Privacy policy
This policy explains what we collect, why, and what we do not do with it.
Last updated: August 3, 2026
What we collect
Your name and phone number, which are required to create your account and process an order; your email address, if you choose to give one, for receipts and password recovery; your order history; and basic technical data such as your IP address and browser, which we use to keep sessions secure.
Why we collect it
To create and secure your account, to process and deliver your orders, to send you transactional notifications about your purchases, and to meet our legal and accounting obligations.
How card data is protected
Gift card numbers and PINs are encrypted at rest using AES-256-GCM. They are excluded from our admin interfaces and from all logs, and are decrypted only when the buying account requests them after payment has been confirmed.
How passwords are protected
Passwords are hashed with Argon2 and are never stored or transmitted in readable form. Nobody at ALMAJRA can see your password.
What we never do
We do not sell your data. We do not share it with advertisers. We do not email you card numbers or PINs. We do not ask for your password, in any channel, for any reason.
Who we share data with
Only with our payment provider, to the extent needed to process your payment, and with authorities where we are legally required to do so.
How long we keep it
Account and order records are retained while your account is active and for as long as accounting rules require afterwards.
Your rights
You can request a copy of your data, ask us to correct it, or ask us to delete your account. Contact support and we will respond within a reasonable period.