it;
  • correct data that is inaccurate or incomplete;
  • delete data we no longer have a reason to keep;
  • restrict how we use it, or object to our use of it where we rely on our legitimate interests;
  • give you the data you provided in a portable, machine-readable form, or send it to another provider;
  • withdraw a consent you gave earlier, without affecting what we lawfully did before you withdrew it.

If you are in Türkiye, you also have the rights listed in Article 11 of Law No. 6698 on the Protection of Personal Data. Write to info@zudaxinternational.com. We will answer within 30 days. We may need enough information to be satisfied that the request comes from you; anything you send us for that purpose will be used for nothing else.

8. Cookies

This website sets a small number of cookies that are necessary for it to work. They hold your shopping basket, keep you signed in if you have an account, remember the language you chose, and carry the security token that protects our forms from misuse. These cannot be switched off without breaking the shop.

At the payment step our payment provider sets its own cookies to detect fraudulent transactions. They are set by Stripe and read only by Stripe.

We run no advertising cookies, and we use no analytics or tracking scripts on this website. If that ever changes we will ask for your consent first and update this page before doing so.

Because our typefaces are loaded from Google Fonts, your browser contacts Google’s servers when a page opens, and your IP address is visible to Google in that request.

9. Security

The whole site is served over an encrypted connection. Access to the order database and to our mailboxes is limited to the people who need it and is protected by individual accounts. No system is perfect: if a breach ever affects your data and is likely to put you at risk, we will inform you and the competent authority as the law requires.

10. Children

Our products and this website are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, write to us and we will delete it.

11. Complaints

If you are unhappy with how we have handled your data, please tell us first — we would rather put it right. You also have the right to complain to a supervisory authority: in the United Arab Emirates, the UAE Data Office; in the European Economic Area or the United Kingdom, the data protection authority of the country where you live or work; in Türkiye, the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

12. Changes to this policy

If we change the way we handle personal data we will update this page and change the date below. Where a change is significant we will say so on this page before it takes effect.

Last updated: 25 September 2026.