SUREWAY PRIVACY & COOKIE POLICY
Part 1 — Privacy Policy1. Who We Are This policy explains how White Raven Trading – FZCO ("SUREWAY," "we," "us") collects and uses personal information when you visit mysureway.com, buy from us, or contact us.
White Raven Trading – FZCO is a Free Zone Company (FZCO) registered with IFZA under the Dubai Integrated Economic Zones Authority, Trade License No. 89439. Our registered address is IFZA Business Park, DDP, PO Box 342001, Dubai, United Arab Emirates.
This policy covers customers and Site visitors in the United States.
You can reach us at info@mysureway.com with any question about this policy.
2. At a GlanceIf you only read one section, read this one.
We do | We do not |
Collect what we need to fulfill your order, run the Site, and improve the product. | Sell your personal information for money. |
Ask permission before sending marketing. | Send marketing you have not asked for. |
Honor your opt-out choice for advertising cookies, including the Global Privacy Control signal. | Share your purchase details with anyone who does not need them to serve you. |
Let you opt out at any time. | Make you give a reason to leave. |
3. Information We CollectCategory | Examples | Where it comes from |
Identity and contact | Name, email address, delivery address, billing address, phone number | You give it to us at checkout or when you contact us |
Order | Products ordered, order value, order date, delivery status, returns and refunds | Created when you order |
Payment | Last four digits of card, card type, transaction reference, billing ZIP code | Our payment provider, Shopify Payments. We never see or store your full card number |
Checkout and device | Information Shopify collects at checkout to complete the order and prevent fraud, such as IP address and browser type | Collected automatically by Shopify |
Marketing and communications | Email subscription status, which emails you opened or clicked, messages you send us | You give it to us |
Waiting list | Email address, sign-up date and source | You give it to us |
Technical and usage | IP address, device and browser type, operating system, referring URL, pages viewed, session duration, approximate location derived from IP | Collected automatically, see Part 2 |
Advertising identifiers | Cookie IDs, pixel IDs, click identifiers passed by advertising platforms | Collected automatically, subject to your cookie choices |
We do not knowingly collect government identifiers, financial account numbers, biometric data, or precise geolocation.
4. How and Why We Use ItPurpose | Information used | Basis for use |
Taking and fulfilling your order, delivering it, and handling returns | Identity and contact, order, payment | Needed to complete your order |
Taking payment and preventing fraudulent transactions | Payment, order, checkout and device, technical | Needed to complete your order; our interest in preventing fraud |
Sending your order confirmation, receipt and dispatch notices | Identity and contact, order | Needed to complete your order |
Answering your questions and handling complaints | Identity and contact, order, communications | Needed to respond to you; our interest in running a responsive business |
Sending marketing emails and telling you about new products | Identity and contact, waiting list, marketing | Your consent |
Measuring how the Site is used and improving it | Technical and usage | Your consent, where required; otherwise our interest in improving the Site |
Showing you SUREWAY advertising on other platforms and measuring whether it worked | Technical, advertising identifiers | Your consent, or your choice not to opt out |
Keeping accounting, tax and consumer-law records | Order, payment, identity and contact | Legal obligation |
Protecting the Site from abuse and keeping it secure | Technical, checkout and device | Our interest in keeping our service safe |
Establishing or defending legal claims | Any of the above, as relevant | Our interest in protecting our rights |
5. A Note on Health-Related InformationSUREWAY is a personal care product. We are aware that the fact of buying it could, in some circumstances, allow someone to draw an inference about a customer. We treat that seriously, and we take the following approach:
- We do not ask you why you use the product, and we do not want to know.
- We do not create, buy, or infer health-related profiles about you.
- We do not use purchase history to place you in health-related advertising audiences.
- We describe the product to payment providers, couriers, and advertising platforms in neutral personal-care terms.
6. Emails We Send YouThere are two kinds of email, and they work differently.
6.1 Order emails (not marketing). When you place an order, our store platform (Shopify) sends an order confirmation with your receipt to the email address you gave at checkout, from info@mysureway.com. When your order is dispatched, you receive a dispatch notice with tracking details. We send these because you ordered, and they are part of fulfilling your order, so you cannot unsubscribe from them while an order is open. They may include a short note about the order, for example how to reach us about it. They are not advertising.
