Privacy Policy
Last updated: 13 October 2026
This policy explains what data we collect from you, how we use and protect it, and what rights you have over it.
1. Data We Collect
We collect what you give us directly: your phone number, your name, and the delivery addresses you save. We keep a record of your orders. We also log limited technical details about your session — browser type and language — to run the site and diagnose faults. If you take the hair quiz, we keep your answers; if you are signed in, or you save the result to your account, we link them to your account and phone number. Online payments by card, Google Pay and Apple Pay are processed by Tap Payments: you enter your card details directly on Tap's page or payment sheet, so they never pass through our servers, and we neither see nor store them. We keep only what Tap returns to confirm the payment: the amount, its status, the payment method and the card's country of issue. In the app, if you allow access to your location, we use it to place your delivery address on the map and to show offers available in your area; if you don't, we estimate your area roughly from your IP address.
2. How We Use Your Data
To fulfil and deliver your orders, to contact you about them, to manage your account, and to improve the store and understand what our customers are looking for. We use your hair-quiz answers to suggest the right routine, to show you the result saved to your account, and to help you with it if you get in touch. We send marketing messages — care tips or offers — only if you expressly agree by ticking the box for it, and only through the channel it names; you can withdraw that consent at any time through the Contact page, in line with Qatar’s Law No. 13 of 2016 on the Protection of Personal Data Privacy. We do not use your data for anything else without your permission.
3. Data Protection
Traffic to the site is encrypted, sign-in tokens are stored hashed rather than in plain text, and access to customer data is limited to those who need it for their work. Even so, no transmission over the internet can be guaranteed completely secure.
4. Cookies, Measurement and Advertising Tools
Without asking, we use only essential cookies: one that keeps you signed in so you are not asked to sign in on every page, one that remembers your language, and one that remembers your consent choice. Measurement and advertising tools run only if you agree, and agreeing is optional: on the website through the consent banner, which you can change at any time from the bottom of the page; in the app through its consent sheet and from "My account"; and on iPhone through the system's tracking permission. These tools are Google Analytics and Firebase (by Google), Meta (Facebook and Instagram), TikTok, Snapchat and X. They collect the pages and products you view, items added to your cart, checkouts started, purchases and their value, your device or browser type, your IP address, and cookie identifiers or your device's advertising ID. When you complete an order after agreeing, we send these platforms the purchase together with your phone number in an irreversibly hashed form, so we can tell which of our ads brought you to us. We use this only to measure and improve our advertising, and we never sell your data. If you decline, none of these tools is loaded or sent anything, and the store works in full.
5. Sharing Data with Third Parties
We share only what is necessary: your name, address and phone number with the delivery courier so they can reach you, and your phone number with our SMS provider to send your sign-in code, with Tap Payments to process online payments, and with the advertising platforms named in section 4 if you agree to it. We do not sell your data or share it for marketing. We may disclose it where the law requires us to. When the app crashes, it sends a technical crash report to Sentry (stored in the EU) with the device model, OS, app version and where the error occurred — never your name, phone number or IP address. It is used only to fix bugs and is deleted automatically within 90 days at most.
6. Your Rights
At any time you may access the data we hold about you, correct or update it, and request that your account and data be permanently deleted. You can carry out the deletion yourself from the Settings page in your account.
7. Children's Data
We do not knowingly collect data from anyone under 18. If we learn that such data has reached us without a guardian’s consent, we delete it immediately.
8. Data Retention
We keep your data for as long as your account exists. When an account is deleted, your personal data is removed; records of completed orders are kept for as long as accounting and legal requirements demand and are then destroyed. Hair-quiz answers, and the phone number linked to them if you saved the result to your account, are kept until you ask us to delete them through the Contact page.
9. Updates to This Policy
We may update this policy. The version published here, bearing the last-updated date above, is the one in force.
10. Contact Us
For any request or question about your data, write to us through the Contact page.
Your privacy matters to us. If you have any question about this policy, contact us at any time.