Last updated: 28 August 2026. This policy is designed to reflect Qatar Law No. 13 of 2016 on Protecting Personal Data Privacy and the services currently offered on this website.
1. Who we are
Maison Rose Noire operates this online boutique and is responsible for deciding why and how personal information collected through it is used. Questions and privacy requests can be submitted through our Contact page.
2. Information we collect
- Account details such as name, email address, Qatar phone number, password credentials handled by our authentication provider, and saved delivery details.
- Order details such as products, amounts, branch, status, delivery address, map coordinates you choose to provide, and order history.
- Newsletter choices, language preference, discount use, loyalty points, rewards, and wallet-pass activity.
- Messages sent through our contact forms and technical information needed to keep the website secure and working.
We do not ask for precise delivery coordinates unless you choose the map or location feature during checkout.
3. How we use information
We use personal information to create and secure accounts, fulfil and deliver orders, provide receipts and status updates, support refunds, operate discounts and loyalty, respond to enquiries, prevent misuse, maintain records, and improve the service.
Where consent is the appropriate basis, you can withdraw it. Where information is needed to fulfil an order or protect the service, not providing it may prevent us from completing that function.
4. Email, receipts, and marketing
Transactional emails may include account verification, password recovery, security codes, order confirmations, status updates, invoices, and essential service notices.
Marketing emails and subscriber discounts are sent only when you subscribe or otherwise agree. Each private subscriber code is linked to the subscribing email and may be restricted to one use. You can unsubscribe using the link in a marketing email.
5. Service providers and transfers
We use trusted providers to operate the service, including Supabase for database and authentication functions, Railway for application hosting, and Resend for email delivery and subscriber management. Apple Wallet or Google Wallet is used only when you choose to add an available loyalty pass.
These providers may process information in other countries under their own security and privacy commitments. We limit shared information to what is reasonably needed for the relevant function.
6. Payment information
Available payment methods are displayed at checkout or the point of sale. We do not intentionally store complete payment-card numbers or security codes in the website database. A payment provider may process payment data under its own terms when online card payment is enabled.
7. Retention
We keep account, order, invoice, refund, loyalty, and business records only for as long as reasonably needed for service, legal, accounting, dispute, fraud-prevention, and security purposes. Retention periods may differ by record type.
8. Security
We use access controls, authenticated administration, encrypted connections, restricted server credentials, and other reasonable safeguards. No online system is completely risk-free, so you should also use a strong unique password and protect access to your email account.
9. Your choices and rights
Subject to applicable law, you may ask to access, correct, or delete information, withdraw marketing consent, update account details, or raise a privacy concern. Some records may be retained where required for legal, accounting, security, or dispute purposes.
Email changes: for added protection, changing an account email requires verification through the existing email first and then the new email.
10. Children, policy changes, and contact
The service is not intended for children to create accounts or place orders without the involvement of a parent or legal guardian. We may update this policy when our practices, providers, or legal duties change. The date at the top identifies the current version.
For privacy questions or requests, use the Contact page.