Privacy Policy

Last updated: November 2026

What we collect

When you place an order or create an account we collect your name, email, phone and delivery address. If you subscribe to our newsletter we store your email. We also record failed logins and security audit events for security.

How we use it

• To process and deliver your orders (COD confirmation calls, courier labels).
• To send order confirmation and status emails.
• To personalise your shopping experience and prevent fraud.

What we never do

• We never sell or rent your personal data.
• We never store card details. Online payments are handled entirely by our hosted payment partner.
• Passwords are stored only as bcrypt hashes, we cannot read them.

Cookies & sessions

We use a server-side session cookie (HttpOnly, SameSite=Strict) to keep you logged in and to hold your shopping bag. No third-party advertising trackers, session-replay tools or analytics scripts are used on this store. Web fonts are served from our own servers, not from Google or any other third party, so your IP address is never shared with a font CDN.

Sharing

Delivery information is shared only with our courier partner to fulfil your order.

Your rights

You may request a copy or deletion of your personal data at any time by writing to privacy@latafat.store. You can unsubscribe from newsletters at any time using the link in every marketing email, or via our unsubscribe page.