Privacy Policy

When you place an order, we collect:

• Your name, email address and phone number.
• Your shipping address (country, city, postal code and address).
• Your order details: the rugs, sizes and prices you ordered, and the order status.

If you email us or use our contact form, we also keep the messages you send us and our replies (see Contact form and messages below).

Payments are handled by Stripe on its own secure payment page. We do not see or store your card number.

• To make, ship and deliver your order.
• To send you emails about your order, such as your order confirmation, payment issues and refunds.
• To answer your questions and give you support.
• To send our newsletter, only if you signed up for it (see Newsletter below), and, only then, one reminder if you start an order and don’t finish paying.

When you write to us through the contact form, we store your name, email address, the subject, your message and the order number if you give one, together with the date. We also keep a one-way scrambled form of your IP address (we cannot turn it back into your address). We use this only to read and answer your message, to link it to your order, and to block spam and abuse, for example by limiting how many messages one person can send in an hour. We email you a short confirmation that we received it. We keep messages for as long as needed to deal with your request and any follow-up, and you can ask us to delete them at any time.

If you sign up for the ZenRug list, we store your email address, the date, the page you signed up on and the exact wording you agreed to. We use it only to send you emails about new rugs, stories from Morocco and made-to-order news, and we send you a welcome email when you join. Signing up is your choice and separate from buying a rug.

You can also sign up at checkout, by ticking “Email me news and offers” (it is never ticked for you). If you have signed up and start an order but don’t finish paying, we send you one email 3 hours later with a link back to the payment page — never more than one such reminder a week. If you haven’t signed up, we don’t send it.

You can unsubscribe at any time, with one click: every newsletter email has an unsubscribe link, and your email app may show its own unsubscribe button. Once you unsubscribe we stop emailing you. We keep your address on a do-not-email record so we do not sign you up again by mistake; if you want it erased completely, email zaaraoui@zenrug.shop and we will delete it.

About 7 days after your rug is delivered, we send you one email with a private link to review it. Reviewing is your choice. If you do, your rating and words are shown on the rug’s page with the name you choose, the size you bought, your country and the date, after we check them. We may reply in public. Ask us at zaaraoui@zenrug.shop and we will delete your review.

After you pay, the order confirmation page may show a box from Google asking whether you would like a short survey about your order. If you agree, Google receives your email address, your order number, your country and the expected delivery date, and emails you its survey after delivery. Your answers count towards ZenRug’s rating on Google and are handled under Google’s privacy policy. If you decline or close the box, nothing is sent. We never offer anything in exchange for a review.

To show you where your order is, the tracking page asks for your order number and the email address used for the order. It only shows the order status, and the carrier and tracking number once shipped. To protect your order, the page limits repeated attempts and gives the same answer whether or not an order exists.

We do not sell your personal data.

We keep order records for as long as needed to fulfill orders and meet legal and tax obligations.

If you start a checkout but do not pay, we remove your name, email address, phone number and address from it after 30 days. We keep only the amount, the rugs, the dates and the country, with nothing that says who you are.

We use these service providers to run the shop. They process information on our behalf:

• Stripe — payment processing.
• Supabase — storing order and customer records.
• Resend — sending order, contact and newsletter emails.
• Netlify — hosting this website.
• Google — only if you ask for its review survey after an order (see Google Customer Reviews above).
• The carrier that delivers your rug — needs your name, address and phone number to deliver it.

Necessary storage (your cart, your cookie choice) is always on. Analytics and marketing tools only run if you accept them in the cookie banner; you can change your choice any time from the footer. We never send your name, email address, phone number or address to them. See our Cookie Policy for the exact tools and cookies.

To ask about your personal information, or to ask us to correct or delete it, email zaaraoui@zenrug.shop. We will answer within a reasonable time.

When we delete your information, we remove your name, email address, phone number and addresses, your messages to us, your newsletter sign-up and the content of the emails we sent you. We keep the order records the law requires for accounting and tax (order number, date, rugs, amounts, refunds, and the country and state it shipped to), without anything that says who you are. If an order is still being made, shipped or refunded, we finish it first. Stripe keeps its own payment records under its privacy policy.

ZenRug LLC
5203 Juan Tabo Blvd NE, Suite 2B
Albuquerque, NM 87111
USA