Privacy Policy
State of Kuwait
| Effective Date | 24/09/2025 |
| Data Controller | Al Dhahabi, State of Kuwait |
| Legal Basis | Kuwait Civil Code | Consumer Protection Law No. 39 of 2014 |
| Contact | info@al-dhahabi.com |
| Children's Age Threshold | Under 21 years (Kuwait Civil Code, Age of Majority) |
Al Dhahabi respects the privacy of every individual who visits our website, places an order, or engages with our services. This Privacy Policy explains what personal data we collect, why we collect it, how it is used and protected, with whom it may be shared, and what rights you hold as a data subject.
By accessing our website or using our services, you acknowledge that you have read, understood, and agreed to the practices described in this policy. If you do not agree, please discontinue use of our services immediately.
Al Dhahabi is the data controller responsible for the personal data collected through our website and services. As data controller, Al Dhahabi determines the purposes and means by which personal data is processed. All enquiries relating to data privacy may be directed to us at info@al-dhahabi.com.
Where Al Dhahabi engages third-party service providers to process data on its behalf (for example, payment processors or courier services), those parties act as data processors and are contractually bound to process data only on Al Dhahabi's instructions and in accordance with applicable law.
Al Dhahabi collects only the personal data that is necessary for the purposes set out in this policy. The categories of personal data we collect are:
- Contact details including full name, delivery address, telephone number, and email address.
- Financial information including credit and debit card details and payment confirmations. Card data is processed by our authorised payment processor and is not stored directly by Al Dhahabi.
- Account information including username, password, and service preferences.
- Transaction history including items viewed, purchased, returned, or exchanged.
- Communication records including correspondence with our customer support team.
- Device and usage data including IP address, browser type, and website interaction data collected automatically via cookies and similar technologies.
- Measurement and tailoring specifications provided by customers placing custom stitching orders.
Al Dhahabi processes personal data only where a lawful basis exists. The applicable legal basis for each category of processing is set out below:
- Contractual necessity: Processing contact details, payment information, transaction history, and tailoring measurements is necessary to fulfil your order and deliver our services.
- Legal obligation: Retaining transaction and financial records is required to comply with Kuwait's commercial record-keeping obligations and applicable tax or regulatory requirements.
- Legitimate interest: Processing device and usage data for website security, fraud prevention, and service improvement, where such interests are not overridden by your rights.
- Consent: Sending marketing and promotional communications is conducted only where you have provided explicit consent. You may withdraw consent at any time as described in Section 9.
Al Dhahabi collects personal data from the following sources:
- Directly from you when you create an account, place an order, submit an enquiry, or contact our support team.
- Automatically from your device and browser when you interact with our website, via cookies and similar tracking technologies (see Section 5).
- From authorised service providers acting on our behalf, such as payment processors and courier partners, in connection with order fulfilment.
- From business partners or affiliates only where you have consented to such sharing or where it is necessary for the provision of services.
Al Dhahabi uses cookies and similar technologies on our website. A cookie is a small text file placed on your device to help the website function correctly and to improve your experience.
- Essential Cookies: Required for the website to function. These include session management, shopping cart functionality, and secure login. These cannot be disabled without affecting core website functionality.
- Analytical Cookies: Used to understand how visitors interact with our website, allowing us to improve performance and user experience. Data collected is aggregated and anonymised where possible.
- Marketing Cookies: Used to deliver relevant promotional content. These are only placed with your consent.
You may manage or withdraw your consent to non-essential cookies at any time through your browser settings or our cookie preference centre. Disabling essential cookies may affect your ability to use our website.
Note: Al Dhahabi is not responsible for cookies placed by third-party websites linked from our platform.
Al Dhahabi uses personal data strictly for the following purposes:
- To process and fulfil your orders, including custom stitching orders, and to arrange delivery via our courier partners.
- To manage your account and provide customer support.
- To send order confirmations, dispatch notifications, and service-related communications necessary for the performance of your order.
- To send marketing and promotional communications, only where you have provided explicit consent and subject to your right to opt out at any time.
- To detect, prevent, and investigate fraud, security incidents, and misuse of our services.
- To improve our website, services, and customer experience through analysis of aggregated usage data.
- To comply with applicable legal obligations, including record-keeping requirements under Kuwaiti commercial law.
Al Dhahabi does not disclose personal data to third parties except in the following strictly defined circumstances:
- Service Providers: Authorised third-party service providers who assist in operating our business, including payment processors, IT service providers, logistics and courier partners, and website analytics providers. All such providers are contractually bound by data processing agreements obligating them to protect your data and use it only for the specific purposes for which it was shared.
- Legal & Regulatory Authorities: Where disclosure is required by Kuwaiti law, a court order, regulatory authority, or law enforcement body. Al Dhahabi will disclose only the minimum data necessary to comply with such obligations.
- Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.
