Privacy Policy

What we collect

• When you create an account or sign in: name, email, and phone number.
• When you place an order: delivery address, phone number, cart contents, and order details/history.
• When you request a Made-to-Measure piece: the body measurements you provide yourself, which are fully encrypted at rest (field-level AES-256-GCM encryption). They never appear in WhatsApp, system logs, or analytics, reach you only through a dedicated measurement-confirmation email, and are accessible internally only to the authorized tailoring team.
• When you complete a "Send Link" payment: we never receive or store your bank card or account details; payment happens directly between you and your bank outside our platform. We keep an internal payment-receipt image for bookkeeping only, accessible only to authorized staff.
• When you review a product, add to your wishlist, or request a back-in-stock alert: the rating/comment tied to your account, or the contact details tied to your alert request.
• Notification preferences: you can choose your preferred contact channel in your account settings, including a WhatsApp option. Currently, every message actually sent reaches you by email only.
• Cookies: we use only functional cookies necessary for the site to work (your chosen language, sign-in session, cart, performance caching). We do not use any advertising, analytics, or third-party tracking cookies.

Legal basis for processing

We process your data based on contract performance (fulfilling and delivering your order), your explicit consent (when you submit measurements or write a review), and our legal obligation to keep transaction records.

Who we share your data with

We do not sell your data. We use exactly two providers to run our services:

• Resend — sends operational emails only (order confirmation, invoice, back-in-stock alert, and similar). Based in the United States.
• Railway — hosts our entire infrastructure (database, and image/payment-proof storage) in an Amsterdam (EU) data center.

As a result, your data may be processed or stored outside the State of Kuwait by these two providers.

Your rights

You have the right to access, correct, delete, or restrict the use of your data. To exercise any of these rights, contact us at: Admin@beclaura.com

Data security

We apply real encryption to sensitive measurement data, and restrict access to sensitive data to authorized internal staff only.

Changes to this policy

We may update this policy when our actual data-collection practices or service providers change, and will post any material update on this page.