Privacy policy

Fenjan & Fustan is an online store at store.fenjanfustan.com. The party responsible for your data is Fenjan & Fustan A Part of Al-Amal Collection Trading, located at Iraq, Al-Najaf.

• Account: when you sign in with Google or with an email and password, we keep your account ID, email address, name, profile photo, and account status, to run your account and your orders.
• Saved addresses: the address label, name, phone number, governorate, district, street address, and delivery instructions, to make future orders easier.
• Orders (account holders and guests): your name, phone number, email if you enter one, delivery address, products, quantities and prices, discount code, and order status, to fulfil and deliver your order. Payment is cash on delivery; we collect no card details.
• Instalment requests: the product, the requested amount in Iraqi dinars, the number of months, and your note. Our team reviews them manually, and they are not sent to any bank.
• Cart and wishlist: products, quantities, and discount code, kept on your device and synced to your account when you are signed in.
• Security and abuse prevention: we limit repeated attempts using a one-way hash of your account ID, or of your IP address when you order as a guest. We also log important actions, such as submitting an instalment request or changes made by our staff, with the account ID and time.

We use only what the store needs to work and what saves your choices. We use no analytics, tracking, or advertising tools.

• Google (Firebase): sign-in, storage of accounts, addresses, orders, instalment requests, and carts in the Cloud Firestore database, and App Check with reCAPTCHA Enterprise to protect the site.
• Cloudflare: hosting and serving the store, technical request data such as IP address and browser type, operational logs, and product image storage.

• Account and address data: As long as the account is active.
• Orders and their records: Five years from the order date.
• Instalment requests: Five years from the completion of payment.
• Security and administration logs: Three years for security and administration logs.
• The sign-in session cookie expires within one hour at most, and what is stored on your device stays until you clear it.

You can ask for a copy of your data, or ask us to correct or delete it, by writing to support@fenjanfustan.com. You can remove what is stored on your device from your browser settings.

• The site works only over encrypted connections (HTTPS).
• The sign-in session cookie is not available to page scripts, and every request is checked on the server.
• Prices and totals are calculated on the server. Staff access is limited by role, and changes are logged.

If we change how we handle data, we will update this page and the last updated date below.

For any privacy question:

• Email: support@fenjanfustan.com
• Phone: +9647701234567
• Address: Iraq, Al-Najaf