Privacy policy

Last updated: September 2026

The short version

The store collects only what is needed to process orders and prevent fraud.
Customer information is never sold or traded.
Information is shared with carriers, payment providers, and similar services only as needed to complete an order.
Cookies are used for functionality, analytics, and security. They can be disabled in the browser.
Customers can request access to their data, correction, or deletion.

1. Who This Policy Covers

Scope: This policy explains how the store handles personal information collected through this website and in the course of fulfilling orders.
Responsible party: The store is responsible for the information described here.
Contact: Privacy requests and questions can be sent to team@elkhaldistudio.com.

2. Information Collected

The store collects only what is necessary to operate, process orders, and protect against fraud:

Identity and contact: Full name, email address, shipping address, and phone number where provided for delivery.
Payment: Payment-related information, processed by third-party providers. The store does not store full card details.
Technical: IP address, device information, browser and usage information.
Order records: Order and transaction history, and customer communications and support history.
Cookies: Information collected through cookies and similar technologies.

3. How Information Is Used

Fulfilling orders: Processing, shipping, and delivery coordination.
Communication: Customer support and order updates.
Payment: Verification and processing.
Security: Fraud detection, abuse prevention, and security monitoring.
Disputes: Dispute resolution and chargeback defence.
Compliance: Meeting legal, customs, and regulatory obligations.

4. Why the Store Is Allowed to Use It

Where the laws of the Customer's country require a legal basis for processing, the store relies on:

Performing the contract: Processing and delivering the order the Customer placed.
Legal obligation: Tax, accounting, and customs requirements.
Legitimate interests: Preventing fraud, defending disputes, securing the website, and improving the service.
Consent: For non-essential cookies and any marketing communications, where required.

5. Sharing Information

The store does not sell or trade personal information.

Information is shared only where necessary, with:

Carriers and logistics providers: To deliver the order and clear customs.
Payment processors and financial institutions: To take payment and resolve disputes.
Fraud prevention and security services: To screen transactions and protect the store.
Analytics providers: To understand website performance.
Legal and regulatory authorities: Where required by law.

These providers process information only as needed to deliver their service, under their own privacy obligations.

6. International Transfers

Why transfers happen: Orders ship internationally, so information is shared with carriers, customs authorities, and payment providers outside Oman.
What is shared: Only what is necessary to deliver the order and meet import requirements.
Safeguards: Where the law requires it, the store takes reasonable steps to ensure transferred information remains protected.

7. Cookies & Tracking

Cookies and similar technologies are used to:

Maintain website functionality
Analyse website usage and performance
Improve security and detect suspicious activity
Improve the customer experience

Cookies can be disabled through browser settings, though some website functionality may be affected. Where the law requires consent for non-essential cookies, that consent is requested before they are set.

8. Data Security

Safeguards: The store applies reasonable technical and organisational measures to protect personal information.
Limits: No online system, transmission method, or storage system is completely secure.
Acknowledgment: Transmitting information over the internet carries inherent risk.

9. How Long Information Is Kept

Order records: Retained as long as needed to fulfil the order and meet accounting, tax, and customs obligations.
Fraud and dispute records: Retained while a dispute or chargeback window remains open, and for as long as needed to defend a claim.
After that: Information is deleted or anonymised when it is no longer required.

10. Customer Rights

Depending on where the Customer lives, they may have the right to:

Access the personal information the store holds about them
Correct information that is inaccurate
Delete information, where applicable
Object to or restrict certain processing
Receive a copy of their information in a portable format
Withdraw consent where processing is based on consent

Limits on these rights

Some requests cannot be met in full where the information is needed to meet a legal obligation, to defend a legal claim or chargeback, or to prevent fraud. Where a request is refused in part, the store will say why.

11. Making a Request or Complaint

How to request: Contact the store at team@elkhaldistudio.com. The store may ask for information to verify identity before acting.
Response time: The store aims to respond within 30 days.
Complaints: Customers in countries with a data protection authority have the right to complain to that authority.

12. Children

This website and its products are not directed at children. The store does not knowingly collect information from anyone under 18.

13. Fraud & Abuse

Privacy protections exist to protect legitimate customers. They do not prevent the store from investigating fraud, defending disputes, or sharing evidence where that is necessary.

What counts as fraud or abuse

False chargebacks raised after confirmed delivery.
False non-delivery claims where valid tracking confirms receipt.
False damage or defect claims about product condition.
Misleading information given to obtain a refund or replacement.
Abuse of payment protection or dispute processes.

Screening and investigation

All orders may be subject to verification, fraud screening, and transaction monitoring. Where fraud is suspected, the store may review:

Order history and transaction patterns
Payment verification data
IP address and device information
Delivery confirmation records
Customer communications and previous dispute history

Sharing evidence

Where fraud is suspected or confirmed, relevant records may be shared with payment providers, financial institutions, fraud prevention services, and legal or regulatory authorities. Only what is reasonably necessary for fraud prevention, dispute defence, or legal purposes is shared.

Effect on rights

A request to delete or restrict information may be refused where the store needs those records to defend a chargeback or legal claim, or to prevent further fraud. This does not remove the Customer's other rights, and the store will say why a request has been refused.

Consequences

Where fraudulent or abusive behaviour is confirmed, the store may cancel pending orders, refuse service permanently, block future purchases, and contest disputes using the available evidence.

14. Updates

The store may update this policy at any time. The version published on this page is the one that applies.