Privacy Policy

Last updated: 26 October 2026

This policy explains how ZENTRYA – FZCO handles personal data when you use ml24shop.com. It is based on the principles of the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL): lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, and security. As a company licensed by IFZA and operating from Dubai Silicon Oasis, a free zone that has no data-protection law of its own, we follow the federal PDPL.

1. Controller

ZENTRYA – FZCO, IFZA Properties, DSO-IFZA, Dubai Silicon Oasis, Dubai, United Arab Emirates. Email: info@myzentrya.com, phone +971 54 383 3642. Manager: Michael Mittmann. For all privacy questions and requests, contact our privacy contact at info@myzentrya.com (subject line "Privacy").

2. Data we collect

• Contact and order data: name, company, billing and delivery address, email, phone, order contents, vehicle details (e.g. VIN) you provide.
• Payment data: payment method, transaction status. Card data is processed by the payment provider; we do not store full card numbers.
• Licence data: licence holder details, licence key and activation status.
• Communication: emails and messages you send us.
• Technical data: IP address, browser, device, pages visited, cookies (see section 6).

3. Purposes and grounds

We process data to perform your order (contract, delivery, licensing, invoicing, customer service), to comply with legal obligations (accounting, customs, export-control and sanctions checks), for fraud prevention and shop security (legitimate interest), and for marketing only with your consent, which you may withdraw at any time.

4. Processors and recipients

We share data only as needed with:

• our e-commerce platform provider (Shopify) for hosting the shop and processing orders;
• banks, to process bank transfers;
• suppliers and logistics partners who ship goods directly to you, shipping carriers and customs brokers (name, address, phone, shipment contents);
• email and communication service providers (Shopify Email and Shopify order/shipping notifications; our mailbox info@myzentrya.com; WhatsApp for customer support, if you contact us there);
• authorities where required by law.

We do not sell personal data.

5. International transfers

Our service providers may process data outside the UAE (for example in the USA, Canada, Ireland or the country of your shipment). We transfer data only where necessary to perform your order or provide our services, and we take reasonable steps (contractual safeguards, provider security standards) to ensure adequate protection.

6. Cookies

The shop uses cookies required for cart, checkout and security, and – where you agree – analytics or marketing cookies. The shop runs on Shopify, which places the cookies listed for merchant storefronts in Shopify's Cookie Policy (shopify.com/legal/cookies), in particular: necessary cookies _shopify_essential, _shopify_test, cart, cart_currency, discount_code, localization and __Host-Http-shop_binding; the Shopify reporting/analytics cookie _shopify_analytics and the Shopify marketing cookie _shopify_marketing. We use the Shopify app "Translate & Adapt" to provide translated shop content. We do not use any additional third-party analytics tools, advertising pixels or tracking tags.

7. Retention

We keep order and invoice data as long as required by UAE accounting and tax rules – we keep invoices and order records for 5 years after the end of the financial year in which the order was completed – and other data only as long as needed for the purpose, then delete or anonymise it.

8. Your rights

You may request access to, correction, deletion or restriction of your personal data, object to processing (including direct marketing), withdraw consent, and request a copy of your data in a portable format, subject to applicable law. Send requests to info@myzentrya.com; we may need to verify your identity. You may also lodge a complaint with the UAE Data Office (the competent authority under the PDPL).

9. Security

We use appropriate technical and organisational measures, including encrypted (HTTPS) connections.

10. Changes

We may update this policy; the current version is published on this page. Last updated: 26 October 2026.