Privacy Policy

Policy scope and store identity

This policy pertains to the Bahiya storefront at https://bahiya.summow.om/, which is independent in terms of its published content, products, and operational policies, while remaining under the corporate and technical umbrella of Sumu Al Fakhama United Establishment LLC. The store's independence does not imply that it is a separate legal entity unless the seller's data or invoice indicates otherwise.

Data controller

The United Establishment of His Highness is the entity that manages the shared digital infrastructure for the Summow ecosystem and controls the data it collects directly across its platforms, unless the store or product page specifies that an independent seller is processing certain data on their own behalf. For official privacy inquiries, please contact: info@summow.om.

Data we may collect

• Identity, contact and account details: Name, phone, email, delivery address and login details.
• Order details: Products, quantities, prices, order status, invoice, and transaction number.
• Payment details are required to confirm the transaction; we do not require full card details to be retained when processing is with a licensed payment provider.
• Shipping and customer service information: Delivery address, delivery instructions, tracking number, complaints and correspondence.
• Technical data necessary for security and site operation, such as IP address, device type, browser, login logs, and cookies according to user choices.

Treatment purposes

• Order execution, electronic contract, payment, shipping, returns, and after-sales service.
• Account protection, fraud prevention, transaction verification, and troubleshooting of malfunctions and disputes.
• Fulfilling legal, accounting and regulatory obligations and maintaining the required records.
• Optimize the platform and measure performance using minimal data and in accordance with the necessary settings and approvals.
• Direct marketing is permitted only in accordance with the required controls and approvals, with the possibility of stopping it at no cost.

Participation and service providers

We only share the minimum data necessary with payment, shipping, hosting, and technical service providers, the seller or store that needs the data to process the transaction, and with law enforcement agencies where there is a legal basis. Parties acting on our behalf must use the data only for the specified purpose and apply appropriate safeguards.

Data owner rights

• Requesting access to data, correcting and updating it, and exercising the rights established by law.
• Withdrawal of consent when processing is based on it, without prejudice to legitimate prior processing.
• Request a halt to direct marketing, and file a complaint if you believe there is an unethical transaction.

Protection, retention and transfer

We implement appropriate organizational and technical measures to control access, protect accounts and communications, ensure backups, and handle incidents. We retain data only as long as necessary for the purpose and to meet regulatory obligations, and then delete or anonymize it. Any transfer of data outside the Sultanate of Oman is subject to the Personal Data Protection Law, its implementing regulations, and other relevant controls.

Cookies

Cookies are used for essential login, shopping cart, and security purposes. Non-essential analytical or marketing cookies are subject to the required settings and consent, and these choices can be modified through the cookie manager or browser settings.