Privacy Policy

This policy explains how Al Daouk Sweets (“Al Daouk”, “we”, “us”) collects, uses and protects personal data when you visit this website, place an order, contact us or subscribe to our newsletter.

We handle personal data in line with Lebanese law, including Law No. 81/2018 on Electronic Transactions and Personal Data.

We only ask for what we need to prepare and deliver your order or to answer your message.

• Orders: your name, email address, phone number, delivery address and country, any order notes, the items you ordered and how you chose to pay.
• Contact form: your name, email address, subject and message.
• Newsletter: your email address and preferred language.
• Technical data: your IP address, browser type and the pages you request, which our hosting infrastructure processes to serve the site and which we use briefly to protect it against abuse.

Card payments are processed by BLOM Bank through its payment platform, Cybersource. You enter your card details into a secure payment form provided by Cybersource, and they go directly to the bank’s platform. Your card details never pass through or are stored on our servers.

We receive only the outcome of the payment and a transaction reference, which we keep to confirm and reconcile your order.

• To prepare, deliver and support your order, including contacting you about it.
• To confirm payments with the bank and to help prevent fraud.
• To reply to your messages and enquiries.
• To send you our newsletter, if you subscribed. You can ask us to stop at any time.
• To meet our legal, accounting and tax obligations.

We do not sell your personal data, and we do not use it to make automated decisions about you.

We share personal data only with the service providers that help us run the shop, and only as much as each one needs:

• BLOM Bank and Cybersource, to process card payments and screen for fraud.
• DHL Express, for international orders: the recipient’s name, address, phone number and email address, so the parcel can be delivered.
• Resend, which sends our transactional emails, such as order confirmations.
• Railway, which hosts this website and its database.
• Clerk, which signs our staff in to the order administration area. Customers do not have accounts with Clerk.

Some of these providers process data outside Lebanon. We choose providers that protect personal data appropriately. We may also disclose personal data where Lebanese law requires it.

We keep cookies to what the site needs to work. We do not use advertising or analytics cookies.

• A language cookie that remembers whether you chose English or Arabic.
• Your shopping cart, saved in your browser’s local storage on your own device so it is still there when you return. It is only sent to us when you place an order.
• When you pay by card, the Cybersource payment form may use its own cookies or similar technologies for security and fraud prevention.
• Our contact and branches pages show embedded Google Maps. Google may set its own cookies when a map loads, under Google’s privacy policy.
• Staff who sign in to the administration area receive sign-in cookies from Clerk.

We keep order records for as long as we need them for delivery, after-sales support and our accounting and tax obligations. We keep contact messages while we deal with your enquiry and for a reasonable period afterwards. We keep newsletter addresses until you unsubscribe or ask us to remove them.

The site is served over an encrypted (HTTPS) connection, access to order data is limited to authorised staff, and card details never reach our systems. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.

Subject to Lebanese law, you can ask us to tell you what personal data we hold about you, to correct it, or to delete it where we no longer need it. You can also ask us to stop sending you our newsletter at any time.

To make a request, contact us through our contact page. We may need to confirm your identity before we act on it.

Our shop is intended for adults. We do not knowingly collect personal data from children; a parent or guardian should place orders on their behalf.

We may update this policy as our services change, for example when we add a delivery partner. The date at the top of this page shows when it was last revised.