Privacy Policy
Website & Mobile Applications (iOS and Android) — State of Kuwait
| Effective Date | 19/10/2026 |
| Last Updated | 19/10/2026 (previous version: 24/09/2025) |
| Data Controller | Al Dhahabi, State of Kuwait — Malik Al Khaleej Al Dhahabi Company for Men and Fabric W.L.L. (شركة خياط ملك الخليج الذهبي للرجال وأقمشتها ذ.م.م), Commercial Registration No. 437711 (Commercial Licence No. 2020/19207) |
| Registered Address | 9th Commercial area, Block 5, Mubarak Al Kabeer Street, Plot 800426, Block 9, Qibla, Capital Governorate, Kuwait (PACI No. 10225027) |
| Applies To | Website www.al-dhahabi.com and the Al Dhahabi mobile app “Al Dhahabi” for iOS and Android |
| Legal Basis | Kuwait Civil Code | Consumer Protection Law No. 39 of 2014 | CITRA Data Privacy Protection Regulation |
| Contact | info@al-dhahabi.com |
| Children's Age Threshold | Under 21 years (Kuwait Civil Code, Age of Majority) |
Al Dhahabi respects the privacy of every individual who visits our website, uses our mobile application, places an order, or engages with our services. This Privacy Policy explains what personal data we collect, why we collect it, how it is used and protected, with whom it may be shared, and what rights you hold as a data subject.
By accessing our website, downloading or using our mobile application, or using our services, you acknowledge that you have read and understood this Privacy Policy. Where we rely on your consent (for example, for marketing or for app tracking on iOS), we will ask for it separately and you may withdraw it at any time.
This Privacy Policy applies to personal data processed by Al Dhahabi through:
- our website, www.al-dhahabi.com;
- our mobile application “Al Dhahabi”, available on the Apple App Store and Google Play (the "App");
- our showroom(s), customer support channels (email, telephone, WhatsApp, Instagram), and stitching and delivery services.
This policy does not apply to third-party websites, apps or platforms that may be linked from our services (see Section 14).
- Personal Data: any information relating to an identified or identifiable individual.
- Processing: any operation performed on personal data, such as collection, storage, use, disclosure or deletion.
- SDK (Software Development Kit): code provided by a third party (such as Meta or Google) that is built into our App to provide a function such as analytics or advertising measurement.
- Advertising Identifier: a resettable identifier assigned by your device operating system — the IDFA on Apple iOS devices and the Advertising ID on Android devices.
- Tracking: linking data collected in our App with data collected by other companies' apps or websites for advertising or advertising measurement purposes, as defined by Apple's App Tracking Transparency framework.
Depending on how you interact with us, Al Dhahabi may collect the following categories of personal data:
| Category | Examples | Website | App |
|---|---|---|---|
| Identity & Contact | Full name, email address, mobile number, delivery address | ✓ | ✓ |
| Account Data | Login credentials (stored in encrypted form), account preferences, order history | ✓ | ✓ |
| Order & Transaction Data | Products ordered, order value, payment status, delivery details | ✓ | ✓ |
| Tailoring & Measurement Data | Body measurements and stitching preferences for custom orders | ✓ | ✓ |
| Payment Data | Processed by our payment processor MyFatoorah. We do not store full card numbers or CVV. | ✓ | ✓ |
| Device & Technical Data | Device model, operating system and version, app version, language, time zone, IP address, app-instance ID | ✓ | ✓ |
| App Usage & Event Data | App installs and opens, screens viewed, products viewed, add-to-cart, checkout started, purchases completed and their value | — | ✓ |
| Advertising Identifiers | IDFA (iOS — only if you allow tracking), Android Advertising ID | — | ✓ |
| Push Notification Token | Device token used to send you notifications | — | ✓ |
| Communications | Messages and enquiries you send to our support team | ✓ | ✓ |
Al Dhahabi collects personal data from the following sources:
- Directly from you when you create an account, place an order, submit an enquiry, or contact our support team.
- Automatically from your device and browser when you interact with our website, via cookies and similar tracking technologies (see Section 5).