6.2 Marketing emails. We will only send you marketing emails if you have asked us to. You can ask in two ways: by signing up on the Site, or by ticking the marketing box at checkout. The box is never ticked for you, and you do not have to agree to marketing to buy from us. We keep a record of when and how you signed up, so that we can show that you asked. You can withdraw your permission at any time by using the unsubscribe link in any marketing email, or by emailing info@mysureway.com. Each marketing email includes our postal address and an unsubscribe link. Withdrawing permission stops marketing emails; it does not affect order emails about an order you have already placed.
6.3 Waiting list. If you joined our waiting list, we will use your email address to tell you about new products, restocks, or availability, and to send the updates you agreed to receive. Nothing more.
6.4 Using your email address for advertising. If you have subscribed to marketing emails, we may share a scrambled (hashed) version of your email address with Google and Meta, so that they can show you our advertising or leave you out of it. We do this only for people who have subscribed to marketing emails, not for everyone who orders, and we do not share what you ordered for this purpose. You can opt out at any time by emailing info@mysureway.com with the words "Opt out" in the subject line (see Section 12).
7. Cookies and Similar TechnologiesWe use cookies, pixels, and similar technologies to make the Site work, understand how it is used, and measure our advertising. Part 2 of this page explains which ones we use and how to change your choices. You can change your cookie choices at any time with the "Cookie settings" link in the footer or in your browser settings (see Part 2, Section 6). To opt out of sharing your information for advertising, see Section 12 (Your Privacy Choices). We honor the Global Privacy Control (GPC) signal: if your browser or a browser extension sends it, we treat it as an opt-out request automatically.
8. Who We Share It WithWe share personal information only with organizations that need it to provide a service to us, and only for that purpose. They act on our instructions and cannot use your information for their own purposes, except where noted below.
Type of recipient | Who this is | What they receive |
Online store, checkout and order management | Shopify | Identity and contact, order, payment, checkout and device information |
Payment processing | Shopify Payments and its payment partners; Stripe | Identity and contact, payment, order |
Website platform and hosting | Tilda | Anything you submit through the Site |
Order fulfillment and delivery | Amazon (Multi-Channel Fulfillment) | Name, delivery address, phone, contents of order |
Marketplace sales | Amazon | Order information for orders placed there, governed by Amazon's own privacy policy |
Order emails | Shopify | Name, email address, order details |
Marketing emails | Omnisend | Email address, subscription status, engagement with our emails |
Analytics | Google Analytics | Technical and usage information, subject to your cookie choices |
Advertising | Google Ads, Meta (Instagram) Ads | Advertising identifiers and page-visit information, subject to your cookie choices; a hashed email address, if you subscribed to marketing emails. We do not send product names, categories or order contents |
Customer support | Gmail (email inbox) | Your messages and the order they relate to |
Professional advisers | Accountants, auditors, lawyers | Only what is necessary, and only when necessary |
Authorities | Regulators, tax authorities, courts | Where the law requires it |
If our business is sold or reorganized, personal information may transfer to the buyer as part of that transaction, and the buyer will be bound to use it consistently with this policy.
9. Sending Information Outside Your CountryWe sell to customers in the United States. White Raven Trading – FZCO, which runs SUREWAY, is based in the United Arab Emirates, and some of our service providers are located in other countries. Wherever your information is handled, we require the organizations we work with to protect it consistently with this policy and to use it only for the purposes described here.
10. How Long We Keep ItInformation | Kept for | Why |
Order, payment and invoice records | 6 years from the end of the relevant tax year | Recordkeeping for tax and accounting purposes |
Waiting list sign-ups | Until you unsubscribe, or 24 months of no engagement | It stops being useful after that |
Marketing subscription and engagement | Until you unsubscribe, then a suppression record kept indefinitely | So we can prove you opted out and never email you again |
Record of when and how you subscribed | As long as you are subscribed, then for the period needed to defend a claim | So we can show that you asked for our emails |
Customer service messages | 3 years from the last contact | Complaints and warranty claims |
Analytics and advertising data | 14 months | Longer retention adds nothing |
Your opt-out / do-not-sell choice | Indefinitely | So we keep honoring your choice |
11. Keeping It SecureWe use encrypted connections across the Site, restrict access to personal information to people who need it, and require our providers to maintain appropriate security. Card details are handled by our payment provider and never reach our systems.
