Privacy Policy

Who is responsible

Aalya is the storefront name. The business responsible for personal data must confirm the details below. For privacy questions, use the Contact page; where a support channel is marked pending, it is not yet available.

Legal entity / data controllerPending business confirmation

Registered business addressPending business confirmation

Information we handle

At checkout, you provide your name, email, phone number, destination country, city and shipping address, with optional address details, postal code and delivery notes. Orders contain selected products, variants, quantities, prices, shipping charges, references and order/payment status. Avoid including sensitive information in delivery notes.

Guest checkout uses an anonymous authenticated session through Supabase: a technical identity without a customer-created account. Once an order is submitted, its details are associated with that session; ‘anonymous’ does not mean the order is unidentifiable. Protected cookies help secure checkout and receipt access.

Your browser stores cart product/variant identifiers and quantities, a checkout attempt reference, and a temporary tab-scoped recovery draft containing the submitted delivery/contact details if an order is being sent or recovered. Hosting and infrastructure services may process IP addresses, request details, browser information and security logs needed to operate the website.

Why information is used

Information supports order processing and fulfilment, delivery arrangements, customer support, order recovery, fraud and security prevention, and applicable recordkeeping or legal obligations. Language and cookie preferences help the site remember your choices. We do not use optional analytics or marketing trackers in the current storefront.

Service providers & processing locations

Supabase provides database and authentication services. Hosting and technical service providers process information needed to run the store; delivery or support providers may receive the details needed to fulfil your request. Information may also be disclosed where lawfully required or necessary to protect rights and security. Provider systems may process data outside your country, including outside the GCC. Processing locations and any required transfer safeguards must be confirmed by the business before final approval of this policy.

Provider processing locations and transfer safeguardsPending business confirmation

Payments

There is no live payment gateway in this storefront. Aalya does not collect payment card details through the current checkout. An order marked payment pending is not evidence that funds were collected. If payments are activated later, this policy will be updated to explain the provider and relevant processing.

Keeping & protecting information

Order and support records are retained as needed for fulfilment, customer requests, disputes, security and applicable legal obligations, then should be deleted or anonymised when no longer required. Exact retention schedules and provider deletion procedures await business confirmation. The recovery draft is removed on confirmed completion; browser session restoration can extend tab-scoped storage. See the Cookie Policy for other browser storage lifetimes.

The site uses access controls and protected checkout/receipt mechanisms. No internet transmission or storage system can be guaranteed completely secure. Keep access to your device and order information private, particularly on shared devices.

Retention schedule and deletion proceduresPending business confirmation

Your choices & rights

Depending on the law applicable to you, you may have rights to access or correct information, request deletion, restrict or object to certain processing, withdraw consent where processing relies on it, or raise a complaint with the relevant authority. These rights may be subject to lawful exceptions, including required order records. Contact support with your request; proportionate identity checks may be needed. You can change optional storage preferences at any time using Cookie preferences in the footer.