Privacy Policy

Information we handle

When you send an order inquiry, we receive the information you enter: your name, phone number, delivery city and address, and any notes. Email is optional. We also receive the products and quantities in the inquiry and create an order number and tracking code.

The site processes technical request information, including an IP address, to operate the service and prevent abuse. For storefront order limits, our order service stores a one-way hash of the IP address rather than the raw address.

The app does not ask for GPS location or payment card details in the inquiry flow. We do not currently offer customer account registration.

How we use information

• To display products and prepare, process, fulfill, and track your order inquiry.
• To contact you about an inquiry, delivery, or customer support.
• To prepare the order document, prevent duplicate submissions, and protect the storefront from misuse.
• To understand site performance and, when Google Ads measurement is enabled, measure advertising results.

Who may receive information

We do not sell personal information. We share only what is needed to run the storefront and handle inquiries with:

• Khaleej Cosmetic staff and, when needed to fulfill an order, delivery or fulfillment personnel.
• Atlas ERP, our order-management system, and Supabase, which provides database and server functions used to process and track orders.
• Cloudflare, which hosts and protects the website and app service and may process technical request information.
• Google, if advertising measurement is enabled. The Google tag may receive visit and device information; an inquiry conversion may include an order reference, value, and currency.
• WhatsApp, if you choose to open WhatsApp to send your inquiry. The prepared message contains an order reference, tracking code, and a link to the order document. You choose whether to send it.

These providers may process information in countries outside Iraq. Their own privacy terms apply to their services. We may also disclose information when required by law or to protect people, our customers, or our service.

Browser and app storage

The storefront uses local or session storage on your device to remember your cart, wishlist, language and shopping preference, saved tracking codes, and temporary checkout state. You can remove a saved tracking code in the app’s My Orders view or clear the app/site storage in your device settings. Clearing storage may also remove your cart and preferences.

A tracking code lets someone view a limited order summary, and the order document link can show the information on that document. Keep both private and share them only with people you trust.

Retention and your requests

Order and inquiry records are kept in Atlas ERP for as long as needed to handle fulfillment, customer service, business records, and applicable legal obligations. Security records, including hashed IP information, may be kept to prevent abuse. When information is no longer needed, we delete or de-identify it where reasonably possible.

You can ask us to access, correct, or delete your personal information by contacting us. We may need to keep some information to complete an order, maintain required business records, resolve disputes, or comply with law. Removing a tracking code from your device removes only that local copy; it does not delete the order record.

Security and policy updates

We use HTTPS and reasonable safeguards to protect information handled by the storefront. No online service can guarantee absolute security. We may update this policy when our practices change; the updated date at the top shows when the latest version was published.

Contact us

For privacy questions or requests, contact Khaleej Cosmetic on WhatsApp at +964 771 450 4323. Include your order number if your request concerns an order.