Privacy Policy

1. Introduction

Welcome to Nefertiti Black Seed Oil ("we", "our", or "us"), operated by Nefertiti EBC. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.nefertitione.ae and make purchases from our store. Please read it carefully.

By using our website, you agree to the terms of this Privacy Policy.

2. Information We Collect

We collect information you provide directly to us, including:

• Identity & Contact Data: Name, email address, phone number, and billing/shipping address when you place an order.
• Payment Data: Payment card details are processed securely by Stripe. We do not store full card numbers on our servers.
• Transaction Data: Details about purchases you make, including product names, quantities, and order history.
• Technical Data: IP address, browser type, device identifiers, pages visited, and referring URLs collected automatically when you use our website.
• Communications: Any messages or inquiries you send us via email or contact forms.

3. How We Use Your Information

We use the information we collect to:

• Process and fulfil your orders, including sending confirmation and shipping updates.
• Manage your account and provide customer support.
• Improve, personalise, and expand our website and product offerings.
• Send you transactional emails related to your orders (required for service delivery).
• Send promotional communications, only where you have opted in or where permitted by law.
• Prevent fraud, enforce our Terms of Service, and comply with legal obligations.
• Analyse website usage to understand how visitors interact with our content.
• Serve relevant advertisements through our social media and advertising partners, where you have consented.

4. Sharing Your Information

We do not sell, rent, or trade your personal data. We may share your information with trusted third-party service providers strictly to operate our business:

• Stripe — payment processing. Your payment data is governed by Stripe's Privacy Policy.
• Meta (Facebook / Instagram) — advertising and analytics. We may use Meta Pixel or Conversions API to measure ad performance. Your data is processed in accordance with Meta's Privacy Policy.
• Vercel / Render — website hosting and database infrastructure.
• Shipping Carriers — delivery partners receive your name and shipping address to fulfil orders.
• Legal Authorities — when required by applicable law, court order, or government regulation.

5. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website:

• Essential Cookies: Required for the website to function (e.g., shopping cart, session management).
• Analytics Cookies: Help us understand how visitors use our site (e.g., page views, traffic sources).
• Marketing Cookies: Used to deliver relevant advertisements on Meta (Facebook/Instagram) and other platforms.

You can control cookie settings through your browser preferences. Disabling certain cookies may affect website functionality.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy — typically for the duration of our business relationship and up to 7 years thereafter to comply with legal, accounting, and regulatory requirements.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Restriction: Request that we limit the processing of your data.
• Portability: Request a machine-readable copy of your data.
• Objection: Object to our processing of your data for marketing purposes.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at the email address below.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. All transactions are encrypted using SSL/TLS technology. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.

10. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the revised policy on this page with an updated date. Your continued use of our website after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us: