1. Who We Are

Bina Al Ruya Trading & Contracting ("we," "us," or "our") is a Qatar-based trading company specializing in hygiene products, diapers, and household supplies. We are committed to protecting your privacy and complying with Qatar's Personal Data Protection Law No. 13 of 2016 and international privacy standards.

Data Controller: Bina Al Ruya Trading & Contracting
Contact for Privacy Queries: trading@brtc.qa

2. Information We Collect

We collect information to provide, improve, and personalize your shopping experience:

🔹 Information You Provide Directly

• Name, email, phone number, delivery address
• Payment information (processed securely via PCI-compliant gateways; we do not store full card details)
• Order history, preferences, and customer service communications

🔹 Information Collected Automatically

• Device information (IP address, browser type, operating system)
• Usage data via cookies and similar technologies (pages viewed, time spent, referral source)
• Meta Business Tools data when you interact with our Facebook/Instagram shops

🔹 Information from Third Parties

• Delivery partners (for fulfillment)
• Payment processors (for transaction verification)
• Meta Platforms, Inc. (when you engage with our social commerce surfaces)

3. How We Use Your Information

We process your personal data for the following lawful purposes:

• ✅ To process and fulfill your orders, including payment verification and delivery
• ✅ To communicate order confirmations, shipping updates, and customer support
• ✅ To improve our website, products, and customer experience
• ✅ To send promotional offers (you may opt-out anytime)
• ✅ To prevent fraud and enhance security

4. Legal Basis for Processing

Where applicable, we rely on the following legal bases for processing personal data under Qatar's PDPPL and international standards:

• Contractual necessity: To fulfill your order and provide services
• Legitimate interests: For business operations, security, and service improvement
• Consent: For marketing communications (withdrawable anytime)
• Legal obligation: To comply with Qatari regulatory requirements

5. Use of Meta Business Tools & Social Commerce

• We receive aggregated insights (e.g., "Page Insights") to understand customer behavior.
• Under Meta's Page Insights Controller Addendum, we and Meta act as joint controllers for certain data.
• You may review Meta's data practices here: Facebook Data Policy.
• We do not sell your personal data to third parties for advertising purposes.

6. How We Share Your Information

We may share your information only in these limited circumstances:

• 🔸 Service Providers: Trusted partners for payment processing, delivery, and IT support (bound by confidentiality agreements)
• 🔸 Legal Requirements: If required by Qatari authorities or to protect our rights
• 🔸 Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)
• 🔸 With Your Consent: For any other purpose explicitly authorized by you

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

7. Data Retention

We retain your personal data only as long as necessary:

• Order and transaction records: Minimum 5 years per Qatari commercial law requirements
• Marketing consent: Until you withdraw consent or request deletion
• Website analytics: Aggregated and anonymized after 24 months

8. Your Rights Under Qatar's PDPPL

You have the right to:

• ✅ Access the personal data we hold about you
• ✅ Request correction of inaccurate or incomplete data
• ✅ Request deletion of your data (subject to legal retention requirements)
• ✅ Withdraw consent for marketing communications anytime
• ✅ Object to or restrict certain processing activities
• ✅ Request data portability in a structured, commonly used format
• ✅ Lodge a complaint with Qatar's Data Protection Authority (if applicable)

To exercise these rights, contact us at trading@brtc.qa. We will respond within 30 days as required by law.

9. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse, including:

• SSL encryption for data transmission
• Secure, PCI-compliant payment processing
• Access controls and staff training on data protection
• Regular security assessments

10. Cookies & Tracking Technologies

Our website uses cookies to:

• Remember your preferences and shopping cart
• Analyze traffic and improve user experience
• Enable Meta Pixel for ad performance measurement (with consent)

You can manage cookie preferences via your browser settings. Disabling cookies may limit website functionality.

11. Children's Privacy

Our products are intended for general audiences. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with information, please contact us immediately for deletion.

12. International Data Transfers

If your data is transferred outside Qatar (e.g., to cloud service providers), we ensure appropriate safeguards are in place per Qatar's PDPPL, including contractual clauses or adequacy decisions.

13. Changes to This Privacy Policy

We may update this policy to reflect legal or operational changes. We will notify users of material changes via email or website notice. Continued use constitutes acceptance.

14. Contact Us for Privacy Matters