Privacy Policy

Last updated: 13 September 2026

This policy explains what personal information Al Kumaiti Perfumes collects when you use alkumaiti.com, why we collect it, who we share it with, and what you can ask us to do about it. We have written it in plain language rather than legal boilerplate, because a privacy policy nobody can read protects nobody.

Who Is Responsible for Your Data

Al Kumaiti Perfumes, Alhmaidya, Ajman, United Arab Emirates, is the controller of the personal data described here. You can reach us at Support@alkumaiti.com or +971 6 563 0272.

Information You Give Us

  • When you order — your name, email address, phone number, delivery address and the contents of your order.
  • When you create an account — your name, email address, password (stored encrypted, never in readable form) and your saved addresses and order history.
  • When you contact us — whatever you put in the message, including your name, email and phone number.
  • When you subscribe — your email address, and your consent to receive marketing.
  • When you leave a review — the display name you choose and the content of the review.
  • If we owe you a refund on a cash order — your account holder name and IBAN, used once to pay you and not retained for marketing.

Information We Collect Automatically

  • Your IP address, browser type, device type and operating system.
  • Which pages you visit, what you search for, and what you add to your cart or wishlist.
  • How you arrived at our site, for example from a search engine, a social post or a direct link. WooCommerce records this so we understand which channels bring customers.
  • Records of failed login attempts, including IP address, kept as a security measure against brute-force attacks.

Payment Information

We do not see, process or store your full card number, expiry date or security code. Card payments are handled entirely by our payment provider on their own systems. What reaches us is confirmation that a payment succeeded or failed.

For cash on delivery, no payment data is collected at all. For bank transfers, we see the payment reference and the account name that appears on the transfer.

We will never ask you for a PIN, a card security code over the phone, or a one-time password. Any message claiming to be from us that asks for these is fraudulent. Please report it to us.

Why We Use Your Information

  • To fulfil your order — taking payment, packing, arranging delivery and handling returns. Without this we cannot sell to you.
  • To support you — answering questions, tracing parcels, processing refunds.
  • To meet legal obligations — keeping tax and transaction records as UAE law requires.
  • To protect the site — detecting fraud, blocking abuse and keeping accounts secure.
  • To market to you — sending offers and news, but only where you have asked to receive them.
  • To improve what we do — understanding which products and pages people engage with.

Cookies

Cookies are small files stored by your browser. We use them in four ways:

  • Essential — keeping items in your cart, keeping you logged in, remembering your consent choices. The site cannot work without these.
  • Functional — remembering your language, currency and wishlist.
  • Performance — recording how you reached the site, so we can see which channels work.
  • Marketing — set by HubSpot, our customer relationship and marketing tool, to recognise returning visitors and measure campaigns.

When you first arrive you are shown a consent banner. You can accept all cookies, reject non-essential ones, or choose which categories to allow. You can change your mind at any time through the same banner, or by clearing cookies in your browser settings.

Who We Share Your Information With

We do not sell your personal data. We share it only with parties who need it to deliver our service:

  • Delivery couriers — your name, address and phone number, so they can deliver your parcel and call you if needed.
  • Payment providers — to process card payments securely.
  • HubSpot — our marketing and customer relationship platform, which stores contact details and interaction history.
  • Google — our pages load fonts from Google Fonts, which means your IP address is visible to Google when a page loads.
  • Our hosting and email providers — who store the site and send transactional email such as order confirmations.
  • Authorities — where we are legally required to disclose information.

Transfers Outside the UAE

Some of the services above, including HubSpot and Google, process data on servers outside the United Arab Emirates. Where that happens we rely on those providers’ contractual data protection commitments. If you would prefer your data not to be processed this way, contact us and we will tell you what we can offer.

How Long We Keep It

  • Order and transaction records — retained as long as UAE tax and commercial law requires.
  • Account details — for as long as your account is open. Close it and we delete or anonymise what we are not legally required to keep.
  • Marketing contacts — until you unsubscribe.
  • Enquiries — normally up to two years, so we have context if you come back to us.
  • Security logs — a short period, then deleted.

Your Rights

Under UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, you may ask us to:

  • tell you what personal data we hold about you, and give you a copy;
  • correct anything inaccurate or incomplete;
  • delete data we no longer have a lawful reason to keep;
  • stop or limit certain processing, including direct marketing;
  • transfer your data to another provider in a usable format;
  • withdraw consent you previously gave, at any time.

Write to Support@alkumaiti.com and we will respond within 30 days. We may ask you to confirm your identity first, so that we do not hand your data to someone else.

Marketing and Unsubscribing

We only send marketing to people who asked for it. Every marketing email carries an unsubscribe link, and it works immediately. Unsubscribing does not stop transactional messages such as order confirmations and delivery updates, which are part of fulfilling your order.

Security

This site is served over an encrypted HTTPS connection. Access to customer data is limited to people who need it, passwords are stored hashed, login attempts are rate-limited, and we take regular encrypted backups. No system is perfectly secure, but if a breach ever affected your data we would tell you and the relevant authority promptly.

Children

This site is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has given us personal information, tell us and we will delete it.

Changes to This Policy

We update this policy when our practices change. The date at the top shows the last revision. Significant changes will be flagged on the site.

Contact and Complaints

Questions or concerns about your data go to Support@alkumaiti.com. We would rather hear from you directly and put something right. You also have the right to complain to the UAE Data Office if you are not satisfied with our response.