Privacy Policy

Last updated: August 23, 2026

Balqis Modest Essentials operates this store and website, as well as the related products, services and features (hereinafter referred to as the “Services”).

Our store uses the Shopify platform, which enables us to provide the Services.

This Privacy Policy explains how we collect, use, retain and share your personal data when you use our website, create an account, place an order or communicate with us.

In the event of any conflict between our Terms of Service and this Privacy Policy regarding the processing of personal data, this Privacy Policy shall prevail.

Personal Data We Collect or Process

Personal data means any information that allows you to be identified directly or indirectly.

Depending on how you use our store, we may process the following categories of personal data:

• Contact details: first name, last name, postal address, billing address, shipping address, telephone number and email address.
• Order information: products viewed, added to your cart, purchased, returned or cancelled, order amounts and order history.
• Payment and transaction data: payment method used, payment confirmation, transaction amount and information required to process your order. Sensitive banking information required for payment is processed by Shopify and/or the relevant payment service providers. Balqis Modest Essentials does not directly store the complete banking information required for payment.
• Customer account data: login details and settings associated with your account when you use this feature.
• Communications with us: information contained in your requests, including questions relating to an order, return, refund or customer service enquiry.
• Technical data: IP address, device type, browser, network connection and certain technical identifiers.
• Browsing and usage data: pages viewed and interactions with our store.

Information identified as mandatory when placing an order is required to process your purchase, payment and delivery. Without this information, we may not be able to fulfil your order.

Optional information, including subscribing to certain marketing communications, is not required in order to make a purchase.

Sources of Personal Data

We may collect your personal data:

• directly from you, including when you place an order, create an account, subscribe to our newsletter or contact us;
• automatically when you use our website, including through cookies or similar technologies;
• from our service providers, including Shopify, payment providers, carriers and services required to fulfil your order;
• from third-party services or partners, where they are necessary for the operation of the Services and where permitted by applicable law.

How We Use Your Personal Data

We use your personal data for the following purposes:

• Order management and performance of the contract: processing orders and payments, preparing and delivering purchases, tracking orders, managing returns, refunds and customer accounts. The legal basis for these processing activities is the performance of the contract entered into with you.
• Customer service and commercial relationship: responding to your enquiries and managing your orders. These processing activities are based on the performance of the contract or, depending on the nature of the request, our legitimate interest in providing effective customer service.
• Legal obligations: retaining documents required to comply with our accounting, tax and regulatory obligations.
• Security and fraud prevention: protecting the store and transactions and preventing fraudulent or unlawful activity. These processing activities are based on our legitimate interest in protecting our business and our customers.
• Marketing and commercial communications: sending communications about our products and offers where permitted by law. Where your consent is required, the relevant communications will not be sent without your consent. You may unsubscribe at any time using the link provided in our emails.
• Improvement and measurement of website usage: certain browsing data may be used to measure the performance of the store and improve the experience offered, subject to the rules applicable to cookies and other tracking technologies.

Cookies and Similar Technologies

Our store may use cookies and similar technologies that are necessary for its operation, including for navigation, security, shopping cart functionality and certain Shopify features.

Where applicable law requires your consent for the use of cookies or tracking technologies that are not strictly necessary, they will only be used in accordance with the choices you make through our cookie management tool.

You may change your preferences whenever this functionality is available on our website.

Sharing Your Personal Data

We may share certain personal data where necessary for the operation of the store, the fulfilment of your order or compliance with our legal obligations.

Recipients may include:

• Shopify, which provides the technical infrastructure for our store;
• payment service providers, in order to process and secure transactions;
• carriers and logistics providers, in order to ship and deliver your orders;
• applications and technical service providers required for the operation of the store;
• competent administrative or judicial authorities, where we are legally required to disclose certain information.

Where marketing, advertising or audience measurement tools involve third parties, the corresponding processing activities are carried out in accordance with applicable law and, where required, with your consent.

We do not sell your personal data.

Relationship with Shopify

Our store uses Shopify, which provides the technical platform required for the operation of the Services.

In this context, Shopify processes certain personal data necessary for the operation of the website, orders, payments and features offered through its platform.

Shopify may also process certain data for its own purposes where it acts as a data controller, including in connection with certain services offered directly to consumers, such as Shop or Shop Pay.

For more information, you can consult the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Third-Party Websites and Services

Our website may contain links to websites, social networks or services operated by third parties.

When you access a third-party service, the processing of your data is subject to that third party’s own terms and privacy policies.

Balqis Modest Essentials does not control the privacy practices of these external services. We encourage you to review their privacy policies before providing them with personal data.

Children’s Data

Our Services are not specifically intended for children.

We do not knowingly seek to collect personal data relating to children except where necessary to provide our Services and in accordance with applicable law.

Where the processing of a child’s personal data is based on consent, the specific rules applicable to children are respected.

If you hold parental responsibility and believe that a child has provided us with personal data inappropriately, you may contact us at balqismodest@gmail.com.

Data Security

We implement reasonable measures designed to protect personal data against loss, unauthorised access, misuse, disclosure or alteration.

However, no computer system or method of transmission over the Internet can guarantee absolute security.

We therefore ask you not to send us sensitive information that is not necessary to process your request or order.

Data Retention

Personal data is not retained for longer than necessary for the purposes for which it is processed.

In particular:

• data required for order management is retained for the duration of the commercial relationship and, where necessary, subsequently archived in order to comply with legal obligations;
• information and documents required for accounting and invoicing obligations may be retained for 10 years;
• customer data used for marketing purposes may be retained for the duration of the commercial relationship and for 3 years from the last purchase or the end of the commercial relationship, in accordance with applicable recommendations;
• prospect data may be retained for marketing purposes for 3 years from the date it was collected or from the prospect’s most recent contact;
• data required for the management of a dispute may be retained for the period necessary to establish, exercise or defend legal claims;
• data relating to a customer account is retained for as long as necessary for the operation of the account and is then deleted or archived where permitted or required by applicable obligations.

International Data Transfers

As part of the operation of our store and the use of certain service providers, including Shopify, certain data may be processed in countries outside the European Economic Area.

Where such transfers require specific safeguards, they are carried out in accordance with applicable data protection law, including through an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Your Rights

Subject to the conditions provided by applicable data protection law, you may have the following rights:

• the right of access to your personal data;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure where the legal conditions are met;
• the right to restriction of processing;
• the right to object to certain processing activities, including direct marketing;
• the right to data portability for certain data;
• the right to withdraw your consent at any time where processing is based on your consent, without affecting the lawfulness of processing carried out before your withdrawal.

You may also unsubscribe from marketing communications at any time by using the unsubscribe link included in the relevant emails.

To exercise your rights regarding processing carried out by Balqis Modest Essentials, please contact us at:

balqismodest@gmail.com

We may request additional information where necessary to verify your identity and protect your data against fraudulent requests.

We will respond within the time limits provided by applicable law.

If you believe that your rights have not been respected, you may lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) or, where applicable, with the competent data protection authority in your country of residence.

Changes to This Privacy Policy

We may update this Privacy Policy, including to reflect changes to our practices, Services or applicable legal and regulatory requirements.

The current version will be published on this page and the “Last updated” date will be amended accordingly.

Where required by law, we will also inform the persons concerned of any significant changes.

Contact and Data Controller

For any questions concerning this Privacy Policy, the processing of your personal data or the exercise of your rights, please contact:

balqismodest@gmail.com

Balqis Modest Essentials, whose full legal contact details are provided in our Legal Notice, acts as the data controller for the personal data processing activities that it determines in connection with its business.