Privacy policy

doperfume is operated by Al Shiraa Trading LLC, a limited liability company licensed by the Sharjah Media City (SHAMS) Free Zone Authority, Government of Sharjah, under trade licence no. 2538186.01. Registered office: Sharjah Media City, Sharjah, United Arab Emirates.

We are responsible (the "controller") for the personal data described in this policy. For any privacy question or request, email alshiraatradingllc@gmail.com.

• Account data: your name, email address, phone number (if you provide it) and a securely hashed password — we never store your actual password.
• Consent records: when you confirmed you are 18 or older, when you accepted our Terms (and which version), and your marketing-email choice with the date you gave or withdrew it.
• Order data: products, sizes and quantities, prices, delivery fee and total, order and delivery status, and any cancellation or refund.
• Delivery data: recipient name, phone number, delivery address (emirate, city, street, building, unit) and, if you drop a pin on the map, its location. Addresses you choose to save are kept in your account.
• Payment data: payment status, amount, currency and Stripe's reference numbers for the payment. We do not receive or store your card number, expiry date or security code — you enter these on Stripe's secure page and only Stripe handles them.
• Support data: messages, complaints and any photos you send us about an order.
• Bag and wishlist: items you add to your bag or save.
• Technical data: IP address, browser and device type and server logs recorded automatically when you use the site, and cookies or similar storage — see our Cookie Policy.

• Name, email and password: to create and secure your account and let you sign in.
• Email: to send order confirmations, delivery updates, password resets and replies to your support requests.
• Phone: so our courier can arrange delivery, to send order updates by WhatsApp, and for customer support.
• Delivery address and map pin: to deliver your order.
• Order and payment data: to process and deliver your order, take payment, handle cancellations, returns and refunds, and keep the business records we are legally required to keep.
• Consent records: to show that you confirmed your age and accepted our Terms, and to respect your marketing choice.
• IP address, device and log data: to keep the site secure, prevent fraud and fix problems.
• Analytics cookies (only if you allow them): to understand how the site is used and improve it.
• Marketing emails (only if you opt in): to tell you about new fragrances, offers and discounts.

We rely on performing our contract with you (your account and orders), our legal obligations, our legitimate interest in keeping the service secure and, for analytics cookies and marketing emails, your consent, which you can withdraw at any time.

We only send marketing emails if you tick the optional box when you sign up or check out, or switch it on in your account. It is never pre-ticked and is never a condition of buying. We do not send marketing by SMS or WhatsApp.

You can unsubscribe at any time from Account → Marketing preferences, or by emailing alshiraatradingllc@gmail.com. Service messages about your orders and account are not marketing and will still be sent.

We share only what each provider needs to do its job for us:

• Stripe — card and wallet payments. Stripe processes your payment details under its own privacy policy.
• Jeebly (our courier) — your name, phone number and delivery address, to deliver your order.
• Meta (WhatsApp Business Platform) — your phone number and order details, to send order and delivery updates.
• Amazon Web Services (Amazon SES) — your email address and the message, to send order and account emails.
• Google — Google Analytics, only if you allow analytics cookies.
• Meta (Facebook and Instagram) — the Meta Pixel, only if you allow marketing cookies.
• Vercel (website and server hosting), MongoDB Atlas (database hosting) and Cloudflare (file and image storage) — to host and run the service.

We may also disclose data when required by law or by a competent UAE authority, or to establish or defend legal claims. We do not sell your personal data.

Some of the providers above store or process data outside the UAE, including in the United States and the European Union. We use established providers that are bound by contractual data-protection and security commitments, and we transfer data abroad only as permitted by the UAE Personal Data Protection Law.

• Account data, saved addresses and wishlist: while your account is open. Addresses you remove are deleted straight away.
• Order, payment and accounting records: for at least 5 years, as UAE commercial and accounting law requires. These records include the consent snapshot for each order.
• Support messages: for as long as we need them to resolve your issue and any related dispute.
• Password-reset requests: deleted automatically after 24 hours.
• Server logs: kept only briefly by our hosting provider.

If you ask us to delete your account, we will delete or anonymise your personal data within 30 days, except for records we must keep by law, which we keep only for that purpose.

We use encrypted connections (HTTPS), hashed passwords, access limited to staff who need the data, and payment handling by Stripe, a PCI-DSS certified provider. No system is completely secure; if a data breach is likely to put your data at risk, we will notify you and the competent UAE authority as required by law.

Under the UAE Personal Data Protection Law you have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate or incomplete data;
• ask us to delete your data, unless we must keep it by law;
• restrict or object to our processing, including objecting to direct marketing at any time;
• receive your data in a structured, machine-readable format where applicable;
• withdraw any consent you have given (for marketing emails or cookies) at any time — this does not affect processing before you withdrew it.

To use any of these rights, email alshiraatradingllc@gmail.com from the email address on your account. We will respond within 30 days. If you are not satisfied with our response, you may complain to the UAE Data Office.

doperfume is intended for adults. You must be at least 18 to create an account or place an order, and we do not knowingly collect data from anyone younger. If you believe a minor has given us their data, contact us and we will delete it.

We may update this policy. The date at the top shows the latest version. If a change significantly affects how we use your data, we will tell you by email or on the site before it takes effect.

Al Shiraa Trading LLC, Sharjah Media City, Sharjah, United Arab Emirates — alshiraatradingllc@gmail.com. You can also reach us through our Contact page.