Privacy policy
Privacy Policy
Nowayer Trading – www.nowayer.co
1. Introduction & Scope
This Privacy Policy (“Policy”) describes how Nowayer Trading (“Nowayer,” “we,” “our,” or “us”) collects, uses, stores, discloses, and protects personal data in connection with the operation of our website, www.nowayer.co (the “Website”), and the provision of our products and services.
This Policy applies to all visitors, users, and customers (“you,” “your,” or the “Customer”) who access the Website, create an account, or purchase products from Nowayer. It also applies to personal data collected offline through customer service or other communications.
By accessing the Website, creating an account, or placing an order, you acknowledge and agree that your personal data will be processed in accordance with this Policy, the Qatar Personal Data Privacy Law (Law No. 13 of 2016), and other applicable laws. Where required by international law, such as the EU General Data Protection Regulation (GDPR), this Policy extends to cover those obligations as well.
2. Company Identity & Contact Information
The Website is owned and operated by:
Nowayer Trading
Doha, State of Qatar
Website: www.nowayer.co
Email for Privacy Matters: customercare@nowayer.co
For the purposes of Qatar PDPL and, where relevant, other international data protection frameworks, Nowayer Trading acts as the Data Controller of your personal data, meaning we determine the purposes and means of processing such data.
3. Legal Basis & Governing Law
Nowayer processes personal data in accordance with:
● Qatar Personal Data Privacy Law (Law No. 13 of 2016), which regulates the collection, use, and protection of personal information in Qatar.
● Other applicable Qatari legislation, including the Electronic Commerce and Transactions Law (Law No. 16 of 2010).
● International standards, including the GDPR, where required by law (for example, when processing data of residents in the European Economic Area or the United Kingdom).
Processing of personal data is always based on one or more lawful grounds, including:
● The necessity of processing to perform a contract (e.g., fulfilling your purchase order).
● Compliance with a legal obligation (e.g., retaining invoices for tax purposes).
● Your explicit consent, where required (e.g., for marketing communications).
● Nowayer’s legitimate interests, provided they do not override your fundamental rights and freedoms (e.g., fraud prevention, Website security).
4. Definitions
For the purposes of this Policy:
● “Personal Data” means any information relating to an identified or identifiable individual, including but not limited to your name, email, address, telephone number, payment details, or IP address.
● “Processing” means any operation performed on personal data, such as collection, recording, storage, use, disclosure, or deletion.
● “Controller” means the entity that determines the purposes and means of processing personal data (Nowayer Trading in this case).
● “Customer” means any individual or entity purchasing products or interacting with the Website.
● “Cookies” means small text files stored on your device when you visit the Website, used for functionality, analytics, and personalization.
● “Third Parties” means service providers, payment processors, couriers, and other external entities with whom Nowayer may share data as necessary.
5. Information We Collect
Nowayer collects the following categories of personal data:
-
Information You Provide Directly
○ Name, billing and shipping address, phone number, email address.
○ Payment details (processed securely through third-party providers).
○ Measurements or customization details for pre-order items.
○ Account login credentials if you register with us.
○ Customer service inquiries or communications.
-
Information Collected Automatically
○ IP address, browser type, operating system.
○ Website usage data, including pages visited, products viewed, and time spent on the site.
○ Device identifiers and cookies for analytics and security purposes.
-
Information from Third Parties
○ Payment confirmation from payment gateways.
○ Delivery details from logistics and courier partners.
○ Fraud prevention data from verification services.
We do not intentionally collect sensitive personal data (e.g., health information, religion, political views). If such data is inadvertently provided, it will be treated with heightened safeguards and deleted where appropriate.
6. Purpose of Data Collection
Nowayer collects and processes personal data for the following purposes:
● Order Fulfillment: To process, confirm, ship, and deliver purchases made through the Website.
● Customer Support: To respond to inquiries, complaints, and requests.
● Account Management: To enable you to register, log in, and manage your account.
● Payment Processing: To facilitate secure transactions through authorized third-party payment processors.
● Marketing & Promotions: To send newsletters, promotional offers, and updates, where you have consented.
● Fraud Prevention & Security: To detect unauthorized activity, prevent fraud, and ensure the safety of transactions.
● Legal Compliance: To meet obligations under Qatari law, such as record retention, regulatory requests, and consumer protection.
Personal data will not be processed in a manner incompatible with these purposes, unless required by law or with your explicit consent.
7. Legal Grounds for Processing
In compliance with Qatar PDPL and international standards, Nowayer processes personal data under the following legal grounds:
-
Contractual Necessity: Processing is necessary to perform a contract with you, such as delivering your order.
-
Legal Obligation: Processing required by law, such as retaining financial records for tax compliance.
