Ashtiri Privacy Policy
Last Updated: 29 June 2025
Welcome to the Ashtiri website. We are committed to protecting your privacy and the security of your personal data in line with the applicable laws of the State of Kuwait, including Law No. 20 of 2014 on Electronic Transactions, the Consumer Protection Law No. 39 of 2014 (as amended), and international privacy best practices.
1. Definitions
For clarity:
● Personal Data means any information that can identify a natural person, such as name, email, or IP address.
● Data Subject means the individual whose personal data is being processed.
● Processing means any operation performed on personal data (collection, use, storage, etc.).
2. What Personal Data We Collect
We may collect the following categories of data:
A. Basic Information
● Full name
● Email address
● Phone number
● Physical shipping address
B. Transactional Data
● Order history
● Payment method (tokenized – we do not store full card details)
● Delivery preferences
C. Technical Data
● IP address
● Device and browser type
● Cookies and browsing behavior (see Section 8)
D. Optional Data (if voluntarily submitted)
● Feedback and product reviews
● Wishlist or favorites
● Social media handles
3. How We Use Your Data
We use personal data only for legitimate purposes, including to:
● Process your orders and fulfill deliveries
● Contact you about your purchase or respond to inquiries
● Improve website functionality and personalize your experience
● Conduct analytics and usage performance reports
● Comply with legal and regulatory obligations (e.g., issuing tax invoices)
We do not use your data for automated decision-making or profiling.
4. Legal Basis for Processing
We process your data based on:
● Your explicit consent (e.g., when creating an account or subscribing to newsletters)
● Contractual necessity (e.g., processing your order)
● Our legal obligations
● Our legitimate interests, such as improving the user experience
5. Who We Share Your Data With
We may share your data only as necessary, and always under strict confidentiality agreements, with:
● Logistics companies for delivery
● Payment service providers
● Cloud-based tools and service providers
● Governmental authorities where legally required
We do not sell your data under any circumstances.
6. Data Retention
We retain your data only for as long as needed for the purposes outlined in this policy or as required by law. For example:
● Transactional data: up to 5 years (for accounting/tax)
● Account details: until account is closed or inactive for 2 years
7. Your Rights
You have the following rights, as per Kuwaiti law and applicable international standards:
● Access: You can request a copy of the data we hold about you.
● Correction: You can request corrections to inaccurate information.
● Deletion: You may request data deletion, unless legally required to retain it.
● Withdraw Consent: You can withdraw your consent to marketing or non-essential data use.
Please email us at contact@ashtiri.com to make any such request.
8. Cookies and Tracking
Our website uses cookies to:
● Store preferences and improve performance
● Analyze traffic and site usage
● Provide personalized product suggestions
You can manage cookies via your browser settings. By using the site, you consent to the use of cookies unless disabled.
9. Data Transfers Outside Kuwait
If data is stored or processed using services outside Kuwait (e.g., secure cloud servers), we ensure that:
● Data is encrypted and secured
● The service provider complies with equivalent data protection standards
● Data is not used without your consent
10. Data Protection & Security
We implement industry-standard security measures to protect your data, including:
● SSL/TLS encryption for all transactions
● Two-factor authentication for admin access
● Firewalls, intrusion detection, and access control
● Secure backup protocols
11. Children’s Data
Our platform is not intended for use by children under the age of 18. We do not knowingly collect personal data from minors.
12. Data Breach Notification
In the event of a data breach affecting your personal data, we will:
● Notify affected users within 72 hours
● Report the breach to the Ministry of Commerce and Industry, if applicable
● Take immediate steps to mitigate the risk
13. Updates to This Policy
We may update this Privacy Policy periodically. Updates will be posted here and, for significant changes, you will be notified by email or website notice.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, you may contact us at:
Email: contact@ashtiri.com
Phone: +965 6611 1611
Address: Shuwaikh Industrial Area, Block 2, Building 63, Kuwait