AlkaClay (the “Company”, “we” or “us”) operates a handcrafted clay products website and acts as the data controller responsible for your personal data under this Privacy Policy, and we value your security and privacy. This Privacy Policy (the “Policy”) outlines:

• The categories of personal data we collect,
• The legal basis and purpose for processing such data,
• Your rights as a data subject, including your right to access, correct, erase or restrict the processing of your personal data,
• How you may exercise those rights by contacting us via the communication channels provided below.

We may collect your personal data when you use our website or otherwise interact with us. You may at any time request access to, rectification of, or erasure of your personal data, or object to or restrict its processing, by contacting us using the details provided in this Policy.

This is our official website: www.alkaclay.com

1. What data do we collect?

1.1 Data that you give us

• Name
• Email address
• Phone number
• Shipping address and billing address
• Order details (products purchased, quantity, delivery method, order notes)
• Payment confirmation data (we do not store full card details, payment is handled by payment providers)
• If relevant for delivery or customs, additional details required to complete the shipment

If an order is placed on behalf of another person, the person placing the order guarantees its authority to provide the personal data.

1.2 Data that we collect from you

• Records of correspondence between you and us (email, WhatsApp, social media messages, customer support tickets)
• Feedback, reviews and survey responses
• Website usage data (such as IP address, browser type, device identifiers, pages visited, timestamps, referring pages)
• Technical data required for cart, checkout, fraud prevention, security logs, and site performance

Any information relating to an identified or identifiable natural person provided to us or collected by us, which on its own or in combination with other non personally identifiable information can be used to identify an individual specifically, shall be classified and treated as personal data under this Policy.

2. How do we collect your data?

We collect and process your data when you:

• Place an order, submit a pre-order, or checkout through our website
• Create an account (if enabled)
• Contact us through email, WhatsApp, phone, website forms, or social media
• Subscribe to newsletters or updates
• Voluntarily complete surveys, submit reviews, or provide feedback
• Browse our website where cookies and similar technologies are used

3. Why do we process your data?

The table below outlines our purposes for collecting your data, our legal justifications (each a “legal basis”) for each purpose, and categories of data that we use for each purpose.

Legal Basis Explanation

• Performance of a contract: to fulfil our obligations to you, including processing and delivering your order, or to take steps at your request prior to entering a contract.
• Legitimate interest: to pursue necessary and justifiable business objectives, such as improving services, fraud prevention, customer support, and protecting our operations, without overriding your rights.
• Consent: when you have given explicit consent for specific processing purposes, such as marketing communications or non-essential cookies where required.
• Compliance with legal obligations: when we are required by law to process, retain, or disclose your data.

PURPOSE OF PROCESSING	LEGAL BASIS	CATEGORIES OF DATA USED
Order processing, fulfilment, delivery, and customer service	Performance of a Contract	Name, Email Address, Phone Number, Shipping Address, Billing Address, Order Details, Records of Correspondence
Account management (if enabled)	Performance of a Contract	Name, Email Address, Phone Number, Order Details
Fraud prevention, security monitoring, and abuse prevention	Legitimate interest	Order Details, IP Address, Device/Browser Data, Records of Correspondence
Handling returns, exchanges, damage claims, and disputes	Performance of a Contract, Legitimate interest	Name, Contact Details, Order Details, Records of Correspondence, Supporting Evidence you provide (such as photos of damage)
Marketing and advertising communications	Consent	Name, Email Address, Phone Number, Preferences
Website analytics and performance improvement	Legitimate interest (or Consent where required)	IP Address, Device/Browser Data, Website Usage Data, Cookie Identifiers
Processing on request of government or regulatory authorities, tax and accounting requirements	Compliance with legal obligations	Name, Contact Details, Address, Order Details, Records of Correspondence
Establishing or defending legal claims	Legitimate interest	Name, Contact Details, Order Details, Records of Correspondence

4. Do we share your data with third parties?

We may share your personal data with third parties only to the extent necessary to operate the website and fulfil orders, including:

• Payment processing providers
• Shipping and delivery partners
• Website hosting and infrastructure providers
• Analytics, security, and anti-fraud service providers
• Professional advisers (legal, accounting) when necessary
• Regulators or authorities where required by law

International customers and cross-border transfers

Because AlkaClay may serve customers in Jordan and internationally, your personal data may be transferred to, processed, or stored in countries outside your country of residence. Where such transfers occur, we implement appropriate safeguards and contractual protections, and we take steps to ensure recipients provide an adequate level of protection and security consistent with applicable requirements. This includes applying cross-border transfer conditions where required under Jordan’s Personal Data Protection Law.

We rely on you to provide accurate and complete personal data and will update or rectify it upon your request.

5. How do we protect your data?

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.

Our safeguards include:

• Secure management policies and restricted access,
• Regular reviews of our security practices,
• Training to relevant staff with access to personal data,
• Data breach response procedures,
• Timely notifications to authorities and affected individuals where required by applicable law,
• Safe disposal of data once no longer needed.

6. How long do we keep your data?

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy or as required by law, including tax and accounting obligations. When data is no longer required, it will be securely deleted or anonymised.

7. Marketing

If you have agreed to receive marketing communications, you may opt out at any time by contacting us or by using the unsubscribe option in marketing emails where available. We may still send service-related messages necessary for order fulfilment or customer support.

8. What are your data protection rights?

Depending on where you are located, you may have rights including:

• Access to your personal data,
• Correction of inaccurate data,
• Erasure,
• Restriction of processing,
• Objection to processing,
• Data portability,
• Withdrawal of consent (where processing is based on consent),
• Being notified of a personal data breach where required by law.

We will respond to requests within timeframes required by applicable law, including Jordan’s PDPL where applicable.

9. Cookies

Our website uses cookies and similar technologies to enable core ecommerce functionality, improve performance, and understand usage. WooCommerce stores commonly set cookies to support cart and checkout functions, and admin or session features.

Cookie categories

• Strictly necessary cookies: essential for cart, checkout, security, and site operations.
• Performance and analytics cookies: help us understand traffic and improve the website.
• Functionality cookies: remember preferences and improve your experience.

Where required by applicable law (including in certain non-Jordan jurisdictions), non-essential cookies will be used only after you provide consent.

Common WooCommerce cookies (examples)

Depending on enabled features, WooCommerce may set cookies such as:

• woocommerce_cart_hash
• woocommerce_items_in_cart
• wp_woocommerce_session_
• woocommerce_recently_viewed

(Additional cookies may exist depending on your store configuration and plugins.)

You can manage cookie preferences through your browser settings and, where enabled, through the cookie banner or preference center.

10. Children

Our website and products are not directed at children. We do not knowingly collect personal data from individuals under 16.

11. Privacy policies of other websites

Our website may link to third-party websites not operated by us. We are not responsible for their privacy practices. Review their privacy policies before providing any personal data.

12. Changes to our Policy

We regularly review and update this Policy. Material changes will be communicated via our website. Continued use of our services implies acceptance of such changes.

13. How to contact us