1. What We Collect

• Identity and contact data: name, email, phone, billing and shipping addresses.
• Order and payment data: items purchased, order value, payment method. Card numbers are processed by our payment processors (Shopify Payments and the card networks) and never stored on RYZE systems.
• Account data: credentials, preferences, wishlist, saved details.
• Support communications: emails, WhatsApp messages, and the contents of AI-assistant conversations you choose to have.
• Usage and device data: pages viewed, interactions (clicks, scrolls, taps), approximate location from IP, device and browser type, collected through cookies and the analytics tools in Section 4.

2. Why, and on What Legal Basis

3. Cookies

We use strictly necessary cookies (cart, checkout, session; set by Shopify) and analytics cookies (set by Microsoft Clarity, e.g. _clck and _clsk). You can block or delete cookies in your browser settings; strictly necessary cookies cannot be disabled without breaking checkout. Where our advertising runs on Meta platforms (Facebook/Instagram), Meta pixels or equivalent tools may set identifiers subject to Meta's own policies.

4. Analytics: Microsoft Clarity and Clarity Copilot, in Full

We use Microsoft Clarity to understand how visitors use the store through heatmaps, session recordings, and behaviour analytics. In plain terms, this is what that means:

• What is captured: your interactions with the site: mouse movement, clicks, taps, scrolling, pages visited, time on page, device and browser characteristics, and approximate location derived from IP. Session recordings replay these interactions as they happened on the page.
• What is masked: Clarity masks sensitive input content by default; we configure checkout and personal fields to be masked so that recordings do not capture card numbers or passwords.
• Where it goes: the captured data is transmitted to and processed on Microsoft servers, which may be located outside Egypt (including the United States).
• Microsoft's own use, including AI: under Microsoft's Clarity terms, Microsoft may use the captured data to operate and improve Microsoft's own products and services, including the training of Microsoft's machine-learning and generative-AI models. Clarity also offers "Clarity Copilot," a generative-AI feature that summarises session data. By using our site with analytics active, interaction data may accordingly contribute to Microsoft's AI systems under Microsoft's Privacy Statement.
• Your controls: you may block Clarity with browser tracking-prevention features, content blockers, or by disabling cookies for ryzeeg.com; the store keeps working without analytics. You may also contact us (Section 8) to object to analytics processing of your sessions.

5. Our AI Features: the RYZE Concierge

• Our AI shopping assistant (the "RYZE AI" concierge and the on-site AI chat widget) is operated with third-party AI infrastructure hosted on Microsoft Azure. Messages you type into the assistant, together with limited context (such as the page you are on and, where relevant, your order reference), are processed by that infrastructure to generate answers.
• Do not enter sensitive data into the chat: no card numbers, passwords, national ID numbers, or health information. The assistant never needs them.
• Conversations may be retained in our support systems for quality and dispute-resolution purposes for up to 12 months, then deleted or anonymised.
• AI answers are informational. They do not modify our policies; the written policies always govern (see each policy's AI clause). We do not use the assistant to make automated decisions producing legal effects about you.

6. Who We Share Data With

We never sell your personal data.

7. Retention: With Timestamps

Each record carries creation timestamps in our systems (Africa/Cairo time), and deletion runs are logged.

8. Your Rights under Law No. 151 of 2020

• To know what personal data of yours we hold, and to access it;
• To correct inaccurate data, and to erase data we no longer have grounds to keep;
• To object to, or restrict, specific processing, including analytics and marketing;
• To withdraw any consent at any time, without affecting prior lawful processing;
• To complain to the Egyptian Personal Data Protection Centre once operational, or to the competent authority.

Exercise any right by writing to support@ryzeeg.com with the subject "Data Request." We verify identity, then respond within 30 days of the request timestamp, extendable once by 30 days for complex requests with written notice.

9. International Transfers, Security, and Breach

Data processed by Shopify and Microsoft may be stored outside Egypt (including Canada and the United States). We transfer only under the safeguards the PDPL and its regulations permit, including your informed consent given by using features whose cross-border nature this policy discloses, and contractual protections with our processors. We apply technical and organisational security measures (encryption in transit, access controls, least-privilege administration). If a personal-data breach threatens your rights, we will notify the competent authority and affected users as the PDPL requires, and record the breach timeline, discovery time, containment time, and notification time, in Cairo time.

10. Children

The Services, including the AI assistant, are intended for users aged 18 and above. If you believe a child has provided us personal data, contact us immediately and we will delete it.

11. Changes and Contact

Material changes will be announced on this page with a new version number, revision timestamp, and effective date; the Document Control table above is the authoritative history. Contact for anything in this policy: support@ryzeeg.com · +20 105 500 1083. Company identification is in the Legal Notice; all channels are in Contact Information.