Privacy Policy

Last updated: 17 August 2026

We respect your privacy and collect only what we genuinely need to run the shop and deliver your order. This page explains what we collect, why, who we share it with, and what rights you have.

1. What we collect

• Account details: name, mobile number, email (optional), and a password stored only as an irreversible hash.
• Order details: delivery address, city, your order notes, the items ordered, amounts, and your order history.
• Favourites: products you save to your account.
• Technical data: IP address, browser and device type, and pages visited — used for security and to detect abuse.
• Service messages: WhatsApp messages relating to your order or your sign-in code.

What we never collect: your card details. They are entered directly with the Thawani payment gateway and never reach our servers.

2. Why we use it

• To process, deliver and invoice your order.
• To verify it is really you when you sign in with a WhatsApp code.
• To contact you about your order, repair or enquiry.
• For after-sales service: returns, exchanges and warranty.
• To protect the shop against fraud and abuse, and to meet accounting and tax obligations in Oman.

We do not sell your personal data. We use Google's advertising and measurement services on this site, as described in our Cookie Policy.

3. Who we share it with

• Thawani: our payment gateway, to process card payments.
• WhatsApp / Meta: to deliver your sign-in code and order messages to your number.
• Delivery staff: name, address and phone only, as needed to hand over the order.
• Hosting and security providers (Cloudflare): to run and protect the website.
• Authorities: where we are under a legal obligation to disclose.

4. How long we keep it

• Orders and invoices: for the period required by Omani accounting and tax rules.
• Account data: for as long as your account exists.
• Verification codes: valid for a few minutes, then discarded.

5. How we protect it

• The entire site runs over an encrypted HTTPS connection.
• Passwords are hashed and cannot be read back by anyone, including our staff.
• Access to order data is limited to authorised staff under defined permissions.
• Even so, no system on the internet can be guaranteed completely secure.

6. Your rights

• See the data we hold about you.
• Correct anything inaccurate — most of it you can edit yourself from your account page.
• Ask us to delete your account, subject to invoice records we are required to keep.
• Object to messages that are not about your own orders.

To exercise any of these, email [email protected].

7. Children

The site is not aimed at anyone under 18, and we do not knowingly collect their data.

8. Updates

We may update this policy; the date at the top shows when. Continuing to use the site after an update means you accept it.