Privacy & Policy
Doha Rose respects your privacy and is committed to safeguarding the personal data of our customers, gift recipients, and website visitors. This Privacy Policy outlines how we collect, use, store, share, and protect your personal information in accordance with Qatar Law No. 13 of 2016 on the Protection of Personal Data Privacy (the 'PDPPL') and related executive guidelines.
3.1 Information We Collect
We collect information necessary to process orders, facilitate timely delivery, ensure transaction security, and provide exceptional customer support:
- Purchaser / Sender Information: Full name, email address, telephone/mobile number, billing address, account login credentials, order history, and customer service communications.
- Recipient Information: Full name, physical delivery address (including building name, street number, zone, and municipality or GPS location pin), local mobile contact number, and personalized greeting card messages.
- Financial & Transactional Data: Payment card type, issuing bank, transaction reference numbers, and billing tokens. Note: Sensitive card numbers, expiry dates, and CVV/CVC security codes are entered directly into encrypted payment gateways and are never stored or accessible on Doha Rose servers.
- Technical & Usage Information: IP address, browser type, device operating system, referring URLs, pages visited, time spent on pages, and geographic location derived from IP addresses.
3.2 Purpose and Legal Basis for Processing
We process personal data only where lawful and justified under Qatari law:
- Contractual Fulfillment: To confirm, assemble, route, and deliver your floral orders; to communicate order tracking updates via SMS, WhatsApp, or email; and to process payments or refunds.
- Legal & Regulatory Compliance: To comply with financial accounting obligations, tax reporting, anti-fraud verifications, and lawful requests from Qatari regulatory authorities.
- Legitimate Business Interests: To evaluate website performance, improve our floral catalog, maintain platform security, prevent fraudulent transactions, and resolve customer grievances.
- Marketing Communications: With your explicit opt-in consent, we may send promotional offers, seasonal catalogs (e.g., Mother's Day, Ramadan, Qatar National Day), and flower care tips. You may withdraw consent at any time.
3.3 Disclosure and Sharing of Personal Data
Doha Rose strictly upholds the principle that we never sell, rent, or trade your personal information to third parties. Disclosures are limited to:
- Logistics & Couriers: Recipient name, contact number, delivery address, and delivery notes are shared with our in-house drivers and contracted refrigerated courier partners solely to effectuate physical delivery.
- Payment Processors: Encrypted financial details are processed by licensed payment service providers adhering to Level 1 Payment Card Industry Data Security Standards (PCI-DSS).
- Technical Infrastructure Partners: Cloud hosting providers, customer relationship management (CRM) systems, and SMS gateway providers operating under binding data protection agreements.
- Legal Authorities: When mandated by Qatari law, court subpoena, Ministry of Commerce and Industry (MOCI) directive, or law enforcement agency.
3.4 Recipient Privacy and Confidentiality
Because flower delivery frequently involves surprise gifting, we treat recipient information with the utmost discretion:
- No Marketing to Recipients: Recipient contact numbers are utilized strictly for delivery coordination and location verification. We do not use recipient telephone numbers or emails for promotional marketing.
- Discretion & Anonymity: When a sender requests an anonymous delivery, we will not voluntarily disclose the sender's identity to the recipient on the card or upon delivery. However, as noted in our Terms, we cannot provide absolute anonymity in the event of legal inquiry or police investigation.
3.5 Data Security and Retention
- Security Measures: Doha Rose implements industry-standard administrative, physical, and technical safeguards, including 256-bit Secure Socket Layer (SSL) encryption, firewalls, and restricted administrative access to safeguard data against unauthorized access, loss, or alteration.
- Data Retention Periods: We retain personal data only for as long as necessary to fulfill the purposes for which it was gathered, including satisfying legal, accounting, and commercial reporting requirements under Qatar commercial laws (typically 5 to 7 years for commercial transactional records).
3.6 Cookies and Tracking Technologies
Our website utilizes cookies, web beacons, and session identifiers to enhance user experience:
- Essential Cookies: Required for cart persistence, session security, language preferences (Arabic / English), and checkout progress.
- Analytical Cookies: Help us analyze site traffic, user journeys, and popular floral arrangements to optimize site performance.
- Marketing Cookies: Used to measure advertising campaign efficacy across social media platforms. Users can configure browser settings to decline cookies, though certain site features may function with diminished efficiency.
3.7 Your Rights Under Qatar PDPPL (Law No. 13 of 2016)
Under the Qatar Personal Data Privacy Protection Law, data subjects enjoy defined statutory rights:
- Right of Access: You have the right to request confirmation of whether we process your personal data and obtain a copy of the stored records.
- Right to Rectification: You may request the immediate correction or completion of inaccurate or outdated personal details.
- Right to Erasure ('Right to be Forgotten'): You may request the erasure of your personal data where retention is no longer necessary, subject to statutory recordkeeping requirements.
- Right to Object & Opt-Out: You have the right to withdraw marketing consent or object to direct electronic marketing at any time by clicking the 'Unsubscribe' link in emails or emailing our privacy team.
- Exercising Rights: To exercise any of these rights, contact our Data Protection Officer at: privacy@doharose.qa or care@doharose.qa.
3.8 Contact Information & Complaints
If you have inquiries, concerns, or complaints regarding these policies or our data practices, please reach out to our dedicated support team:
- Company Name: Doha Rose W.L.L.
- Postal Address: PO Box 00000, Doha, State of Qatar
- Customer Care Hotline: +974 51600667
- Email: doharose.support@gmail.com
- Website: https://www.doharose.com