-
Consent: Processing based on your freely given consent, such as subscribing to marketing emails. You may withdraw consent at any time without affecting the lawfulness of prior processing.
- Legitimate Interests: Processing for Nowayer’s legitimate interests, such as improving our Website, analyzing sales, and protecting against fraudulent activity, provided such interests do not override your fundamental rights.
8. Use of Cookies & Tracking Technologies
The Website uses cookies, pixels, and other tracking technologies to provide essential functionality, enhance user experience, and analyze usage trends. By continuing to use the Website, you consent to the placement and use of cookies on your device, unless you choose to disable them via your browser settings. Please note that certain features of the Website may not function properly if cookies are disabled.
Types of Cookies Used
- Strictly Necessary Cookies – These cookies are essential for the operation of the Website and enable functions such as shopping cart management, secure login, and transaction processing. Without them, the Website cannot function properly.
- Performance & Analytics Cookies – These cookies collect anonymous information about how visitors interact with the Website, such as pages visited, time spent, and error messages. This helps us improve performance and user experience.
- Functional Cookies – These cookies remember your preferences, such as language, region, or saved login details, to provide a more personalized browsing experience.
- Marketing & Advertising Cookies – These cookies track browsing behavior across websites in order to deliver more relevant advertisements and promotional content, both on our Website and third-party platforms.
Third-Party Cookies
Some cookies are placed by third-party service providers that support Website functionality, analytics, or advertising. Examples include:
- Analytics tools (such as Google Analytics) for measuring traffic and usage patterns.
- Social media plugins that allow you to share content.
- Advertising partners that deliver targeted campaigns.
These third parties may collect information about your online activity over time and across different websites. Such data processing is subject to their own privacy policies.
Managing Cookies
Most web browsers allow you to control cookies through settings, including blocking certain types or deleting existing cookies. Instructions vary by browser, but common options include:
- Accepting all cookies.
- Rejecting all cookies.
- Notifying you when a cookie is being set.
Please note that if you disable or reject certain cookies, parts of the Website may become inaccessible or may not function as intended.
Retention of Cookie Data
Cookies are retained for varying durations depending on their type and purpose:
- Session cookies are temporary and expire once you close your browser.
- Persistent cookies remain on your device until they expire or are manually deleted.
Nowayer ensures that cookie data is retained no longer than necessary to fulfill the purposes outlined in this Policy.
9. Payment Data Security
Nowayer does not store or retain full payment card details on its servers. All online payments are processed securely through third-party payment gateways that comply with internationally recognized security standards, including PCI DSS (Payment Card Industry Data Security Standard).
All transactions processed through Visa, Mastercard, and PayPal are also subject to the terms and privacy policies of those providers, in addition to this Policy.
We receive only limited transaction information from such providers (e.g., payment confirmation, transaction ID). Customers are responsible for ensuring that the payment information provided is accurate and authorized.
Nowayer disclaims liability for the security practices of third-party payment processors, which are governed by their own terms and privacy policies.
10. Sharing & Disclosure of Personal Data
Nowayer may share personal data with third parties only where necessary, lawful, and consistent with this Policy. Such sharing includes, but is not limited to:
● Shipping & Logistics Providers – to deliver products to you.
● Payment Processors – to authorize and complete transactions.
● IT Service Providers – including hosting, data storage, and website maintenance partners.
● Professional Advisors – including auditors, accountants, and legal advisors, where necessary for compliance.
● Regulatory & Government Authorities – where disclosure is required by law, court order, or official request.
All third parties engaged by Nowayer are contractually bound to handle personal data securely and only for the specified purposes.
11. International Data Transfers
As Nowayer serves customers across the GCC and worldwide, personal data may be transferred outside the State of Qatar. Such transfers may include storage on cloud servers or processing by service providers located abroad.
Where international transfers occur, Nowayer ensures that adequate safeguards are in place, including:
● Contractual agreements with service providers requiring compliance with Qatari data protection principles.
● Use of providers certified under recognized frameworks (where applicable, e.g., EU/US data transfer standards).
● Ensuring transfers are limited to what is necessary for providing services.
Where data is transferred outside Qatar, we ensure compliance with Qatar PDPL through contractual safeguards or other lawful mechanisms.
By using the Website and placing international orders, you acknowledge and consent that your personal data may be transferred outside Qatar, subject to the safeguards described in this Policy.
12. Data Retention & Storage
Nowayer retains personal data only as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required by law. Retention periods include:
● Order Records & Invoices – retained for at least 10 years in accordance with Qatari commercial law and tax obligations.
● Customer Account Data – retained until account closure or inactivity for a defined period.
● Marketing Data – retained until you unsubscribe or withdraw consent.
● Legal & Compliance Records – retained for as long as necessary to resolve disputes or comply with legal obligations.
Once retention periods expire, personal data is securely deleted, anonymized, or archived in accordance with industry best practices.
