Legal
Privacy Policy
How we collect, use, and protect your personal data.
Last updated: January 15, 2025
01
Information We Collect
We collect information you provide directly to us, such as when you create an account, make a transaction, or contact support. This includes:• Account data: Full name, email address, phone number, and password credentials.• Transaction data: Purchase history, payment method details (tokenized and never stored in plain text), and voucher redemption records.• Device & usage data: IP address, browser type, operating system, referring URLs, and in-app interaction logs collected automatically via cookies and similar technologies.• Identity verification data: National ID or passport details required for KYC compliance under applicable financial regulations.
02
How We Use Your Information
Digital Zone uses collected data solely to deliver and improve our services. Specific purposes include:• Processing transactions and delivering purchased vouchers, tickets, and eSIM plans.• Providing customer support and responding to your requests.• Sending transactional notifications (receipts, security alerts) and, with your consent, promotional communications.• Detecting and preventing fraud, abuse, and unauthorized access.• Complying with applicable laws and regulatory obligations including anti-money laundering (AML) requirements.• Conducting internal analytics to improve platform performance and user experience.
03
Data Sharing & Disclosure
We do not sell your personal information. We share data only in the following circumstances:• Service providers: Trusted third parties who operate infrastructure on our behalf (payment processors, cloud providers, identity verification services) under strict data processing agreements.• Partner merchants: When you redeem a voucher or purchase a ticket, the merchant receives only the data necessary to fulfill your order.• Legal obligations: When required by applicable law, court order, or governmental authority.• Business transfers: In the event of a merger, acquisition, or sale of assets, data may transfer to the acquiring entity subject to equivalent privacy protections.
04
Data Security
We implement industry-standard safeguards including AES-256 encryption at rest, TLS 1.3 in transit, role-based access controls, and regular third-party security audits. Our systems are PCI-DSS Level 1 compliant for all payment card data environments.Despite these measures, no internet transmission or electronic storage is completely secure. We encourage you to use strong, unique passwords and enable two-factor authentication on your account.
05
Cookies & Tracking Technologies
We use essential cookies necessary for platform operation, analytics cookies (with your consent) to understand usage patterns, and preference cookies to remember your settings. You can manage cookie preferences through our cookie consent banner or your browser settings. Disabling certain cookies may affect platform functionality.
06
Your Rights
Depending on your jurisdiction, you may have the right to:• Access a copy of the personal data we hold about you.• Rectification of inaccurate or incomplete data.• Erasure ("right to be forgotten") subject to our legal retention obligations.• Data portability — receive your data in a structured, machine-readable format.• Restrict or object to certain processing activities.• Withdraw consent at any time for processing based on consent (without affecting prior processing).To exercise any of these rights, contact us at privacy@digitalzone.iq. We respond within 30 days.
07
Data Retention
We retain personal data for as long as your account is active or as needed to provide services. Transaction records are retained for seven years to comply with financial regulatory requirements. You may request deletion of non-regulated data at any time.
08
Children's Privacy
Digital Zone services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If we learn that we have inadvertently collected such data, we will delete it promptly.
09
Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via in-app notification or email at least 14 days before taking effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.
10
Contact Us
For privacy-related questions or to exercise your rights:Digital Zone — Privacy TeamEmail: privacy@digitalzone.iqAddress: Baghdad, Iraq — Digital Zone HQ