Privacy policy

2026 Last updated: September

We value your privacy and are committed to protecting your personal information.

This Privacy Policy explains how ELFBARLOSTMARY Iraq (“we,” “us,” or “the Store”) collects, uses, stores, shares, and protects personal information when you visit our website, place an order, communicate with us, or otherwise use our services.

By using our website or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy.

1. The personal information we collect

The personal information we collect depends on how you interact with our website and services.

We may collect the following categories of information:

Contact and identification information

This may include:

the name
phone number
Email address
Delivery address
Billing address, where applicable

Order and transaction information

When you submit an application, we may collect information including:

Required products
Order quantity
Order value
Delivery information
Order log
Returns, exchanges, refunds, or cancellations
Cash on delivery transaction information

Our store currently supports Cash on delivery (COD). We do not require customers to provide payment card information for orders that are paid for upon delivery.

Account Information

If you create or use a customer account on our website, we may collect information necessary to create and manage the account, such as contact details, account preferences, and order history.

Contact us

When you contact us via WhatsApp or any other available customer service channel, we may collect and retain the information contained in those communications, including contact details, order information, questions, complaints, photos, videos, or any other information you choose to provide.

For example, customers requesting assistance with a defective product, return, exchange, refund, or delivery issue may be asked to provide photos or videos so we can review the request.

Device information and website usage

When you visit our website, some technical information may be collected automatically, including:

IP address
Browser type
Device type
Operating system
Pages visited
Date and time of visit
Interactions with the site
Referring pages or websites
Information about cookies and similar technologies

This information helps us to operate, protect, analyze and improve our website and services.

2.How to collect personal information

We may collect personal information:

Directly from you

For example, when you do the following:

Submit an application
Create an account
Subscription to marketing communications
Contact customer service
Request for return, exchange, or refund
Contact us via WhatsApp
Providing information during the delivery process

automatically

Some technical and usage information may be automatically collected when you visit or interact with our site through cookies and similar technologies.

From service providers

We may receive information from service providers who help us operate the store, website, delivery services, analytics, customer support, or other business functions.

3. How your personal information is used

We may use personal information for the following purposes:

Order processing and execution

We use personal information to:

Receiving and processing orders
Confirm order details
Delivery arrangement
Cash on delivery format
Communicating with customers before or during delivery
Managing unavailable or alternative products
Handling returns, exchanges, and refunds
Providing customer service related to orders
Providing after-sales services

Delivery services

We may use and share necessary customer information, including name, telephone number, delivery address and relevant order details, with delivery personnel or shipping companies for the purpose of delivering the order.

Delivery partners should only receive information reasonably necessary to complete the delivery process.

Customer Service

We use personal information to:

Answering questions and requests
Investigating product or delivery issues
Handling complaints
Processing return, exchange, or refund requests
Communicating with customers regarding their orders

Improving our website and services

We may use location information and customer interactions to:

Maintaining and improving site performance
Understanding how customers use our website
Improving our products and services
Identifying technical problems
Analysis of overall site and business performance

Marketing and Communications

When you have subscribed or given the appropriate permission, we may use your contact details to send you information about:

New products
Promotional campaigns
Special Offers
Brand News
Other related marketing communications

You can unsubscribe from marketing communications at any time using the unsubscribe method provided in the relevant message.

Unsubscribing from marketing communications will not prevent us from contacting you regarding current orders, customer service requests, deliveries, or other necessary service-related matters.

Security and fraud prevention

We may use personal information when reasonably necessary in order to:

Protecting our site and our customers
Detecting suspicious or fraudulent activities
Investigating the misuse of our services
Protecting our legal rights
Maintaining the security of our business operations

Legal and regulatory purposes

We may process personal information when reasonably necessary in order to:

Compliance with applicable laws and regulations
Responding to legal requests from public entities
Creating, exercising, or defending legal claims
Maintaining business and transaction records when needed

4. Cookies and similar technologies

Our website may use cookies and similar technologies to provide and improve website functionality.

Cookies may be used for purposes including:

Ensuring the website functions correctly
Remember customer preferences
Supports shopping cart and order fulfillment functions
Understanding site usage and performance
Traffic measurement
Supporting marketing and advertising activities, when activated

Some cookies may be provided by third-party service providers who support the operation or analysis of our website.

Depending on your browser settings and the settings available on the website, you may be able to control or refuse some cookies.