13. Data Security Measures
Nowayer employs appropriate technical, organizational, and administrative safeguards to protect personal data against unauthorized access, disclosure, alteration, or destruction. Such measures include:
● SSL/TLS encryption for all Website transactions.
● Restricted access to personal data on a need-to-know basis.
● Secure servers and firewalls.
● Regular security audits and monitoring.
Despite these safeguards, no system can be guaranteed 100% secure. Customers acknowledge that data transmission over the internet carries inherent risks, and Nowayer cannot be held liable for breaches outside its reasonable control.
14. Customer Rights under Qatar Law
Under the Qatar Personal Data Privacy Law (PDPL), Customers have the following rights:
● Right of Access – to obtain confirmation of whether personal data is being processed and to access such data.
● Right of Rectification – to request correction of inaccurate or incomplete data.
● Right of Erasure – to request deletion of personal data, subject to legal or contractual retention obligations.
● Right to Withdraw Consent – to revoke consent for processing where consent is the basis of processing (e.g., marketing communications).
● Right to Object – to object to processing based on Nowayer’s legitimate interests, where applicable.
Requests to exercise these rights may be made by contacting Nowayer at the email address provided in Section 23. Nowayer will respond in accordance with Qatari law, subject to verification of identity and applicable exemptions.
15. Additional Rights for International Users
Where required by law, such as under the European Union General Data Protection Regulation (GDPR) or the UK GDPR, Customers residing in the European Economic Area (EEA) or the United Kingdom may have additional rights, including:
● Right to Data Portability – to receive personal data in a structured, commonly used, and machine-readable format.
● Right to Restrict Processing – to request suspension of processing under certain circumstances.
● Right to Object to Automated Decision-Making – to challenge decisions made solely by automated means that significantly affect you.
These rights are subject to legal limitations and may not apply where Nowayer’s processing is governed exclusively by Qatari law.
16. Children’s Privacy
Nowayer does not knowingly collect or process personal data from individuals under the age of 18. The Website and its services are not directed to minors.
If we become aware that personal data of a minor has been collected without verifiable parental consent, such data will be deleted promptly. Parents or guardians who believe that their child’s data has been improperly collected should contact us using the details in Section 23.
17. Marketing & Communication Preferences
With your consent, Nowayer may use your personal data to send promotional emails, newsletters, product updates, and special offers.
You may opt out of marketing communications at any time by:
● Clicking the “unsubscribe” link in any email we send; or
● Contacting us directly at the address provided in Section 23.
Opting out of marketing communications will not affect transactional communications related to orders, delivery, or customer service.
18. Third-Party Links & Services
The Website may contain links to third-party websites, applications, or services. Such third parties operate independently and are not controlled by Nowayer.
This Privacy Policy does not apply to third-party websites or services. Customers are encouraged to review the privacy policies of those third parties before providing any personal data. Nowayer disclaims responsibility for the practices of such third parties.
19. Changes to the Privacy Policy
Nowayer reserves the right to amend, update, or revise this Privacy Policy at any time, at its sole discretion. Updates will be effective upon posting to the Website, with the “Last Updated” date revised accordingly.
Customers are encouraged to review this Policy periodically to remain informed of how personal data is handled. Continued use of the Website following updates constitutes acceptance of the revised Policy.
20. Your Responsibilities as a Customer
You are responsible for ensuring that the personal data you provide to Nowayer is accurate, complete, and up to date.
You must also:
● Keep account credentials confidential and secure.
● Notify Nowayer promptly of any unauthorized use of your account.
● Ensure that any personal data provided to Nowayer on behalf of a third party (e.g., shipping recipient) has been lawfully obtained and shared with proper consent.
21. Complaints & Dispute Resolution
If you believe that Nowayer has violated your privacy rights under this Policy or applicable law, you may first contact us using the details provided in Section 23.
If you are not satisfied with our response, you may lodge a complaint with the Compliance and Data Protection Department of the Ministry of Communications and Information Technology in Qatar, which is the supervisory authority for data protection matters under the Qatar PDPL.
International customers may also have the right to file complaints with their local data protection authorities.
22. Governing Law
This Privacy Policy, and any dispute arising out of or relating to the processing of personal data, shall be governed by and construed in accordance with the laws of the State of Qatar.
Any disputes shall be subject to the exclusive jurisdiction of the competent courts of Doha, Qatar, without prejudice to rights that may be available to international customers under mandatory laws.
23. Contact Information
For all questions, requests, or complaints concerning this Privacy Policy or the handling of your personal data, you may contact:
Nowayer Trading
Doha, State of Qatar
Email: customercare@nowayer.co
Website: www.nowayer.co
We aim to respond to all customer inquiries within three (3) to seven (7) business days.