This policy explains what personal information IBRA CIE collects, why we collect it, and what you can do about it.
The short version: we collect what we need to sell you something and deliver it, we do not sell your data, and you can ask us to delete it.
Who is responsible
IBRA CIE
{{SHOP_ADDRESS}}
{{SHOP_EMAIL}}
We are the data controller for the information described here.
What we collect
When you place an order: name, email, phone number, billing and delivery address, and what you bought.
When you create an account: the above, plus your password in hashed form. We never store it in readable text.
When you pay: our payment provider handles your card details directly. We receive only a confirmation, the last four digits, and the card type. Full card numbers never reach our servers.
When you contact us: whatever you write, so we can answer and keep a record of the conversation.
When you use the site: IP address, browser and device type, pages viewed, and referring site. This is technical data used to keep the site working and secure.
When you subscribe: your email address, and nothing else.
Why we use it
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Payment and fraud prevention | Contract and legitimate interest |
| Customer support | Contract |
| Keeping accounting and tax records | Legal obligation |
| Site security and abuse prevention | Legitimate interest |
| Marketing emails | Your consent |
| Improving the site | Legitimate interest |
We do not use your data to make automated decisions that produce legal effects for you.
Who we share it with
We share only what is necessary, and only with:
- Payment providers, to take payment
- Shipping carriers, to deliver your order
- Email and hosting providers, to run the site and send order notifications
- Accountants and tax authorities, where the law requires it
Each of these is bound to use the data only for that purpose.
We do not sell your personal information, and we do not share it with advertisers.
If our business is ever sold or merged, your data may transfer to the new owner, who would remain bound by this policy.
Cookies
We use cookies for three things:
Essential — keeping you signed in and remembering your basket. The site cannot work without these.
Preferences — remembering choices like language or currency.
Analytics — understanding which pages are used, in aggregate. Only with your consent.
You can refuse non-essential cookies through the banner or your browser settings. Refusing them does not stop you shopping.
How long we keep it
Order records: for as long as tax and accounting law requires, typically 10 years.
Account data: until you delete your account.
Support messages: 3 years, so we can refer back to earlier conversations.
Marketing consent: until you unsubscribe.
Technical logs: 90 days.
Your rights
You can ask us to:
- Show you what we hold about you
- Correct anything inaccurate
- Delete your data, where we are not legally required to keep it
- Export it in a portable format
- Stop processing it for marketing, at any time
- Object to processing based on legitimate interest
Write to {{SHOP_EMAIL}} and we will respond within 30 days. We may ask you to confirm your identity first.
If you are unhappy with our response, you can complain to the data protection authority in your country.
Marketing
We only send marketing emails if you asked for them. Every one has an unsubscribe link that works immediately.
Order confirmations, shipping notices and service messages are not marketing and are sent regardless, because you need them.
Security
Traffic is encrypted in transit. Passwords are hashed. Access to customer data is limited to staff who need it. Payment details are handled by our provider and never stored by us.
No system is perfectly secure. If a breach affects your data, we will tell you and the relevant authority as the law requires.
International transfers
Some of our providers operate outside Djibouti. Where data is transferred, we rely on legally recognised safeguards to protect it.
Children
This site is not intended for children under 16, and we do not knowingly collect their data. If you believe we have, contact us and we will delete it.
Changes
We may update this policy. The date at the top shows when it last changed. If a change is significant, we will tell account holders directly.
Contact
Questions, requests or complaints: {{SHOP_EMAIL}}