- Automatically from your mobile device when you use our App, through software development kits (SDKs) built into the App, including the Meta (Facebook) SDK and Google Firebase (see Section 5.2).
- From authorised service providers acting on our behalf, such as payment processors and courier partners, in connection with order fulfilment.
- From advertising platforms (Meta and Google), which may tell us that you installed or opened our App after viewing or clicking one of our advertisements.
- From business partners or affiliates only where you have consented to such sharing or where it is necessary for the provision of services.
Al Dhahabi uses cookies and similar technologies on our website. A cookie is a small text file placed on your device to help the website function correctly and to improve your experience.
- Essential Cookies: Required for the website to function. These include session management, shopping cart functionality, and secure login. These cannot be disabled without affecting core website functionality.
- Analytical Cookies: Used to understand how visitors interact with our website, allowing us to improve performance and user experience. Data collected is aggregated and anonymised where possible.
- Marketing Cookies: Used to deliver relevant promotional content and to measure the performance of our advertising on Meta (Meta Pixel) and Google (Google Analytics and Google Ads). You can limit these through your browser settings.
You may block or delete non-essential cookies at any time through your browser settings. Disabling essential cookies may affect your ability to use our website.
Note: Al Dhahabi is not responsible for cookies placed by third-party websites linked from our platform.
Our App does not use cookies in the same way as a website. Instead, it contains the following third-party SDKs, which collect data automatically when you use the App:
| SDK & Provider | Data Collected | Purpose | Provider Privacy Policy |
|---|---|---|---|
Meta (Facebook) SDK Meta Platforms, Inc. / Meta Platforms Ireland Ltd. | Advertising identifier (IDFA only if you allow tracking; Android Advertising ID), device and app information, IP address, app events listed below | Measuring which of our Facebook and Instagram ads lead to app installs and purchases (ad attribution) and improving the delivery of our ads | www.facebook.com/privacy/policy |
Google Analytics for Firebase Google LLC | App-instance ID, Android Advertising ID, IDFA (only if you allow tracking), device and app information, screen views, and automatically collected events (first open, session start, app update) | App analytics, understanding how the App is used, and measuring the performance of our Google Ads campaigns (Firebase is linked to our Google Ads account) | policies.google.com/privacy |
Firebase Cloud Messaging Google LLC | Push notification token, device information | Sending order updates and (with consent) promotional notifications | policies.google.com/privacy |
Firebase Installations and Firebase Remote Config Google LLC | Firebase installation ID, device and app information (such as app version and OS) | Identifying the App installation and delivering app configuration, such as update notices | policies.google.com/privacy |
App events we record: app install, app open, account registration, product viewed, add to cart, checkout started, purchase (order value and currency, KWD).
What we do not share with Meta or Google: we do not send your name, address, tailoring measurements, or payment card details to Meta or Google through these SDKs. We do not send your email address or phone number.
Meta and Google may also use this data in accordance with their own privacy policies, including to improve their advertising services. Al Dhahabi does not sell your personal data.
On iPhone and iPad, the App will ask your permission before any data is used to track you across apps and websites owned by other companies. If you tap "Ask App Not to Track", we will not access your device's IDFA and will not use your data for tracking. Meta and Google may still receive limited, aggregated or non-identifying information (such as Apple's SKAdNetwork / AdAttributionKit signals) to measure campaign performance without identifying you. All App features remain available whether or not you allow tracking.
You can change your choice at any time in Settings › Privacy & Security › Tracking.
On Android devices, the Meta SDK and Firebase may collect the Android Advertising ID. You can reset or delete your Advertising ID at any time in your device settings (Settings › Privacy › Ads or Settings › Google › Ads, depending on your device). Once deleted, it can no longer be used to measure or personalise ads.
On iOS, you can choose whether to allow tracking when the App asks, and change this at any time in your device's Settings › Privacy & Security › Tracking. On Android, you can reset or delete your advertising ID in your device settings. You can switch off push notifications in your device settings.
Al Dhahabi uses personal data strictly for the following purposes:
- To process and fulfil your orders, including custom stitching orders, and to arrange delivery via our courier partners.
