Order data processing
The order system handles name, phone, governorate, city or area, nearest landmark, items, colors, quantities, totals, payment method, order and payment states, transfer-proof references and administrative verification records. It does not request passwords, verification codes or secret card credentials, or upload payment-proof images.
Privacy and deletion requests use WhatsApp or Instagram. Staff review linked records, requester identity and applicable legal duties before deletion or de-identification. Accepted amounts and immutable financial events are preserved. Refund approval does not mean a refund transfer has been completed.
Website: https://naizak.store
1. Who we are
NAIZAK / نيزك is an independent Iraqi clothing brand based in Baghdad, Iraq. It is not described as a registered company. This policy covers the NAIZAK website and customer-support processing.
WhatsApp: +9647762890444 · Instagram: @naizak.brand. Do not send passwords, verification codes or secret card details.
2. Information used for orders
- Guest checkout requires full name, Iraqi phone number, governorate, city or area, and nearest landmark. No customer account or email is required.
- Order records contain the selected product, photographed color, fit, size, quantity, authoritative amounts, discount allocation, order number and payment/order status.
- Manual payment and support records can include evidence references, staff verification and reconciliation decisions, and relevant customer consent. The website does not collect full bank-card credentials or upload payment-proof images.
- Security processing uses session and request identifiers, network-derived abuse counters, staff identities, permissions and security events.
3. Why information is used
Information is used to process and deliver orders, arrange approved manual payments, answer support requests, review returns or refunds, record customer-approved financial changes, and protect the service. Submitting payment proof is not confirmation that funds have arrived. There is no automatic card gateway or automatic refund transfer.
4. Storage and access
The website is prepared for Cloudflare Workers and D1. Order contact details are encrypted separately from financial history. Authorized staff can access the information required by their permissions. Immutable financial records reference protected contact records rather than storing plaintext checkout details in operation payloads. Delivery providers receive only information needed for delivery. Encryption does not make data anonymous or remove lawful disclosure obligations.
5. Official communication channels
WhatsApp and Instagram are operated by Meta. If you choose to contact NAIZAK there, messages and attachments are also processed under the platform’s own terms and privacy arrangements. Staff may retain necessary evidence references for the order. The website does not activate a Meta messaging API, AI support, tracking pixel or third-party analytics integration. Do not send unnecessary sensitive information.
WhatsApp: +9647762890444 · Instagram: @naizak.brand. Do not send passwords, verification codes or secret card details.
6. Cookies and browser storage
Essential, HttpOnly cookies support Admin authentication and guest-checkout request protection. Browser storage keeps your cart, wishlist and limited order-confirmation acknowledgement on your device. Design Studio artwork is processed in the current browser tab for editing and PNG export; it is not uploaded to NAIZAK server-side artwork storage. Leaving or refreshing the tab can discard the design. Browser storage can be cleared using your browser controls.
7. Retention and deletion
Security audit records follow the approved six-month security-audit policy. This period does not automatically apply to order, payment, refund or consent evidence. Financial records and necessary linked evidence must be reviewed against applicable legal duties and disputes before deletion. A final legally reviewed financial-retention schedule and processor/backup handling instructions must be approved before public release; no statutory duration is asserted here. Verified, eligible requests may use controlled contact de-identification or key destruction without changing accepted amounts or immutable ledger events. Backups and external support messages need separate handling; deletion from one system does not prove erasure from all copies.
8. Your requests
Contact NAIZAK for access, correction, deletion or an explanation of how your information is used. Staff verify the requester and scope before disclosing or changing private data. The service target for eligible deletion requests is within 30 days after the required verification information is received, subject to applicable exceptions; this is not a financial-record retention period. See User Data Deletion.
WhatsApp: +9647762890444 · Instagram: @naizak.brand. Do not send passwords, verification codes or secret card details.
9. Order information and security
Successful checkout displays an order number and confirmation. If you lose that information, contact NAIZAK. Staff manually verify the customer and order before sharing private information. There is no self-service recovery, public phone/email lookup, or publicly accessible private receipt. No security measure guarantees zero risk.
10. Updates and mandatory rights
Material changes require appropriate review and disclosure. These explanations do not limit mandatory consumer or privacy rights. The public release remains subject to verified seller disclosures and qualified Iraqi legal review.