Last updated: 15 September 2026

We respect your privacy and aim to handle personal data responsibly and securely. This policy applies to use of the Al-Attar online store and its related services.

Data Controller

Al-Bajes Company for the Production of Natural Herbs and Honey LLC, Company Registration No. 28801, National Establishment No. 200126624, Tax No. 16643399, with its registered office in Amman, Hashemite Kingdom of Jordan, operates the Al-Attar online store and is responsible for processing personal data under this policy.

1. Data We May Collect

Depending on how you use the website, we may collect or process some or all of the following:

• Name, email address, phone number, and account information.
• Delivery address and postal code where used.
• Precise location if you voluntarily choose the “Use my location” feature.
• Order information, products, quantities, prices, and order status.
• Loyalty-program information such as points balance, earning, and redemption activity.
• Payment method, payment status, and transaction reference where available.
• Basic technical information required to operate and protect the website, such as session, browser, security, and error-log information where available.
• Information you voluntarily provide through customer-service or communication channels.

2. Card Data

Al-Attar does not currently collect card numbers or CVV within the website. When electronic payment is enabled, card data will be processed directly by a secure payment provider, and the full card number or CVV will not be stored in the store database. We may retain only information such as payment status, amount, transaction reference, and payment date for order management and accounting records.

3. How We Use Your Data

We may use personal data to:

• Create accounts, enable sign-in, and authenticate users.
• Process, confirm, prepare, and manage orders.
• Contact you about your order, account, or customer support.
• Calculate, award, and redeem loyalty points in accordance with the program rules.
• Improve website performance, user experience, and service quality.
• Prevent fraud and misuse and protect accounts and systems.
• Maintain records required for operational, accounting, or legal purposes.

4. Location Data

We do not request access to your precise location unless you use a location-related feature or expressly grant permission. Location information you share may be used to identify a delivery address or point and associate it with your order. Where available, you can choose not to share precise location and provide a written address instead.

5. Sharing of Data

We do not sell your personal data. We may share the minimum necessary information with service providers that help us operate the store, such as hosting, database and authentication providers, electronic payment providers, delivery partners where needed, and order, inventory, or invoicing systems connected to the store.

We may also disclose information where required by law or pursuant to a lawful request from a competent authority.

6. Storage and Processing Outside Jordan

The website may rely on global technology providers, so some information may be hosted or processed on servers outside the Hashemite Kingdom of Jordan. We aim to use providers that apply appropriate data-protection measures.

7. Cookies and Browser Storage

The website may use cookies, local browser storage, or similar technologies to operate login sessions, remember language and preferences, and provide essential website functions. You can control some of these technologies through your browser settings, although disabling them may affect certain features.

8. Data Retention

We retain information for as long as reasonably necessary to provide the service, manage accounts and orders, and meet operational, accounting, and legal requirements. When information is no longer required, it may be deleted or anonymized where appropriate and feasible.

9. Data Security

We use reasonable technical and organizational measures to protect information against unauthorized access, loss, or misuse. However, no electronic method can be guaranteed to be 100% secure.

10. Your Rights and Choices

Subject to applicable law, you may have the right to request access to certain personal data, ask for correction or updating, or request deletion where there is no legal or operational reason to retain it. Some account information may also be updated through available website features or by contacting us.

11. Children’s Accounts

We do not intentionally target the collection of personal data from children through independent customer accounts. If we become aware that data has been collected inappropriately, we will handle it in accordance with applicable legal requirements.

12. External Links and Services

The website may include links to or services from third parties, such as maps or payment gateways. Those services are subject to the privacy policies of their respective operators, and we recommend reviewing them when using those services.

13. Changes to This Privacy Policy

We may update this policy when our website, services, business practices, or legal requirements change. The updated version will be published on this page with a revised “Last updated” date.

14. Contact Us

For privacy questions or requests relating to your personal data, contact us at Info.jo@al-attar.net. For account or order support, contact Customer Service at customer.care.jo@al-attar.net or via WhatsApp at +962 7 9115 2423.