Al Dhahabi does not share personal data with marketing partners or affiliates without your explicit consent. Any consent given for marketing purposes may be withdrawn at any time.
In the course of operating our business, personal data may be transferred to, stored in, or processed in countries outside the State of Kuwait. This may occur where our service providers or technology platforms operate servers in other jurisdictions, including within the GCC region, the European Union, or the United States.
- Al Dhahabi ensures that any international transfer of personal data is subject to appropriate safeguards, including contractual data protection clauses binding the recipient to standards equivalent to those applicable in Kuwait.
- Where data is transferred to GCC countries, transfers are conducted in accordance with GCC data protection frameworks and applicable bilateral regulatory standards.
- Al Dhahabi will not transfer personal data to a jurisdiction that does not provide an adequate level of protection without first implementing appropriate safeguards and, where required, obtaining your consent.
Al Dhahabi respects your rights in relation to your personal data. You are entitled to exercise the following rights at any time by contacting us at info@al-dhahabi.com:
- Right of Access: You may request confirmation of whether we hold your personal data and obtain a copy of it.
- Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies.
- Right to Data Portability: You may request that we provide your personal data in a structured, commonly used format for transfer to another service provider, where technically feasible.
- Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of such objection, Al Dhahabi will cease processing your data for that purpose immediately.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
- Right to Lodge a Complaint: You have the right to lodge a complaint with the Kuwait Ministry of Commerce and Industry's Consumer Protection Department if you believe your data rights have been violated.
Al Dhahabi implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
- Encryption of data in transit using industry-standard SSL/TLS protocols.
- Secure payment processing via our authorised payment processor. Al Dhahabi does not store full card numbers or CVV data on its own systems.
- Access controls restricting personal data to authorised personnel only, on a need-to-know basis.
- Regular review of security practices and systems to address emerging threats.
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, Al Dhahabi will take the following steps:
- Contain and assess the breach promptly upon discovery.
- Notify affected customers whose data has been compromised without undue delay, providing details of the nature of the breach, the data affected, and the steps being taken.
- Report the breach to the relevant Kuwaiti regulatory authority where required by law.
- Maintain an internal record of all data breaches, their effects, and the remedial actions taken.
Notification to affected customers will be made via the email address registered on their account. Customers are encouraged to ensure their account email address is kept current.
privacy_policy.sections.12.details
- Transaction and financial records: Retained for a minimum of 5 years in accordance with Kuwait commercial record-keeping obligations under the Kuwait Commercial Code.
- Account data: Retained for the duration of the active account, plus a period of 2 years following account closure or last activity.
- Customer support communications: Retained for 3 years from the date of the last communication.
- Marketing consent records: Retained until consent is withdrawn, plus a further 1 year to evidence compliance.
- Cookie and usage data: Retained for a maximum of 13 months from the date of collection.
- Tailoring and measurement data: Retained for the duration of the customer relationship and for 3 years thereafter to facilitate future orders, unless deletion is requested.
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.
Al Dhahabi's services are not directed at or intended for use by minors. In the State of Kuwait, the age of majority is 21 years pursuant to the Kuwait Civil Code. Individuals under the age of 21 must not use our services or submit personal data without the explicit consent and supervision of a parent or legal guardian.
- Al Dhahabi does not knowingly collect personal data from individuals under the age of 21.
- If Al Dhahabi becomes aware that personal data has been submitted by a minor without appropriate parental consent, such data will be deleted promptly upon discovery.
- Parents or legal guardians who believe that a minor has submitted personal data to Al Dhahabi without their consent are requested to contact us immediately at info@al-dhahabi.com.
Our website may contain links to third-party websites, social media platforms, or external services. Al Dhahabi has no control over the content or privacy practices of those websites and accepts no responsibility or liability for them. We encourage you to review the privacy policies of any third-party websites you visit.
Al Dhahabi reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal obligations, or regulatory requirements. Any material changes will be communicated to registered customers via email and published on our official website.
The updated policy will take effect from the date of publication. Continued use of our services following publication of an updated policy constitutes acceptance of the revised terms. We encourage you to review this policy periodically.
This Privacy Policy is governed by and construed in accordance with the laws of the State of Kuwait, including the Kuwait Civil Code, the Kuwait Commercial Code, and Consumer Protection Law No. 39 of 2014. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the competent courts of the State of Kuwait.
For any questions, concerns, or requests relating to this Privacy Policy or the exercise of your data rights, please contact Al Dhahabi using the details below:
- Email: info@al-dhahabi.com
- Website: www.al-dhahabi.com.kw
- Location: State of Kuwait
All data rights requests and privacy-related communications should be submitted in writing to the above email address, clearly stating your full name, order number (if applicable), and the nature of your request.
Al Dhahabi is committed to protecting your privacy and handling your personal data with the highest standards of care, transparency, and integrity.
Chat with us