🔐 PRIVACY POLICY

Last Updated: [5/1/2026]

1. Introduction

NAYYIR (“we”, “our”, “us”) operates the website https://nayyir.net as an online-only retail store offering women’s bags, shoes, and luxury jewelry to customers worldwide.

This Privacy Policy explains how we collect, use, disclose, and protect personal data in accordance with the laws and regulations of Oman, including the Personal Data Protection Law (Royal Decree No. 6/2022) and applicable consumer protection regulations.

By using our website or placing an order, you agree to the practices described in this policy.


2. Personal Data We Collect

We may collect the following personal data when you browse our website, place an order, or contact us:

  • Full name

  • Email address

  • Phone number

  • Billing address

  • Shipping address

  • Order details and purchase history

  • Communications you send to us (emails, contact forms, messages)

We collect only data that is necessary, relevant, and proportionate to providing our services.


3. Payment Information

Payments on NAYYIR are processed through licensed third-party payment service provider in Oman.

When you make a payment:

  • Payment card details may be collected and processed directly by Thawani Pay

  • NAYYIR does not store, process, or retain payment card details on its servers

  • We do not have access to your full card information

Any payment data processed is subject to Thawani Pay’s own privacy, security, and compliance obligations, including applicable banking and PCI-DSS standards.

By completing a transaction, you acknowledge that your payment information is handled by the payment provider in accordance with their policies.


4. Purpose of Data Processing

We process personal data for the following lawful purposes:

  • To process and fulfill orders

  • To arrange shipping and delivery

  • To communicate with customers regarding orders or inquiries

  • To provide customer support

  • To comply with legal and regulatory obligations

  • To improve our website and services

  • To send marketing communications only where consent has been given


5. Legal Basis for Processing

Personal data is processed based on one or more of the following legal grounds under Omani law:

  • Performance of a contract (order fulfillment)

  • Compliance with legal obligations

  • Legitimate business interests

  • Customer consent (where required)


6. Disclosure of Personal Data

We may share personal data only with trusted parties, including:

  • Shipping and logistics providers

  • Payment service providers (for transaction processing only)

  • Regulatory or governmental authorities when required by law

We do not sell, rent, or trade personal data to third parties.


7. Data Storage & Security

We apply appropriate technical and organizational security measures to protect personal data from unauthorized access, loss, alteration, or disclosure.

While we take reasonable steps to protect data, no electronic transmission or storage system can be guaranteed to be completely secure.


8. Data Retention

Personal data is retained only for as long as necessary to:

  • Fulfill the purposes outlined in this policy

  • Meet legal, accounting, and regulatory requirements

  • Resolve disputes or enforce agreements

After this period, data is securely deleted or anonymized.


9. Cross-Border Data Transfers

As NAYYIR operates internationally, personal data may be transferred or processed outside the Sultanate of Oman where necessary (e.g. international shipping).

Where such transfers occur, we take reasonable steps to ensure that personal data is protected in accordance with applicable laws.


10. Your Rights

In accordance with Omani data protection regulations, you have the right to:

  • Request access to your personal data

  • Request correction of inaccurate or incomplete data

  • Request deletion where legally permissible

  • Withdraw consent for marketing communications at any time

Requests can be submitted using the contact details below.


11. Marketing Communications

You will receive marketing or promotional messages only if you have explicitly consented.
You may withdraw consent at any time by contacting us or using the unsubscribe option where provided.


12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes.
The updated version will be published on our website with a revised “Last Updated” date.


13. Contact Information

For privacy-related questions or requests, contact us at:

📧 [email protected]