This Privacy Policy explains how Huwaiishouna collects, uses, stores and handles personal information when you visit www.huwaiishouna.com, place an order or contact us.
1. Data Controller
The data controller for personal information processed through this website is:
Huwaiishouna
Company: [XXX]
Email: vendors@huwaiishouna.com
Address: [XXX]
Telephone: [XXX]
Registration No.: [XXX]
2. Personal Information We Collect
Depending on how you use our website, we may collect:
- Name and contact details;
- Email address;
- Telephone number;
- Billing and delivery address;
- Order details and transaction information;
- Information provided when contacting customer service;
- Website usage information, such as IP address, browser information and device-related information;
- Cookie and similar technology information where applicable.
We collect only information that is relevant to the purposes for which it is used.
3. How We Use Personal Information
We may process personal information for the following purposes:
- To process and fulfil orders;
- To communicate with customers regarding orders and enquiries;
- To process payments;
- To provide customer service;
- To maintain records relating to transactions;
- To operate and maintain our website;
- To meet applicable legal and accounting obligations;
- To identify and address unusual activity where appropriate;
- To respond to lawful requests from competent authorities.
Personal information is processed on an appropriate legal basis under applicable data protection requirements. Depending on the circumstances, this may include performance of a contract, compliance with a legal obligation, consent, or legitimate interests.
4. Payment Processing
Payments made through our website are processed by Stripe.
When you make a payment, relevant payment and transaction information may be provided to Stripe for payment processing and related payment services.
Stripe processes information in accordance with its applicable privacy terms and legal obligations.
We do not require customers to create a Stripe account in order to complete a payment through our website.
5. Payment Information
Payment information submitted during checkout is processed through the payment processing service provided by Stripe.
We do not request customers to send payment card details to us by email or other informal communication channels.
Information required to process an order may include transaction references, payment status and other information necessary to administer the transaction.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Strictly necessary cookies may be used where they are required for requested website functions.
For non-essential cookies that require consent, we use a Cookie banner through which visitors can make their choice.
Only when you click “Accept” on our Cookie banner indicating your consent will we use non-essential cookies that require consent.
Further information is provided in our Cookie Policy.
7. Legal Basis for Processing in Europe
For visitors in France and the European Economic Area, personal information is processed in accordance with applicable data protection requirements, including the GDPR.
Depending on the purpose, the legal basis may include:
- Performance of a contract;
- Compliance with a legal obligation;
- The customer’s consent;
- Legitimate interests, where applicable.
The GDPR requires organisations to identify appropriate legal bases, specify processing purposes and provide information about retention periods and recipients of personal information.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, unless a longer period is required or permitted by applicable law.
The applicable retention period may vary according to the type of information and its purpose:
Order and transaction records: retained for the period required by applicable accounting, tax and legal requirements.
Customer service correspondence: generally retained for the period reasonably necessary to handle the enquiry and maintain an appropriate record of the communication.
Customer account information, where applicable: retained while the account remains active and for an appropriate period afterwards where required for legal, accounting or dispute-resolution purposes.
Consent records: retained for an appropriate period to record and demonstrate the choices made by the individual.
Website and technical records: retained for periods appropriate to their operational, security and legal purposes.
When personal information is no longer required for its stated purpose or a legal retention obligation no longer applies, it is deleted, anonymised or otherwise handled in accordance with applicable requirements.
For European users, this approach follows the GDPR storage limitation principle, under which personal information should not be retained for longer than necessary, while allowing applicable legal retention obligations to be respected.
For United States users, retention is determined according to the purpose for which information was collected, applicable legal requirements and the requirements of relevant state privacy laws.
9. Disclosure of Personal Information
Personal information may be disclosed where necessary to operate our website and provide requested services.
Recipients may include:
- Payment processing service providers, including Stripe;
- Website, hosting and service providers;
- Service providers assisting with order administration;
- Professional advisers where reasonably required;
- Government authorities or other recipients where disclosure is required by applicable law.
Service providers receive information only as reasonably necessary for the relevant service and subject to applicable legal requirements.
10. International Data Transfers
Because we serve customers in Europe and the United States and use service providers that may operate in different jurisdictions, personal information may be processed or transferred outside the country in which it was originally collected.
Where European data protection law applies, any applicable international transfer is handled using a lawful transfer mechanism recognised under applicable data protection requirements.
11. Data Protection Rights in Europe
Where the GDPR applies, individuals may have rights including:
- The right to obtain access to personal information;
- The right to request correction of inaccurate information;
- The right to request deletion where applicable;
- The right to request restriction of processing in certain circumstances;
- The right to object to certain processing;
- The right to data portability where applicable;
- The right to withdraw consent where processing is based on consent.
These rights are subject to applicable legal conditions and exceptions.
Requests concerning personal information may be submitted using:
Email: vendors@huwaiishouna.com
12. United States Privacy Rights
Depending on the state in which you reside and whether the applicable law covers our processing activities, you may have privacy rights concerning personal information, including rights relating to access, correction, deletion and certain choices concerning the use or disclosure of personal information.
For example, California privacy law provides applicable consumers with rights concerning access, correction and deletion, subject to statutory exceptions.
To submit a privacy request, please contact:
We will process eligible requests in accordance with the requirements applicable to the request and the individual’s jurisdiction.
13. Data Accuracy
We take reasonable steps to keep personal information accurate and relevant to the purposes for which it is processed.
Where appropriate, you may request correction of inaccurate or incomplete personal information.
14. Data Security
Personal information is handled using measures appropriate to the nature of the information and the circumstances of processing.
Access to personal information is limited according to operational requirements, and information is handled in accordance with applicable data protection obligations.
15. Children’s Information
Our website is intended for general consumers and is not directed specifically to children.
We do not knowingly request personal information from children where such collection is restricted by applicable law.
16. Changes to This Privacy Policy
We may update this Privacy Policy when our website, processing activities or applicable legal requirements change.
The updated version will be published on this page together with the revised “Last Updated” date.
17. Contact Information
For questions or requests concerning this Privacy Policy or personal information, please contact:
Huwaiishouna
Company: [XXX]
Email: vendors@huwaiishouna.com
Address: [XXX]
Telephone: [XXX]
Registration No.: [XXX]