At Lulu & Gems Online., we value the trust you place in https://luluandgems.com, and we are committed to upholding the highest standards for secure transactions and the protection of your personal information. This Privacy Policy outlines how we collect, use, and safeguard your data.

We are committed to protecting your personal data in accordance with the laws and regulations of the Kingdom of Bahrain, including Law No. (30) of 2018 promulgating the Personal Data Protection Law (“PDPL”).

This Privacy Policy explains how we collect, process, store, disclose, and protect your personal data, as well as your rights in relation to such data.

1. Data Controller

When creating an account or using our website, we may collect personal details such as:

  • Full Name
  • Email Address
  • Contact Number
  • Other relevant information required for account setup or transaction completion

Please note that while you can browse certain sections of our website without registering, placing an order requires account creation. We may use your contact information to notify you of exclusive offers and product recommendations based on your browsing history and previous purchases.

2. How We Use Your Information

Your personal data enables us to:

  • Fulfill and manage service or product requests
  • Resolve technical or order-related issues
  • Process payments and recover applicable fees
  • Conduct customer satisfaction surveys
  • Provide updates on promotions and offers
  • Analyze site traffic and user behavior to improve functionality

We may also use your IP address to help identify potential issues with our server and enhance site diagnostics.

We use your personal data for the following purposes:

  • Creating and managing your account
  • Processing and fulfilling orders
  • Handling payments and refunds
  • Delivering purchased products
  • Responding to inquiries and resolving complaints
  • Sending transactional communications (e.g., order confirmations)
  • Sending marketing communications (where consent has been provided)
  • Conducting internal analysis to improve our services and user experience

We will not process your personal data for purposes incompatible with those listed above without obtaining your consent where required by law.

3. Security Measures

We maintain strict security protocols to protect your information from unauthorized access, loss, misuse, or alteration. When accessing or updating your personal account data, we utilize a secure server environment to ensure your privacy. Once data is stored with us, it is safeguarded in accordance with industry-leading security standards.

4. Your Choice: Opting Out

At any time, users may choose to opt out of receiving marketing or promotional communications from us or on behalf of our trusted partners. Opt-out options are available within your account settings after registration.

5. Updates to This Policy

We may update this policy periodically. Changes will be posted on our website, and the “Last Updated” date will reflect revision

6. Lawful Basis for Processing

We process your personal data in accordance with the PDPL based on one or more of the following lawful grounds:

  1. Your explicit or implied consent
  2. Performance of a contract (e.g., processing and delivering your orders)
  3. Compliance with legal obligations under Bahraini law
  4. Legitimate interests pursued by us, provided such interests do not override your fundamental rights and freedoms
  5. Where processing is based on consent, you may withdraw your consent at any time, subject to legal or contractual restrictions.

7. Marketing Communications

We may send promotional communications regarding new products, offers, or services, provided you have consented to receive such communications.

You may opt out at any time by:

  • Using the unsubscribe link in our emails; or
  • Updating your account preferences; or
  • Contacting us directly.

8. Cross-Border Transfers

If personal data is transferred outside Bahrain, we ensure compliance with PDPL requirements, including:

  1. Transfers to jurisdictions approved as having adequate protection; or
  2. Use of legally approved safeguards and contractual protections.

9. Data Security

In compliance with Bahraini law, we implement appropriate technical and organizational safeguards, including:

  • Secure encrypted communications (SSL)
  • Access controls and authentication
  • Secure storage systems
  • Protection against unauthorized access, alteration, or disclosure

We take reasonable steps to protect your personal data from misuse or unauthorized access.

10. Changes to This Privacy Policy

We may amend this Privacy Policy to comply with legal or regulatory changes in Bahrain, changes will be published on the Platform with an updated effective date. Continued use of the Platform constitutes acceptance of the revised Privacy Policy.