Privacy Policy
Last updated: 22 July 2026 (this version replaces the previous version dated July 2021).
Who We Are and the Scope of This Policy
Flamorah Accessories ("Flamorah", "we", "us" or the "Merchant") is a company registered in the Kingdom of Bahrain under Commercial Registration No. 144235-2, operating the website www.flamorah.com and two retail branches in Jid Ali and Souq Al Baraha, Muharraq. This policy describes how we collect, use, share and protect your personal data when you use our website, purchase from it, or contact us via WhatsApp, phone or email. It is issued in accordance with Bahrain's Personal Data Protection Law No. 30 of 2018 and its implementing resolutions.
This policy should be read together with our "Terms & Conditions" page, which governs your general use of and purchases through the website. By using the website or providing us with your data, you agree to its collection and processing as described in this policy.
Data We Collect
We collect your data through the following channels:
- Website and order form: when you browse the website or place an order, we collect your name, phone number, email address, delivery address, and order details (products, value, and chosen payment method).
- Website customer account: if you create an account, we keep your username and password (stored encrypted) and your order history.
- WhatsApp and phone: when you contact us to place an order, ask a question, or request customer support, we collect your phone number and the content of your order-related messages.
- Automatically collected data via cookies: such as device and browser type, IP address, and basic browsing behaviour, used to operate and improve the website — see "Cookies" below.
- Payment data: we do not store your card details; see "Payment and Card Data" below.
Purpose of Collection and Legal Basis
We process your data for the following purposes, under the corresponding legal basis set out in Article (4) of the Personal Data Protection Law:
- Fulfilling and delivering your order (necessary for the performance of our contract with you).
- Communicating with you about your order or account, including confirmation and delivery updates (performance of contract).
- Responding to your inquiries via WhatsApp, phone or email (performance of contract / our legitimate interest in customer service).
- Improving the website and shopping experience and analysing visitor usage (our legitimate interest, balanced against your rights).
- Meeting our legal obligations, such as invoicing and tax/accounting records (legal obligation).
- Sending marketing offers and updates, only with your prior explicit consent, which you may withdraw or object to free of charge at any time.
Sharing Your Data
We share your data, only to the extent necessary, with:
- Courier companies (such as Sayq, Parcel and Jahez) to deliver your order: your name, phone number and address only.
- Our payment service provider: the payment details you enter are transmitted directly to them over an encrypted connection; we do not access or retain them ourselves (see "Payment and Card Data").
- The cloud business-management platform provider we rely on to run our orders, inventory and accounts — this may involve storing some of your data outside the Kingdom of Bahrain (see below).
- Government or judicial authorities, where required by law or a lawful official request.
We do not sell or rent your data to any third party for their own marketing purposes, and we do not share it with anyone beyond the above without your explicit consent.
Transfer of Data Outside Bahrain
We rely on an international cloud provider to run our order, inventory and accounting systems, which may involve processing or storing some of your data on servers located outside the Kingdom of Bahrain (currently with a hosting provider within the European Union). This transfer is necessary to fulfil your order and manage your account with us, in line with Article (13) of the Personal Data Protection Law. We only work with providers who offer appropriate contractual and technical safeguards for your data. Contact us for more details about where your data is processed.
Data Retention
We retain your data only for as long as necessary to fulfil the purpose for which it was collected, including any retention periods required by applicable Bahraini law (such as accounting and tax records). Once your data is no longer needed, we delete it or render it non-identifiable, unless the law requires otherwise.
Data Security
We apply appropriate technical and organisational measures to protect your data against loss, destruction, alteration, unauthorised disclosure or access, and limit access to employees and providers who need it to perform their role. That said, no electronic transmission or storage system can be guaranteed 100% secure.
Payment and Card Data
- All credit/debit card details and personally identifiable information will NOT be stored, sold, shared, rented or leased to any third parties.
- The merchant will not pass any debit/credit card details to third parties.
- When you pay for our products or services on the website, the payment details you provide are transmitted directly to the payment service provider over a secure encrypted connection.
Cookies
Our website uses essential cookies to operate (such as the shopping cart and login) and analytics cookies to understand how visitors use the website and to improve it. You can control, delete or disable cookies at any time through your browser settings, noting that disabling some cookies may affect certain website functions (such as saving your shopping cart).
Your Rights as a Data Subject
Under Part Five of the Personal Data Protection Law No. 30 of 2018, you have the right to:
- Know whether we process your data, and access it (Articles 17 and 18).
- Request rectification of your data if it is inaccurate, incomplete or outdated (Article 23).
- Request blocking or erasure of your data in the cases prescribed by law (Article 23).
- Object to the use of your data for direct marketing, free of charge, at any time (Articles 19 and 20).
- Object to any processing causing you unwarranted material or moral damage (Article 21).
- Withdraw your consent to the processing of your data at any time, without affecting the lawfulness of processing carried out before withdrawal (Article 24).
- Lodge a complaint with the Personal Data Protection Authority of the Kingdom of Bahrain if you believe we have breached our obligations regarding your data (Article 25) — www.pdp.gov.bh.
To exercise any of these rights, contact us at support@flamorah.com with proof of your identity, and we will respond within the timeframes prescribed by law (generally within 15 working days of your request).
Minors
Consistent with the minors clause in our "Terms & Conditions" page, users under the age of 18 are not permitted to create an account on the website or provide us with their personal data without a guardian's supervision.
Communicating With You About Marketing
We may send you messages related to your order (confirmation, delivery updates) via WhatsApp, email or SMS; these are necessary to fulfil your order and do not require separate marketing consent. Promotional and discount messages are only sent to those who have opted in, and you may unsubscribe at any time by contacting us.
Changes to This Policy
We may update this policy from time to time to reflect legal or operational changes. Any material change will be posted on this page along with the last-updated date, and will not affect any rights you have already acquired under Bahraini law at the time your data was collected.
Contact Us
For questions about this policy or to exercise your rights regarding your personal data:
Email: support@flamorah.com
Phone/WhatsApp: +973 3615 1016