Legal

Privacy Policy

This privacy policy explains what personal information Shelly Jordan collects, why we collect it, and how you can exercise your rights over it. We wrote this in plain English — if anything is unclear, contact us at [email protected] and a real person will answer.

What we collect

We collect three categories of information: account information (name, email, phone, shipping address) when you place an order or subscribe to our newsletter; transactional information (products ordered, payment method, order history) to fulfill your purchase; and technical information (IP address, browser type, device, pages visited) to keep the site working and secure.

Why we collect it

  • To process your orders, ship your products, and handle returns or warranty claims.
  • To respond to questions you send via the contact form, phone, or email.
  • To send product updates and offers — only if you explicitly opt in via the newsletter.
  • To maintain site security, prevent fraud, and comply with Jordanian commercial law.

Who we share it with

We share only what is strictly necessary to deliver your order or run the store: our payment gateway (HyperPay) for card processing, our shipping partners for delivery, and our email provider (Brevo) if you have subscribed to the newsletter. We never sell your information to third parties.

How long we keep it

Order records are kept for seven years (Jordanian tax and accounting requirement). Newsletter subscribers can unsubscribe any time via the link in every email — we delete your subscription record within 30 days of unsubscribing. Technical logs (server access logs) are rotated after 90 days.

Your rights

  • Access — request a copy of the data we hold about you.
  • Correct — update any information that is wrong or incomplete.
  • Delete — ask us to erase your data (except records we are legally required to keep).
  • Object — opt out of marketing at any time.

How to contact us

Email [email protected] or write to us at Abdali Boulevard, Amman, Jordan. We respond to all privacy requests within seven working days.