We collect the following types of information when you use our website or create an account:

• Personal identification information: Full name, email address, phone number, and delivery address.
• Order information: Products ordered, gift messages, delivery dates, occasion type, and recipient details (if you choose to send to someone else).
• Account information: Password (stored securely as an encrypted hash) and profile settings such as preferred language.
• Payment information: We do not store your card details. Payments are processed securely by our payment providers.
• Loyalty and rewards information: Information relating to your participation in our loyalty or rewards program, including points earned, redeemed, expired, and your rewards transaction history.
• Technical data: IP address, browser type, device type, pages visited, and session duration — collected automatically via cookies and similar technologies.

If you place an order for another person, you may provide us with their name, phone number, address, gift message, and other information necessary to deliver the order. You are responsible for ensuring that you are authorized to provide this information to us.

We use recipient information solely for purposes related to fulfilling and delivering the order and providing related customer service. We do not use recipient information for marketing or any purpose unrelated to your order.

We use the information we collect for the following purposes:

• To process and fulfill your orders, including coordinating delivery to you or your recipient.
• To manage your account and provide customer support.
• To send you order confirmations, delivery updates, and important service notifications via email or SMS.
• To administer our loyalty and rewards program, calculate and apply rewards, prevent abuse, and maintain accurate account records.
• To improve our website, services, and product offerings based on your usage patterns.
• To send you promotional offers and newsletters — only if you have opted in to receive them. You can unsubscribe at any time.
• To comply with legal obligations and resolve disputes.

We offer the option to sign in or register using Google Sign-In (powered by Google OAuth 2.0). When you choose this option, Google shares certain information from your Google account with us, including your name, email address, and profile photo.

We only request access to the basic profile information needed to create and manage your account. We do not access your Google Drive, Gmail, contacts, or any other Google services.

Your use of Google Sign-In is also governed by Google's own Privacy Policy, which you can review at policies.google.com/privacy.

If you connect your Google account, you may disconnect it at any time by visiting your Google account's security settings and revoking access to Wardati.

We use cookies and similar tracking technologies to operate our website and improve your experience. Cookies are small text files stored on your device. We use the following categories of cookies:

Managing cookies: You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a warning when a cookie is set. Please note that disabling essential cookies may prevent core features such as login, cart, and checkout from working correctly. For more information on managing cookies, visit your browser's help documentation.

We may use trusted third-party service providers to operate and maintain our website and services. These providers may include:

• Hosting providers — to store and serve our website and data.
• Payment processors — to securely handle payment transactions.
• Delivery providers — to coordinate and carry out order deliveries.
• Email and SMS providers — to send transactional and marketing communications.
• Analytics providers — to help us understand website usage and performance.
• Authentication providers — including Google, for sign-in functionality.
• Technical service providers — for infrastructure, security, and maintenance.

These providers may process personal data only as necessary to provide their services to us and are required to maintain appropriate safeguards for such data. We do not authorize them to use your personal data for their own purposes.

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following limited circumstances:

• Delivery partners: We share recipient name, address, and phone number with our delivery partners solely for the purpose of completing your order.
• Payment processors: We share the minimum necessary information with our payment service providers to process transactions securely.
• Google: If you use Google Sign-In, your authentication is handled directly by Google according to their terms.
• Legal requirements: We may disclose your information if required by law, court order, or to protect the rights, property, or safety of Wardati, our customers, or the public.

We retain your personal information for as long as your account is active or as needed to provide our services. We retain transaction, accounting, and order records for the period required by applicable commercial, tax, accounting, and other legal requirements in Jordan.

You may request deletion of your account by contacting us at info@wardatijo.com or through the account deletion option available on our website, if provided. Upon a valid deletion request, we will remove your personal data from our active systems within 30 days, except where retention is required by law or legitimate business necessity.

We take appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted connections (HTTPS), hashed password storage, and access controls on our servers.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

You have the following rights regarding your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may update or correct your information at any time through your account settings or by contacting us.
• Deletion: You may request that we delete your account and personal data by contacting us at info@wardatijo.com, subject to any legal retention obligations.
• Opt-out: You may unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in any email or by contacting us directly.

If you believe that your personal data has been handled in violation of this Privacy Policy or applicable law, please contact us first using the contact details below so that we can investigate and address your concern. You may also have the right to submit a complaint to the competent Jordanian data protection authority in accordance with applicable law.

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us and we will take steps to remove it.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

• Wardati
• Amman, Jordan
• Email: info@wardatijo.com

We will respond to your request within 10 business days.