Privacy policy

Below is a Shopify + GDPR “gold standard” Privacy Policy version of your text—cleaned, legally stronger, more precise, and aligned with common Shopify store compliance structures (EU GDPR + general e-commerce best practices). I also standardized terminology and tightened legal language without changing your meaning.

PRIVACY POLICY

Last Updated: April 28, 2026

AL-ARJAH operates this website and store, including all related information, content, features, tools, products, and services (the “Services”), in order to provide you with a curated shopping experience. AL-ARJAH is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, disclose, and process your personal data when you visit, use, make a purchase, or otherwise interact with the Services.

If there is any conflict between this Privacy Policy and our Terms of Service, this Privacy Policy governs with respect to personal data processing.

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. PERSONAL DATA WE COLLECT

“Personal data” means any information that identifies or can reasonably be linked to an individual.

We may collect the following categories of personal data:

1.1 Information you provide directly

  • Name

  • Billing and shipping address

  • Email address

  • Phone number

  • Account credentials (username, password)

  • Customer support communications

1.2 Transaction and order information

  • Purchased, returned, or exchanged products

  • Cart and wishlist activity

  • Payment confirmation and billing details

  • Shipping and delivery information

1.3 Payment information

Payment details are processed securely by Shopify and/or third-party payment processors. We do not store full credit card details on our servers.

1.4 Device and technical data

  • IP address

  • Browser type and version

  • Device identifiers

  • Time zone and location data (approximate)

  • Cookies and tracking technologies

1.5 Usage data

  • Pages viewed

  • Time spent on pages

  • Click behavior and navigation patterns

  • Interaction with products and Services

1.6 Derived data

We may infer preferences or interests based on your activity to improve user experience and personalization.

2. SOURCES OF PERSONAL DATA

We collect personal data from:

  • Directly from you (forms, checkout, account creation, support requests)

  • Automatically through your use of the Services

  • Cookies and tracking technologies

  • Shopify and other service providers

  • Business and marketing partners (where legally permitted)

3. PURPOSES OF PROCESSING

We process your personal data for the following lawful purposes:

3.1 Contract performance

  • Processing and fulfilling orders

  • Managing payments

  • Providing shipping and delivery

  • Handling returns and refunds

  • Managing your account

3.2 Customer service

  • Responding to inquiries

  • Providing support

  • Resolving complaints

3.3 Personalization

  • Recommending products

  • Improving user experience

  • Customizing content and offers

3.4 Marketing and advertising

  • Sending promotional emails, SMS, or messages

  • Showing personalized ads on third-party platforms

  • Measuring marketing performance

You may opt out of marketing at any time.

3.5 Security and fraud prevention

  • Detecting fraudulent activity

  • Preventing unauthorized access

  • Securing transactions and accounts

3.6 Legal compliance

  • Complying with legal obligations

  • Responding to lawful requests

  • Enforcing our policies and agreements

4. LEGAL BASES (GDPR USERS)

If you are located in the EEA or UK, we process your personal data under the following legal bases:

  • Performance of a contract

  • Legitimate interests (e.g. fraud prevention, analytics, marketing optimization)

  • Legal obligations

  • Consent (e.g. marketing emails or cookies where required)

5. HOW WE SHARE PERSONAL DATA

We may share personal data with:

  • Shopify (hosting, infrastructure, analytics, and payment support)

  • Payment processors (secure payment processing)

  • Shipping and logistics providers

  • IT and cloud service providers

  • Marketing and advertising partners

  • Professional advisors (legal, accounting, compliance)

  • Authorities when required by law

  • Business transfer parties (mergers, acquisitions, restructuring)

We do not sell personal data in the traditional sense; however, some data sharing for advertising may be considered “sharing” under certain privacy laws.

6. SHOPIFY PROCESSING

Our store is hosted on Shopify.

Shopify processes personal data to:

  • Provide hosting and infrastructure

  • Enable analytics and performance optimization

  • Support security and fraud prevention

  • Provide advertising and personalization tools

Shopify may process personal data independently as a data controller in certain cases.

For more information, see Shopify’s privacy policy:
https://privacy.shopify.com

7. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to:

  • Enable core website functionality

  • Remember preferences

  • Analyze traffic and performance

  • Provide personalized advertising

You may control cookies through your browser settings or device preferences. Some features may not function properly if cookies are disabled.

8. DATA RETENTION

We retain personal data only as long as necessary to:

  • Provide Services

  • Comply with legal obligations

  • Resolve disputes

  • Enforce agreements

  • Maintain business records

Retention periods depend on the type of data and legal requirements.

9. DATA SECURITY

We implement appropriate technical and organizational measures to protect personal data.

However, no system is completely secure, and we cannot guarantee absolute security.

10. INTERNATIONAL DATA TRANSFERS

Your personal data may be transferred, stored, or processed outside your country, including jurisdictions that may not provide the same level of data protection.

Where required, we use safeguards such as:

  • Standard Contractual Clauses (SCCs)

  • Adequacy decisions (where applicable)

  • Other legally approved transfer mechanisms

11. YOUR RIGHTS

Depending on your location, you may have the following rights:

  • Right of access

  • Right to rectification

  • Right to erasure (“right to be forgotten”)

  • Right to data portability

  • Right to restriction of processing

  • Right to object to processing

  • Right to withdraw consent

You may also opt out of:

  • Marketing communications

  • Targeted advertising (where applicable)

We may need to verify your identity before fulfilling requests.

12. CHILDREN’S PRIVACY

The Services are not intended for individuals under the age of majority in their jurisdiction.

We do not knowingly collect personal data from minors.

If you believe a child has provided us personal data, contact us for deletion.

13. THIRD-PARTY LINKS

Our Services may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time.

Updates will be posted on this page with a revised “Last Updated” date.

Continued use of the Services after updates constitutes acceptance of the revised policy.

15. CONTACT US

If you have questions or wish to exercise your rights, contact us:

AL-ARJAH FOR MARKETING SERVICES  
Amman, Jordan  
Email: support@al-arjah.com