Privacy policy

This website is operated by AWJ ("AWJ", "we", "us"), a specialty coffee roaster based in the Emirate of Sharjah, United Arab Emirates. AWJ is responsible for the personal data described in this policy. Our contact details are at the end of this page.

We collect information you give us directly, and a small amount of technical information needed to keep the website working and secure.

• Account details — your name, email address, password (stored only as a secure one-way hash, never in plain text), your phone number if you add one, and your preferred language.
• Order and delivery details — the recipient's name, phone number and delivery address, the products you order, the amounts paid and your order history. If you check out as a guest, we also keep the email address you give us for the order.
• Payment information — the payment status and reference for each order. Card details are entered with, and processed by, our payment provider; we never see or store your full card number.
• Enquiries — your name, email address, phone number, your company name for business enquiries, and the content of your message.
• Reviews — the rating and text you submit, linked to your account and to the order it relates to.
• Google sign-in — if you choose to sign in with Google, we receive your name and verified email address from Google. We never receive your Google password.
• Technical and security information — your IP address and the time of sign-ins and other security-relevant actions, kept to protect your account and our systems.

We use your personal data only for the purposes below, and only where we have a lawful basis to do so: to perform our contract with you, to meet our legal obligations, with your consent, or where it is in our legitimate interest and does not override your rights.

• To process, deliver and support your orders, including order confirmations and status updates by email.
• To create and manage your account, confirm your email address and help you reset your password.
• To answer your enquiries and provide customer support.
• To publish reviews you submit, after they have been checked.
• To keep the website secure, prevent fraud and misuse, and protect your account — for example by limiting repeated failed sign-in attempts.
• To keep the financial and tax records the law requires.

We do not send you marketing emails unless you have asked for them, and we do not make decisions about you based solely on automated processing.

We do not sell, rent or trade your personal data. We share it only with service providers who help us run our business, and only as far as they need it:

• Delivery partners — the recipient's name, phone number and address, so your order can be delivered.
• Our payment provider — to process your payment securely.
• Technology providers — the companies that host our website and send our emails on our behalf.
• Google — only if you choose to sign in with your Google account.
• Authorities — where the law requires us to, or to protect our rights, our customers or the public.

Our providers may use your data only to provide their services to us, and must keep it confidential and secure. Where data is processed outside the UAE, we take steps to make sure it stays protected as applicable law requires.

We use only the cookies the website needs to work. We do not use advertising, analytics or third-party tracking cookies.

The website also keeps two small notes in your browser: whether this browser has been used to sign in before, so your account appears without a delay, and the details of an order you have just placed, kept only until you close the tab. Because the website needs them to work, they cannot be switched off on our side. You can clear them at any time in your browser settings, but parts of the website — such as signing in and the basket — will then stop working.

• Account data — for as long as your account is open. If you ask us to delete your account, we delete or anonymise your personal data unless we are required to keep it.
• Orders and invoices — for as long as UAE tax and commercial law requires us to keep financial records.
• Enquiries — for as long as we need to answer and follow up, and then for a reasonable period in case you contact us again.
• Security logs — for a limited period, to investigate and prevent misuse.

We take appropriate technical and organisational measures to protect your personal data, including:

• encrypted connections (HTTPS) across the whole website;
• passwords stored only as secure one-way hashes;
• temporarily locking an account after repeated failed sign-in attempts;
• limiting access to customer data to authorised staff who need it for their work; and
• leaving card payments entirely to our payment provider.

No way of sending data over the internet is completely secure, but we work hard to protect yours, and we will tell you and the relevant authorities about a breach wherever the law requires it.

Subject to applicable law, including the UAE Personal Data Protection Law, you have the right to:

• access the personal data we hold about you and receive a copy of it;
• correct data that is inaccurate or incomplete;
• ask us to delete your data;
• restrict or object to certain processing;
• receive your data in a structured, commonly used format; and
• withdraw any consent you have given us, at any time.

You can update your profile, addresses and preferred language yourself from your account. For anything else, contact us using the details below. We may need to confirm your identity before acting on a request, and we will reply within the time the law allows. If you are not satisfied with our reply, you can complain to the UAE Data Office.

Our website is intended for adults. We do not knowingly collect personal data from children under 18. If you believe a child has given us personal data, please contact us and we will delete it.

We may update this policy from time to time to reflect changes to our services or to the law. The date at the top of this page shows when it was last updated, and we will tell you about any significant change through the website or by email.

If you have any questions about this policy or how we handle your personal data, or you want to exercise your rights, please get in touch through our contact page or using the details below.