Privacy Policy

1. Who we are and when this policy applies

Zolaymi LLC is a Wyoming limited liability company that provides remote consulting, implementation, technical support and managed services for WordPress and WooCommerce businesses. In this Privacy Policy, "Zolaymi," "we," "us" and "our" mean Zolaymi LLC. "Website" means https://www.zolaymi.com and any related pages controlled by Zolaymi.

This policy applies when we act as a controller because we decide why and how personal data is processed. It also explains, at a high level, when we may act as a processor or service provider for a client.

Our services are intended for persons aged 18 or older. We do not knowingly collect personal data directly from children. A parent or guardian may contact [email protected] about suspected child data.

2. Controller and processor roles

We are a controller when we decide why and how to process information relating to website visitors, customers, prospective customers, account holders, newsletter subscribers, support contacts, review participants, contractor enquiries, legal contacts and compliance communications.

We may act as a processor, service provider or similar role when, under a client's instructions, we access or process personal data contained in WooCommerce stores, order records, customer accounts, abandoned carts, support tickets, transactional email systems, analytics systems, advertising systems, CRM or marketing platforms, shipping systems, review systems, APIs, webhooks, databases, backups and server logs.

Where we act as a processor for a business client, the Data Processing Agreement and the client's documented instructions govern that processing.

3. Information we may collect

Depending on how you interact with us and which services are purchased, we may process the following categories of information:

• Identity information, such as name, company name, role and account username.
• Contact information, such as email address, telephone number, WhatsApp details, billing address and country or region.
• Billing, transaction, invoice, tax-supporting and payment-status information.
• Account information, order references, subscriptions and service history.
• Project and contract information, including quotations, instructions, approvals, technical notes, deliverables and handover records.
• Support correspondence, attachments, issue descriptions, error messages, screenshots, access logs and ticket activity.
• Technical and device information, including IP address, browser, device, operating system, referrer, cookie identifiers, usage information, security logs and analytics data.
• Advertising attribution, cart and checkout information, review information, appointment information, client-system information and fraud-prevention information.

We do not intentionally request special-category data unless it is necessary for a lawful purpose and handled under appropriate safeguards. Customers should not send sensitive customer exports, passwords, API keys or payment-card data through ordinary forms or email.

4. Sources of information

Information may come from you, your employer or company, website interactions, WooCommerce, Stripe, PayPal, analytics and advertising providers, contact and support forms, scheduling systems, client systems, publicly available business information, fraud-prevention and security providers, and referrals.

If you provide information about another person, you must have the right to do so and must provide any notices or obtain any consents required by applicable law.

5. Purposes and legal bases

6. Providers and third-party services

Current or expected providers may include WooCommerce, Stripe, PayPal, Kinsta Managed WordPress Hosting, Cloudflare, Cloudflare Turnstile, Google Workspace, Postmark, Google Analytics 4, Google Tag Manager, Google Ads, Meta Pixel, Meta Conversions API, Microsoft Clarity, Calendly, BlogVault, Complianz Premium for WordPress, Fluent Support, Brevo, Crisp, Twilio WhatsApp Business Platform and Prighter where representative services are required.

Some providers apply only when the relevant service, integration, cookie category, support channel, newsletter tool, live chat or WhatsApp workflow is enabled.

Third-party providers process information under their own terms and privacy notices. We do not control their independent processing, outages, pricing, policy changes or account decisions.

7. Sale, sharing and targeted advertising

Zolaymi does not sell personal data for money. Some U.S. state privacy laws may define certain advertising disclosures as "sharing," "sale" or "targeted advertising" even when no money is exchanged.

The following items must be assessed and implemented if legally required: "Do Not Sell or Share My Personal Information" link, targeted-advertising opt-out, Global Privacy Control handling, and authorized-agent request process. This policy does not state that the California Consumer Privacy Act or any specific U.S. state privacy law applies until threshold applicability has been assessed.

8. International transfers and representatives

Zolaymi is based in the United States. Information may be processed in the United States and other countries that may not provide the same level of data protection as your home jurisdiction.

Where legally required, appropriate transfer mechanisms may be used, including EU Standard Contractual Clauses, the UK International Data Transfer Addendum or IDTA, adequacy decisions, and Data Privacy Framework participation where valid and applicable.

9. Privacy rights

Depending on your location and applicable law, you may have rights to request access, correction, deletion, restriction, objection, data portability, withdrawal of consent, marketing opt-out, complaint to a regulator, appeal of certain U.S. state privacy decisions where applicable, and opt-out of targeted advertising where applicable.

Send requests to [email protected]. We may need to verify your identity or authority before acting on a request. We will use the least intrusive verification method reasonably available and will not require unnecessary identification documents.

Withdrawing consent does not affect processing that occurred before withdrawal and does not prevent processing where another lawful basis applies.

10. Retention schedule

Information may be retained longer where required for tax, accounting, security, fraud prevention, dispute resolution or legal obligations.

11. Credentials, client access and security

Zolaymi recommends that clients create temporary, named, role-limited user accounts. Clients should not send permanent master passwords where avoidable. Credentials must not be transferred through ordinary unencrypted messages where safer methods are available.

We do not intentionally retain passwords after access is no longer required. Clients are responsible for revoking temporary access after completion. We may delete locally held access information after project completion. Access logs may remain in the client's own systems. Emergency or ongoing managed-service access may remain active only where agreed.

Reasonable safeguards may include access limitation, role-based permissions, strong authentication, encrypted connections, provider due diligence, secure backups where applicable, monitoring, access revocation, incident response and data minimization. No method of transmission or storage is perfectly secure, and we do not guarantee absolute security.

12. Contact

Zolaymi LLC can be contacted using the details below. Do not send passwords, API keys, payment-card information, full customer exports, or other sensitive information through ordinary email unless a secure transfer method has been agreed.

• General support: [email protected] (support at zolaymi dot com)
• Privacy and data-rights requests: [email protected] (contact at zolaymi dot com)
• Legal notices: [email protected] (legal at zolaymi dot com)
• Telephone: +1 602 661 9771
• Website: https://www.zolaymi.com
• Public business mailing address: 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, United States