AALYA / INFORMATION & CARE
Privacy Policy
Care for your details, at every step. How the Aalya storefront handles your information.
Who is responsible
Aalya is the storefront name of the business identified below. Its legal name, commercial registration and country are confirmed; its registered address still awaits confirmation. For privacy questions, use the Contact page.
Legal entity / data controllerAALYA ELECTRONIC COMMERCE
Commercial registration detailsCR 32002-2
Country of registrationKingdom of Bahrain
Registered business addressPending business confirmation
Information we handle
At checkout, you provide your name, email, phone number, destination country, city and shipping address, with optional address details, postal code and delivery notes. Orders contain selected products, variants, quantities, prices, shipping charges, references and order/payment status. Avoid including sensitive information in delivery notes.
Guest checkout uses an anonymous authenticated session through Supabase: a technical identity without a customer-created account. Once an order is submitted, its details are associated with that session; ‘anonymous’ does not mean the order is unidentifiable. Protected cookies help secure checkout and receipt access.
Your browser stores cart product/variant identifiers and quantities, a checkout attempt reference, and a temporary tab-scoped recovery draft containing the submitted delivery/contact details if an order is being sent or recovered. Hosting and infrastructure services may process IP addresses, request details, browser information and security logs needed to operate the website.
Why information is used
Information supports order processing and fulfilment, delivery arrangements, customer support, order recovery, fraud and security prevention, and applicable recordkeeping or legal obligations. Language and cookie preferences help the site remember your choices. We do not use optional analytics or marketing trackers in the current storefront.
Service providers & processing locations
Supabase provides database and authentication services. Hosting and technical service providers process information needed to run the store; delivery or support providers may receive the details needed to fulfil your request. Information may also be disclosed where lawfully required or necessary to protect rights and security. Provider systems may process data outside your country, including outside the GCC. Processing locations and any required transfer safeguards must be confirmed by the business before final approval of this policy.
Provider processing locations and transfer safeguardsPending business confirmation
Payments
Aalya accepts manual bank transfers via IBAN and, for Bahrain orders only, manual Benefit / BenefitPay payments outside the website. Available instructions appear at checkout and in your private order confirmation. We do not process cards or use a payment API. Send payment proof yourself through WhatsApp; the prefilled message contains only the order reference and total. Attach your screenshot manually and avoid sharing unrelated account details. Aalya does not upload or store payment screenshots in its website database; proof sent through WhatsApp is handled there under its service terms and privacy policy. The owner verifies receipt of funds before marking an order paid.
Keeping & protecting information
Order and support records are retained as needed for fulfilment, customer requests, disputes, security and applicable legal obligations, then should be deleted or anonymised when no longer required. Exact retention schedules and provider deletion procedures await business confirmation. The recovery draft is removed on confirmed completion; browser session restoration can extend tab-scoped storage. See the Cookie Policy for other browser storage lifetimes.
The site uses access controls and protected checkout/receipt mechanisms. No internet transmission or storage system can be guaranteed completely secure. Keep access to your device and order information private, particularly on shared devices.
Retention schedule and deletion proceduresPending business confirmation
Your choices & rights
Depending on the law applicable to you, you may have rights to access or correct information, request deletion, restrict or object to certain processing, withdraw consent where processing relies on it, or raise a complaint with the relevant authority. These rights may be subject to lawful exceptions, including required order records. Contact support with your request; proportionate identity checks may be needed. You can change optional storage preferences at any time using Cookie preferences in the footer.