🔒 Qomoor Privacy Policy

Privacy Policy

Last Updated: May 9, 2026
Effective Date: May 9, 2026

This Privacy Policy describes how Qomoor ("we," "us," or "our") collects, uses, discloses, and protects your personal data when you visit our website qomoor.com, use our services, or make a purchase.

We respect your privacy and are committed to complying with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant regulations.

1. Information We Collect

1.1 Personal Information You Provide

When you interact with us (e.g., placing an order, creating an account, contacting support), we may collect:

Identity Data: First name, last name.
Contact Data: Email address, shipping address, billing address, phone number.
Transaction Data: Payment details (processed by third-party gateways; see Section 3), order history.
Communication Data: Records of correspondence when you contact us.

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain technical data, which may be considered personal data under some jurisdictions (like the EU):

Device & Usage Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform.
Website Activity: Pages visited, time spent on pages, clickstream data, and referral sources.
Location Data: Approximate location derived from your IP address.

1.3 Cookies and Similar Technologies

We use cookies, web beacons, and similar tracking technologies to collect information about your interactions with our site. For details, please see our Cookie Policy.

2. How We Use Your Information

Purpose	Legal Basis (GDPR)	Description
Order Processing	Contract Performance	To process payments, ship orders, and provide invoices.
Customer Support	Legitimate Interest / Contract	To respond to your inquiries, troubleshoot issues, and manage returns.
Marketing (Opt-in)	Consent	To send newsletters or promotional offers (you may opt-out anytime).
Website Improvement	Legitimate Interest	To analyze user behavior, fix bugs, and improve site functionality.
Security & Fraud Prevention	Legitimate Interest / Legal Obligation	To protect our business and users from fraud and cyber threats.

We will never sell your personal data. We will not share your data with third parties for their own marketing purposes without your explicit consent.

3. Data Sharing and Third-Party Services

Payment Processors: We use encrypted, PCI-DSS compliant gateways (e.g., Stripe, PayPal) to handle payments. We do not store your full credit card details on our servers.
Shipping Carriers: We share your name and shipping address with carriers (e.g., FedEx, DHL) to deliver your order.
Analytics Providers: We use tools like Google Analytics (with IP anonymization enabled) to understand website traffic.
Hosting Providers: Our website is hosted on secure servers provided by AWS.

Note: If you are located in the EEA or UK, we ensure that any international data transfers are protected by Standard Contractual Clauses (SCCs) or other lawful mechanisms.

4. Cookies and Tracking Technologies

Cookie Type	Purpose
Strictly Necessary	Essential for the website to function (e.g., shopping cart, login). Cannot be disabled.
Performance	Collect anonymous data on how visitors use our site (e.g., Google Analytics).
Functionality	Remember choices you make (e.g., language, region).
Marketing	Track advertising effectiveness (only active with your consent).

You can disable cookies in your browser, but some parts of our site may not function correctly.

5. Data Security

Encryption: TLS/SSL encryption for data transmission.
Access Controls: Strict internal access controls and authentication procedures.
Regular Audits: Periodic security assessments of our systems.

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

Order Data: Retained for 7 years for tax compliance.
Marketing Data: Retained until you withdraw consent or unsubscribe.
Log Data: Retained for 12 months.

7. Your Rights and Choices

7.1 EU/EEA/UK Residents (GDPR)

Right of Access: Request a copy of your data.
Right to Rectification: Correct inaccurate data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your data.
Right to Restrict Processing: Limit how we use your data.
Right to Data Portability: Receive your data in a structured format.
Right to Object: Object to processing based on legitimate interests.

7.2 California Residents (CCPA/CPRA)

Right to Know: What data we collect and how it is used.
Right to Delete: Request deletion of your data.
Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information (note: we do not sell data).
Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

To exercise any of these rights, please contact us at support@qomoor.com. We may need to verify your identity before proceeding.

8. Children's Privacy

Our services are not directed to individuals under the age of 13 (or 16 in the EEA/UK). We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete it immediately. If you are a parent or guardian and believe your child has provided data, please contact us.

9. International Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. By using our services, you consent to this transfer, provided that we have taken appropriate safeguards (such as Standard Contractual Clauses - SCCs).

10. Changes to This Privacy Policy

We may update this policy periodically to reflect changes in our practices or legal requirements. We will post the revised policy on this page and update the "Last Updated" date. For significant changes, we will provide a more prominent notice (e.g., email notification or website banner).