Privacy Policy | WestBazaar

1. Who is responsible for your data

Your personal data is controlled by Westbazaar Group FZE, registered in Dubai, United Arab Emirates, at Business Centre, Sharjah Publishing City, Sharjah, UAE ("WestBazaar", "we", "us").

For any privacy question or request, email [email protected].

2. The data we collect

Data you give us

Account details: your name, email address and password (stored only in hashed form). If you sign in with Google, we receive your name, email address and profile picture from Google.
Order and delivery details: your first and last name, email address, phone number and delivery address. For some countries, customs also require an identity or tax number (for example a national ID, passport number or tax ID), which we ask for only where it is needed.
Saved addresses in your account, if you choose to save them.
Your marketing choice: whether you ticked the box to receive marketing emails.
Messages to our support team, through the chat or by email, including anything you choose to share in them.
Reviews you post, including any photos. Reviews are shown publicly with the name on your account.
Return or refund requests, including the reason and any photos you send. For crypto refunds, the wallet address you give us.

Data collected automatically

Technical data: your IP address, browser and device type (user agent), and the pages you request. These are recorded in our server logs and against your signed-in session.
Approximate location: the country we detect from your IP address, and your browser language. We use them to show the right language, prices and shipping options.
Shopping activity: the products you view, what you add to or remove from your cart, and your checkout steps (see sections 4 and 7).
Cookies and similar storage (see section 7).

Payment data

Card payments are handled by our payment provider, Stripe. We never see or store your full card number. We keep the card brand and the last four digits, the payment status and the amount. For crypto payments, we keep the payment details and wallet addresses our crypto payment provider sends us.

3. Why we use your data, and our legal basis

PurposeLegal basis

Creating and running your account; taking, paying for, fulfilling and delivering your orders; handling cancellations and refunds

Performance of our contract with you

Sending service emails (sign-in links, password reset, email verification, order confirmation and tracking)

Performance of our contract with you

Customer support, including the chat

Performance of our contract with you, and our legitimate interest in helping you

Keeping the Site secure, preventing fraud and abuse, and fixing errors

Our legitimate interests

Understanding how the Site is used and improving it (analytics)

Your consent, for analytics cookies; our legitimate interests, for cookieless and aggregate measurement

Marketing emails about offers and promotions

Your consent. You can withdraw it at any time

Keeping accounting, tax and customs records, and responding to lawful requests

Legal obligation

We do not sell your personal data. We do not use it to make decisions that have legal or similarly significant effects on you based solely on automated processing.

4. Who we share your data with

We share only what each party needs to do its job:

Fulfilment suppliers and carriers. To ship your order, we give our suppliers and their logistics partners your name, phone number and delivery address, and any customs ID or tax number your country requires. We do not give them your email address.
Payment providers. Stripe, for cards and other payment methods, and our crypto payment provider, Cregis. They receive your name, email address, the order and the payment details they need to process your payment and prevent fraud.
Customer support and messaging (Intercom). Intercom provides our chat and help centre, and it will send our marketing emails if you opt in. It receives:
If you check out as a guest, we create a contact in Intercom from your name and email address. Some chat replies come from an automated AI assistant, which can look up your own orders to answer you.
- your name, email address, account id and sign-up date;
- your number of orders, total spent and last order country;
- order events such as a paid order or a refund;
- your shopping activity on the Site (products viewed, cart changes, checkout started);
- the messages you send us.
Analytics (Google Analytics). Information about how the Site is used, including products viewed and purchase values. We do not send your name, email address or delivery address. Without your consent, Google receives only cookieless signals (see section 7).
Sign-in with Google. If you use Google to sign in, Google handles that step under its own privacy policy.
Email delivery (Resend). Resend sends our service emails. It receives your email address and the content of each email.
Hosting and infrastructure. Our hosting, database, storage, network and security providers (including Railway, Hetzner and Cloudflare) store or carry data on our behalf.
Authorities and advisers. Where the law requires it, to protect our rights, or to prevent fraud. This includes customs authorities for international shipments, and our professional advisers.
A buyer or successor, if our business is sold or reorganised. Your data would remain protected under this policy.

5. International transfers

We are based in the United Arab Emirates and sell worldwide, so your data is processed in other countries. In particular:

Our support platform and several service providers are located in the United States.
Our servers are hosted by providers in EU.
Our fulfilment suppliers and logistics partners are located all over the world.

Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses, or on the transfer being necessary to perform your order.

6. How long we keep your data

Account data: for as long as your account is open. After you ask us to delete it, we delete it within 30 days, except for what we must keep as described below.
Order, payment and invoice records: for as long as tax, accounting and customs laws require, typically 5 years after the order.
Support conversations: for as long as needed to help you, and then according to our support platform's retention settings.
Server logs: for a limited period, typically up to 30 days.
Marketing: until you unsubscribe. We keep a record of your opt-out so we don't contact you again.
Guest checkout details: if you check out as a guest, your browser keeps your delivery details for up to 180 days and your cart for up to 7 days, so you don't have to re-type them. This data stays on your device, and clearing your browser's site data removes it.

7. Cookies and similar technologies

When you first visit, we ask for your cookie choice. You can change it at any time using "Manage Cookies" in the footer.

Category: What it does. Can you switch it off?

Strictly necessary

Keeps you signed in; remembers your language, country and delivery address and your cookie choice; runs checkout and payment; runs the customer support chat.

No. The Site cannot work without them.

Analytics

Google Analytics cookies that help us understand how visitors use the Site.

Yes. They are off until you accept them.

Marketing

Would allow advertising measurement. We do not currently use advertising cookies.

Yes. Off until you accept.

Some specifics:

Google Analytics uses Google's Consent Mode. Until you accept analytics cookies, it sets no analytics cookies and sends Google only cookieless signals. Google uses those signals to estimate aggregate traffic.
The support chat (Intercom) is treated as strictly necessary. It loads once you have made your cookie choice, whatever that choice is, and records your shopping activity on the Site so our team can help you.
Google sign-in may show a "Sign in with Google" prompt, which loads a script from Google.
Stripe loads on the payment step to process your payment securely and to prevent fraud.

8. Marketing emails

We send marketing emails only if you tick the box at checkout, and the box is never pre-ticked. Every marketing email has an unsubscribe link. Service emails about your orders and account are not marketing, and you will still receive them.

9. Your rights

Depending on where you live, you may have the right to:

access the personal data we hold about you and get a copy of it;
correct inaccurate data. You can also update your name, email address and saved addresses in your account;
ask us to delete your data;
restrict or object to certain processing, including processing based on our legitimate interests;
receive your data in a portable format;
withdraw your consent at any time, for example by unsubscribing or changing your cookie choice. This does not affect processing that already happened;
complain to your local data protection authority.

To make a request, email [email protected] from the address linked to your account or order. We may need to verify your identity. We reply within one month, or sooner where your local law requires it.

10. Security

We protect your data with encryption in transit (HTTPS), access controls, and payment processing by certified providers. Access to customer data is limited to staff who need it. No system is completely secure, so please use a strong password and keep your sign-in details private.

Your order tracking link gives access to your order details. Do not share it publicly.

11. Children

The Site is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date. If a change is significant, we will also tell you by email or on the Site.

13. Contact

Westbazaar Group FZE, Business Centre, Sharjah Publishing City, Sharjah, United Arab Emirates. Email: [email protected].