Privacy policy

What personal data we collect, how we use and protect it, who we share it with, and the rights you have over it. Written to meet the Data Privacy Protection Regulation issued by CITRA.

Who is responsible

The store named in the footer of this page is responsible for the personal data described here. Our contact details are in that footer, and privacy requests can be sent to the same address.

What we collect

When you order we collect your name, mobile number, delivery address and, if you give one, your email address. We keep a record of your orders, what they contained, what you paid and where they were delivered.

If you create an account, your mobile number is your identity: we send a one-time code by SMS to confirm it. We do not ask for or store a password.

We also collect basic technical information — the pages you open on this site and the device and browser you use — to keep the store working and secure.

Cookies and similar technologies

We use cookies and local storage that the store needs to work: keeping you signed in, remembering your basket, and protecting against fraud and abuse. These are strictly necessary and cannot be switched off without breaking the store.

If we later add advertising or analytics cookies, we will ask for your consent first and this page will say so before they are used.

Who we share it with

We share what is needed, with those who need it: the payment services provider licensed by the Central Bank of Kuwait that processes your payment, the delivery staff who bring your order, the messaging provider that sends your verification code and order updates, and the hosting provider that runs this store. They act on our instructions and may not use your data for their own purposes.

We may also disclose data where the law requires it, or to establish or defend a legal claim. We do not sell your personal data.

How long we keep it

We keep order and invoice records for as long as Kuwaiti commercial and tax law requires, and complaint records for at least six months. Account details are kept while your account is open. When a retention period ends, data is deleted or anonymised.

Your rights

You may ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, or withdraw a consent you gave. Marketing messages carry a way to unsubscribe, and unsubscribing takes effect on all future marketing.

To exercise any of these, contact us using the details in the footer. We will respond within a reasonable period, and we may need to confirm your identity first.

Keeping it safe

Personal data is held on access-controlled systems, encrypted in transit, and reachable only by staff who need it for their work. If a breach occurs that affects your personal data, we will notify the regulator within seventy-two hours of becoming aware of it and inform you where the law requires.

Changes to this policy

The date at the top of this page shows when this policy last changed. If we make a fundamental change to how we handle your data, we will tell you before it takes effect.