No system is perfectly secure. If a breach occurs that is likely to put your rights at risk, we will tell you and the relevant regulator as required by law.
12. Your Privacy Choices and Your Rights in the United StatesSeveral US states give residents privacy rights. If you live in one of them, this section applies to you. It sits alongside, and does not replace, the rest of this policy.
12.1 Where these rights apply. These rights are currently available to residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska,New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky, and Rhode Island, and any other state whose law applies to us.
12.2 What you can ask us to do.- Know: what categories of personal information we have collected about you, where it came from, why we collected it, and who we disclosed it to.
- Access: get a copy of the specific pieces of personal information we hold.
- Correct: have inaccurate information about you fixed.
- Delete: have your personal information deleted, subject to exceptions such as completing an order or meeting a legal obligation.
- Opt out of sale, sharing and targeted advertising: see 12.3.
- Limit the use of sensitive personal information: we do not collect it for the purposes this right covers, but the request is available to you.
- Not be discriminated against: we will not charge you more, give you less, or refuse to serve you because you exercised a privacy right.
12.3 Sale, sharing and targeted advertising. We do not sell personal information for money. However, our use of advertising cookies and pixels means information about your visit is shared with advertising platforms so that they can show you our ads and tell us whether they worked. Under California and several other state laws, that counts as "sharing" for cross-context behavioral advertising, and in some states as a "sale."
To opt out, email info@mysureway.com with the words "Opt out" in the subject line, or turn on the Global Privacy Control signal in your browser. We honor that signal automatically for that browser, without you having to do anything else. You can also change your choice with the "Cookie settings" link in the footer. If you subscribed to marketing emails, the sharing of a hashed version of your email address with advertising platforms (see 6.4) is covered by the same opt-out.
12.4 How to make a request. Email info@mysureway.com with the words "US privacy request" in the subject line.
- We will confirm receipt within 10 business days and respond within 45 days. If we need more time we will tell you why and take up to 45 days more.
- We will ask you to verify your identity, usually by confirming information we already hold, such as the email address on your order. We use what you send us for verification only.
- An authorized agent may make a request for you. We will ask for written proof of their authority and, unless they hold power of attorney, we will also ask you to confirm it directly.
12.5 Appeals. If we refuse your request, we will tell you why, and you may appeal by replying to our response or emailing info@mysureway.com with "Appeal" in the subject line. We will decide the appeal within 45 days and explain our reasoning in writing. If we refuse the appeal, we will tell you how to contact your state Attorney General.
12.6 Personal information shared or disclosed in the past 12 months. This is the list California law asks for. It describes what we have shared and with whom.
Category | Shared with | Why |
Identifiers: cookie and device IDs, IP address, and a hashed email address if you subscribed to marketing emails | Google, Meta | Advertising and measuring advertising (counts as "sharing" for cross-context behavioral advertising) |
Internet activity: pages viewed and how you moved through the Site | Google, Meta | Advertising and measuring advertising |
Approximate location derived from your IP address | Google, Meta | Advertising and measuring advertising |
We have not sold personal information for money. We also disclose identifiers, contact details, order information and payment details to service providers that run our business: Shopify, Shopify Payments, Stripe, Amazon (delivery), Omnisend and Gmail (email). Those disclosures are not "sales" or "sharing." We do not knowingly sell or share the personal information of anyone under 18.
13. People Under 18SUREWAY is sold to adults. The Site is not directed at anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, email info@mysureway.com and we will delete it.
14. Changes to This PolicyWe will update this policy when our practices change. The date at the top shows when it was last revised. If the change is significant, we will tell you by email or with a notice on the Site before it takes effect.
15. Contacting Us- Email (privacy questions and requests, orders, returns and everything else): info@mysureway.com
- Post: White Raven Trading – FZCO, IFZA Business Park, DDP, PO Box 342001, Dubai, United Arab Emirates