Privacy policy
Last updated: 20 October 2026
This page explains what data Roonza (roonza.com) collects, why, who we share it with, and how to ask us to delete it.
What we collect
- Your phone number: to sign you in with a code sent by WhatsApp or SMS, and to contact you about your orders.
- Name and address: when you order, to deliver it.
- Your orders: the pieces, prices, order status and payment status.
- Gift orders: the recipient's name, phone and address, only to deliver the gift. We never send them marketing messages.
- WhatsApp messages: we keep a record of the messages we send you (order confirmed, shipped, delivered, back in stock) and whether they arrived. Sign-in codes are never stored.
We never ask for or keep card details: you pay on delivery, or by CliQ arranged with our team.
Cookies
- One random number of ours (`rz_vid`), so we know where you came from (a campaign link, an ad or an invitation link). What we record against it stays with us and is deleted 30 days after it last changed.
- Your language, your bag and your sign-in.
We use no third-party tracking cookies or scripts in your browser.
Who we share your data with
- The delivery company: name, phone, address and the amount to collect, only to deliver your order.
- Meta (WhatsApp): your phone number and the message text, to send your sign-in code and order messages by WhatsApp. Meta tells us whether each message arrived. If you message us on WhatsApp, we read it in the WhatsApp Business app; our store doesn't keep it.
- Meta (Facebook and Instagram ads): only if you agree in the banner at the bottom of the page. Our servers send what you view, what you add to your bag and your orders, to measure our ads. Your phone number is sent only hashed (it can't be read), with your IP address and browser type as Meta requires. We never send your name or address. If you decline, nothing is sent.
- Cloudflare: hosts our store and database, and protects the sign-in form from bots (Turnstile).
We never sell your data.
How long we keep it
- Visit data (where you came from, your answer about Meta ads) and ad events: 30 days.
- Your account and addresses: until you ask us to delete them.
- Orders: as long as our accounting records require.
- Weekly database backups: 12 weeks, then deleted.
Keeping your data safe
The connection to the store is always encrypted (HTTPS). Only authorized Roonza staff can see customer data, and every change they make is logged.
Deleting your data
To ask us to delete your data:
- Message us on WhatsApp or by email (both on our contact page) from the phone number on your account, and write "Delete my data".
- We check that the number is yours. Within 30 days we delete your account, your addresses, your visit data and the record of messages we sent you, and send you a confirmation with a reference number.
- Orders you completed are kept without your name, phone or address, because our accounting records require them. They leave our backups within 12 weeks.
If you have an order that hasn't been delivered yet, we delete your data once it is delivered or cancelled.
You never sign in to our store with Facebook, so we receive no data about you from Facebook.
Contact us
For any question about your data: our contact page.