- To manage your account and provide customer support.
- To send order confirmations, dispatch notifications, and service-related communications necessary for the performance of your order.
- To send marketing and promotional communications, only where you have provided explicit consent and subject to your right to opt out at any time.
- To measure the effectiveness of our advertising campaigns on Meta (Facebook and Instagram) and Google, including identifying which ads led to app installs and purchases.
- To analyse how the App is used, and to fix errors and improve App performance.
- To detect, prevent, and investigate fraud, security incidents, and misuse of our services.
- To improve our website, App, services, and customer experience through analysis of aggregated usage data.
- To comply with applicable legal obligations, including record-keeping requirements under Kuwaiti commercial law.
Al Dhahabi does not disclose personal data to third parties except in the following strictly defined circumstances:
- Service Providers: Authorised third-party service providers who assist in operating our business, including payment processors, IT and cloud hosting providers, logistics and courier partners, and website and app analytics providers. All such providers are contractually bound by data processing agreements obligating them to protect your data and use it only for the specific purposes for which it was shared.
- Advertising & Analytics Platforms: Meta Platforms (Facebook, Instagram) and Google receive the device, usage and event data described in Section 5.2 through the SDKs in our App, to measure our advertising campaigns. On iOS, data used for tracking is shared only if you allow tracking.
- Legal & Regulatory Authorities: Where disclosure is required by Kuwaiti law, a court order, regulatory authority, or law enforcement body. Al Dhahabi will disclose only the minimum data necessary to comply with such obligations.
- Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.
Al Dhahabi does not share your name, contact details or tailoring data with marketing partners or affiliates without your explicit consent. Advertising measurement through the Meta and Google SDKs is described in Section 5.2 and can be controlled as explained in Sections 5.3–5.5. Any consent given for marketing purposes may be withdrawn at any time.
In the course of operating our business, personal data may be transferred to, stored in, or processed in countries outside the State of Kuwait. This may occur where our service providers or technology platforms operate servers in other jurisdictions, including within the GCC region, the European Union, or the United States. In particular, data collected by the Meta SDK and Google Firebase is processed by Meta Platforms and Google on servers located in the United States and other countries. Our App and website servers are hosted by Amazon Web Services (AWS) in Frankfurt, Germany (EU).
- Al Dhahabi ensures that any international transfer of personal data is subject to appropriate safeguards, including contractual data protection clauses binding the recipient to standards equivalent to those applicable in Kuwait.
- Where data is transferred to GCC countries, transfers are conducted in accordance with GCC data protection frameworks and applicable bilateral regulatory standards.
- Al Dhahabi will not transfer personal data to a jurisdiction that does not provide an adequate level of protection without first implementing appropriate safeguards and, where required, obtaining your consent.
Al Dhahabi respects your rights in relation to your personal data. You are entitled to exercise the following rights at any time by contacting us at info@al-dhahabi.com:
- Right of Access: You may request confirmation of whether we hold your personal data and obtain a copy of it.
- Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies.
- Right to Data Portability: You may request that we provide your personal data in a structured, commonly used format for transfer to another service provider, where technically feasible.
- Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of such objection, Al Dhahabi will cease processing your data for that purpose immediately.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
- Right to Opt Out of Tracking and Ad Measurement: You may refuse or withdraw App tracking permission on iOS, and reset or delete your Advertising ID on Android, as described in Sections 5.3–5.5.
- Right to Lodge a Complaint: You have the right to lodge a complaint with the Kuwait Ministry of Commerce and Industry's Consumer Protection Department, or with the Communication and Information Technology Regulatory Authority (CITRA), if you believe your data rights have been violated.
- In the App: go to Profile › Delete Account and confirm. Your account and associated personal data will be deleted within 30 days, except for data we must retain by law (see Section 12).
- Without the App: email info@al-dhahabi.com with the subject "Account Deletion Request".
Deleting your account does not automatically delete data already held by Meta or Google under their own policies; you can manage that data through your Facebook/Instagram and Google account settings.
Al Dhahabi implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
- Encryption of data in transit using industry-standard SSL/TLS protocols, on both our website and App.
