Privacy Policy

Effective Date: August 2026

At Ciel Haven ("Ciel Haven", "Company", "we", "our", or "us"), we are committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you visit our website, create an account, place an order, or otherwise interact with our services.

By using our website, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We may collect personal information directly from you, automatically through your use of our website, or from trusted third parties.

1.1 Information You Provide

We may collect:

• Full name;
• Email address;
• Telephone number;
• Billing address;
• Shipping address;
• Account login credentials;
• Payment information;
• Order history;
• Customer service enquiries and communications;
• Preferences and product interests.

1.2 Information Collected Automatically

When you visit our website, certain information may be collected automatically, including:

• IP address;
• Browser type and version;
• Device information;
• Operating system;
• Website usage data;
• Pages visited;
• Time spent on pages;
• Referral sources;
• Cookie and tracking technology data.

1.3 Information from Third Parties

We may receive information from:

• Payment service providers;
• Delivery and logistics providers;
• Marketing and advertising partners;
• Analytics providers;
• Fraud prevention and identity verification providers.

2. How We Use Your Information

We use your information for legitimate business purposes, including to:

• Process and fulfil orders;
• Deliver products and services;
• Create and manage customer accounts;
• Process payments;
• Provide customer support;
• Respond to enquiries and requests;
• Improve our website, products, and services;
• Personalise your shopping experience;
• Prevent fraud and unauthorised activity;
• Comply with legal and regulatory obligations;
• Send transactional communications related to your account or orders;
• Send marketing communications where permitted by law or where you have provided consent.

3. Legal Basis for Processing

Where required by applicable law, we process personal information based on one or more of the following legal grounds:

• Performance of a contract;
• Compliance with legal obligations;
• Protection of legitimate business interests;
• Your consent where required by law.

4. Payment Information

All payments are processed through secure third-party payment providers.

We do not store complete credit card, debit card, or other payment card information on our servers.

Payment information provided during checkout is handled in accordance with the security standards and privacy policies of the relevant payment provider.

5. Marketing Communications

Where permitted by applicable law, we may send promotional communications regarding:

• New product launches;
• Collections;
• Exclusive offers;
• Events;
• Brand updates.

You may unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link included in marketing emails; or
• Contacting our Customer Care Team.

Opting out of marketing communications does not affect transactional communications relating to your orders or account.

6. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to improve functionality, analyse website performance, and personalise content.

Cookies may be used to:

• Remember user preferences;
• Maintain shopping cart functionality;
• Improve website performance;
• Analyse visitor behaviour;
• Support marketing and advertising activities.

You can manage cookie preferences through your browser settings.

Additional information may be provided in our Cookie Policy.

7. Sharing of Information

We do not sell, rent, or trade your personal information to third parties.

We may share information with carefully selected third parties where necessary to operate our business, including:

• Payment processors;
• Delivery and logistics providers;
• Technology and hosting providers;
• Website analytics providers;
• Customer support providers;
• Marketing service providers;
• Legal, regulatory, or governmental authorities where required by law.

All third-party service providers are required to process information only for authorised purposes and in accordance with applicable privacy and security requirements.

8. International Data Transfers

Your personal information may be processed or stored in countries outside the Kingdom of Saudi Arabia where our service providers maintain operations.

Where cross-border transfers occur, we will take reasonable steps to ensure that appropriate safeguards are implemented in accordance with applicable laws and regulations.

9. Data Security

We implement reasonable technical, administrative, and organisational measures designed to protect personal information against:

• Unauthorised access;
• Loss;
• Misuse;
• Alteration;
• Disclosure;
• Destruction.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure.

10. Data Retention

We retain personal information only for as long as necessary to:

• Fulfil the purposes described in this Privacy Policy;
• Maintain business records;
• Resolve disputes;
• Enforce our agreements;
• Comply with legal, tax, accounting, and regulatory obligations.

When information is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in accordance with applicable laws.

11. Your Rights

Subject to applicable laws and regulations, you may have the right to:

• Access your personal information;
• Request correction of inaccurate information;
• Request deletion of personal information where legally permissible;
• Object to certain processing activities;
• Withdraw consent where processing is based on consent;
• Request information regarding how your personal information is used.

To exercise any applicable rights, please contact us using the contact details provided below.

12. Children's Privacy

Our website is not intended for children under the age of eighteen (18) without the involvement of a parent or legal guardian.

We do not knowingly collect personal information from children in violation of applicable laws.

If we become aware that personal information has been provided by a child without appropriate authorisation, we will take reasonable steps to delete such information.

13. Third-Party Websites

Our website may contain links to third-party websites, applications, or services.

We are not responsible for the privacy practices, policies, content, or security measures of third-party websites.

We encourage users to review the privacy policies of all third-party services they access.

14. Saudi Personal Data Protection Law (PDPL)

Where applicable, we process personal information in accordance with the requirements of the Personal Data Protection Law (PDPL) and any implementing regulations applicable within the Kingdom of Saudi Arabia.

Nothing in this Privacy Policy limits any rights granted to individuals under applicable Saudi laws and regulations.

15. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time.

Any changes will be published on this page together with a revised Effective Date.

Your continued use of the website following publication of updates constitutes acceptance of the revised Privacy Policy.

16. Contact Us

If you have any questions regarding this Privacy Policy or our data handling practices, please contact:

Ciel Haven Customer Care

Email: [email protected]