Privacy policy
Last updated: [OWNER: date of the reviewed version]
Who we are
This policy explains how [OWNER: registered legal name of the company] (“Zone4Cards”, “we”) processes personal data on the Zone4Cards website, reseller portal and reseller API.
We process personal data in line with the data-protection laws of the Arab Republic of Egypt. [OWNER: data protection officer and any registration or licence details, if required.]
What we collect
Zone4Cards serves businesses, so most of the data we hold is about the people who act for them:
- Reseller application: company name, contact person, business email and phone number.
- Business verification: the documents we request during the review, such as the commercial register and tax card.
- Portal accounts: name, email address and role. Passwords and two-step verification recovery codes are stored only as one-way hashes, and the authenticator secret is stored encrypted.
- Security and audit records: sign-in attempts and their results, and actions on accounts, wallets, top-ups, orders, API keys and webhooks, recorded with the time, IP address and browser user agent.
- Wallet and order records: top-up requests and proofs of payment, wallet transactions, orders, and a record of every code reveal with the user, time, IP address and browser. Codes themselves are stored encrypted.
- API and webhooks: API key names, permissions and usage dates, the webhook addresses you register, and records of webhook deliveries.
- Sessions: while you use the site or portal, session data is kept on our servers and may include your IP address and browser user agent.
- [OWNER: confirm what the web server and error logs record.]
Bot protection (Cloudflare Turnstile)
The reseller application form and the portal sign-in page use Cloudflare Turnstile to block automated abuse. Turnstile runs in your browser, and Cloudflare processes technical signals such as your IP address and browser characteristics. To check the result, our server sends Cloudflare the Turnstile token and your IP address.
Other pages of this website do not load Turnstile or any other third-party script.
Why we use this data
- To review applications and verify businesses before approval.
- To run reseller accounts, wallets, orders and code delivery.
- To secure the platform, prevent fraud and investigate misuse.
- To keep evidence for defective-code claims and payment disputes.
- To meet our legal, tax and accounting obligations.
[OWNER: legal basis for each purpose.]
Where data is stored
[OWNER: where the platform is hosted, and any transfers of personal data outside Egypt.]
How long we keep data
We keep personal data for as long as it is needed for the purposes above and to meet legal obligations. Audit and reveal records are kept as evidence for claims and disputes.
[OWNER: retention period for each category of data.]
How we protect data
Codes are stored encrypted, passwords are hashed, portal sign-in requires two-step verification, access inside each reseller account depends on the user’s role, and sensitive actions are recorded in audit logs.
Your rights
Subject to applicable law, you may ask to access, correct or delete your personal data, or object to how it is used. Some records, such as audit and transaction records, may have to be kept for legal reasons.
[OWNER: how to submit a request, and how we respond.]
Changes and questions
We may update this policy; the date at the top of this page shows the current version. For questions about your data, see our Contact page.