Privacy policy

Privacy policy

Controller: Souq Al-Arab — details on the imprint page.

What we collect: what you enter when creating an account and ordering (name, address, phone, email), your order history, and technical data logged by the server.

Why: to perform the contract (Art. 6(1)(b) GDPR) and to meet accounting obligations (Art. 6(1)(c) GDPR).

Who receives it: the carrier, to deliver your parcel, and the payment provider (Stripe), to process the transaction. We do not sell your data and do not share it for marketing.

Retention: invoice data for ten years as German tax law requires; everything else is deleted once its purpose ends.

Your rights: access, rectification, erasure, restriction, portability and objection, and the right to complain to your data protection authority.

Draft text — to be reviewed by a lawyer before launch.