- Secure payment processing via our authorised payment processor. Al Dhahabi does not store full card numbers or CVV data on its own systems.
- Access controls restricting personal data to authorised personnel only, on a need-to-know basis.
- Regular review of security practices and systems, and keeping the App and its SDKs updated, to address emerging threats.
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, Al Dhahabi will take the following steps:
- Contain and assess the breach promptly upon discovery.
- Notify affected customers whose data has been compromised without undue delay, providing details of the nature of the breach, the data affected, and the steps being taken.
- Report the breach to the relevant Kuwaiti regulatory authority where required by law.
- Maintain an internal record of all data breaches, their effects, and the remedial actions taken.
Notification to affected customers will be made via the email address registered on their account and/or by in-App notification. Customers are encouraged to ensure their account email address is kept current.
Al Dhahabi retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by law. The following retention periods apply:
- Transaction and financial records: Retained for a minimum of 5 years in accordance with Kuwait commercial record-keeping obligations under the Kuwait Commercial Code.
- Account data: Retained for the duration of the active account, plus a period of 2 years following account closure or last activity, unless you request deletion earlier.
- Customer support communications: Retained for 3 years from the date of the last communication.
- Marketing consent records: Retained until consent is withdrawn, plus a further 1 year to evidence compliance.
- Cookie and usage data: Retained for a maximum of 13 months from the date of collection.
- Tailoring and measurement data: Retained for the duration of the customer relationship and for 3 years thereafter to facilitate future orders, unless deletion is requested.
- Firebase Analytics data: Retained for 2 months, after which user-level data is deleted.
- Meta SDK data: Retained by Meta in accordance with Meta's data policy; Al Dhahabi receives only aggregated campaign reports.
- Push notification tokens: Retained until you log out, uninstall the App, disable notifications, or delete your account.
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised.
Al Dhahabi's services, including the App, are not directed at or intended for use by minors. In the State of Kuwait, the age of majority is 21 years pursuant to the Kuwait Civil Code. Individuals under the age of 21 must not use our services or submit personal data without the explicit consent and supervision of a parent or legal guardian.
- Al Dhahabi does not knowingly collect personal data from individuals under the age of 21.
- Al Dhahabi does not knowingly use data of minors for advertising measurement or tracking.
- If Al Dhahabi becomes aware that personal data has been submitted by a minor without appropriate parental consent, such data will be deleted promptly upon discovery.
- Parents or legal guardians who believe that a minor has submitted personal data to Al Dhahabi without their consent are requested to contact us immediately at info@al-dhahabi.com.
Our website and App may contain links to third-party websites, social media platforms, or external services. Al Dhahabi has no control over the content or privacy practices of those websites and accepts no responsibility or liability for them. We encourage you to review the privacy policies of any third-party websites you visit.
Al Dhahabi reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal obligations, or regulatory requirements. Any material changes will be communicated to registered customers via email and published on our official website.
The updated policy will take effect from the date of publication. Continued use of our services following publication of an updated policy constitutes acceptance of the revised terms. We encourage you to review this policy periodically. The current version is always available in the App under Profile › Privacy Policy and at https://al-dhahabi.com/en/m-privacy-policy
This Privacy Policy is governed by and construed in accordance with the laws of the State of Kuwait, including the Kuwait Civil Code, the Kuwait Commercial Code, and Consumer Protection Law No. 39 of 2014. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the competent courts of the State of Kuwait.
For any questions, concerns, or requests relating to this Privacy Policy or the exercise of your data rights, please contact Al Dhahabi using the details below:
- Email: info@al-dhahabi.com
- Website: www.al-dhahabi.com
- Address: 9th Commercial area, Block 5, Mubarak Al Kabeer Street, Plot 800426, Block 9, Qibla, Capital Governorate, State of Kuwait
- Privacy contact person: Customer Care Team
All data rights requests and privacy-related communications should be submitted in writing to the above email address, clearly stating your full name, order number (if applicable), and the nature of your request.
Al Dhahabi is committed to protecting your privacy and handling your personal data with the highest standards of care, transparency, and integrity.
Chat with us