Please note that disabling essential cookies may affect the functionality of some parts of the site.

5. Shopify

Our online store operates using Shopify.

Shopify provides e-commerce technologies that enable us to run our online store, including functions related to website hosting, order fulfillment, order processing, customer information, and store management.

Accordingly, information provided through our store may be processed by Shopify in order to provide these services.

Shopify may process information in countries outside of Iraq as part of its global infrastructure.

For more information about how Shopify handles personal information, you can review Shopify's applicable privacy notices.

6. How to share personal information

We do not disclose personal information unnecessarily.

We may share personal information with third parties when reasonably necessary for the operation of our services, including:

Shopify

As the e-commerce platform that supports our website and online store.

Delivery drivers and shipping companies

We may provide information such as:

Customer name
phone number
Delivery address
Relevant order information

This is when there is a need to arrange and complete the delivery.

For orders within Baghdad, this may include local delivery drivers.

As for orders outside of Baghdad, customer information may be provided to external shipping companies responsible for completing the delivery process.

Technology and service providers

We may use third-party service providers to support functions such as:

Website hosting and operation
Analysis
Customer Service
Marketing communications
Site Jobs
Technical support

These providers may only process personal information to the extent necessary to provide their services.

Legal requirements

We may disclose information if we reasonably believe that disclosure is necessary to comply with applicable laws, lawful governmental requests or legal proceedings, or to protect our legal rights or the safety of our users and services.

Business Transfer

If all or part of our business is subject to a merger, acquisition, restructuring, sale, or similar business transaction, personal information may be transferred as part of that transaction where permitted by applicable law.

9. Data security

We take reasonable technical and organizational measures to protect personal information from:

Unauthorized access
loss
Misuse
Disclosure
amendment
destruction

However, no method of transmitting information over the Internet or any electronic storage system can be guaranteed to be completely secure.

Therefore, customers should avoid sending sensitive or unnecessary personal information through insecure communication channels.

10. Data retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including, where necessary, for:

Order fulfillment
Providing customer service
Maintaining transaction and business records
Conflict resolution
Prevent fraud
Compliance with applicable legal or regulatory obligations
Applying our policies or agreements

Different categories of information may be retained for different periods depending on the purpose for which they are used.

When personal information is no longer reasonably required, we may delete or anonymize it in accordance with applicable requirements and our internal practices.

11. Your choices and personal information

Depending on applicable law and the circumstances of your request, you may contact us to request the following:

Providing you with information about the personal data we hold about you
Correcting inaccurate personal information
Update your personal information
Delete some personal information where appropriate
Stop sending you marketing communications

We may need to verify your identity before processing some requests.

We may need to retain some information even after a deletion request if retaining it is reasonably necessary to comply with legal obligations, maintain transaction records, resolve disputes, prevent fraud, or protect our legal rights.

12. Marketing Preferences

If you have subscribed to promotional communications, you can withdraw your consent or unsubscribe at any time through the unsubscribe option in the relevant message.

After unsubscribing, you may continue to receive communications necessary for the provision of our services, including:

Order confirmations
Delivery messages
Customer service responses
Return or refund messages
Other non-promotional messages related to your transactions with us

13.Third-party websites and services

Our website may contain links to other websites, social networking services, or online platforms operated by third parties.

These parties operate independently of us and may have their own privacy policies and practices.

We are not responsible for the privacy, security, content, or practices of third-party websites or services that we do not control.

We encourage you to review the privacy policies of third-party services before providing them with any personal information.

14. Minimum age

Our website and products are customized For adults aged 18 or older.

We do not knowingly seek to collect personal information from people under the age of 18.

If we become aware that personal information has been collected from a person under the permitted age in circumstances where this is not allowed, we will take reasonable steps to delete that information.

If you believe that someone under the age limit has provided us with personal information, please contact us.

15. Changes to this Privacy Policy

We may update this privacy policy from time to time to reflect changes in:

Our business operations
Our website or services
Technology
Data processing practices
Applicable legal or regulatory requirements

When any changes are made, we will update the date. "Last update" At the top of this privacy policy.

Where appropriate, we may also provide additional notice regarding material changes.

We encourage you to review this privacy policy periodically.

16. Contact us

If you have any questions about this privacy policy, how we handle your personal information, or if you wish to submit a privacy-related request, please contact us via WhatsApp on +964 785 165 3329.

You can also contact us through the customer service contact information available on our website.