App Privacy Policy

This policy explains what personal information the Sands of Arabia iPhone app collects, why we use it, and the choices and rights you have. It works alongside our website Privacy Policy: your account, orders and email sign-ups are the same whether you use the app or the website, and are looked after in the same way.

Buying through the app, and your Sands of Arabia account in the app, are covered by our website Terms & Conditions. The app has no separate terms.

Who we are

Sands of Arabia ("we", "us") sells Arabian fragrance, incense and Islamic essentials in the UK. We are the controller of the personal information described in this policy.

• Address: 90 Empress Street, Accrington, Lancashire BB5 1SG
• Email: hello@sandsofarabia.co.uk
• Phone and WhatsApp: +44 7471 086777

What the app collects

When you pay. Checkout opens Stripe's secure payment page inside the app. Stripe collects your card details (or your Apple Pay details), and passes us your name, email address, phone number, delivery address, what you ordered, the amount paid and how you paid (for example "Visa ending 4242" or "Apple Pay"). The app never sees or stores your card number or security code. If you choose collection from our shop, we also keep the day and time you picked.

If you sign in or create an account. The app uses the same account as our website, with your email address and password. We keep your email address and the delivery address you save, if you save one, and show your past orders, matched by your email address. To keep you signed in, the app stores a sign-in key in your iPhone's secure Keychain; it is removed when you sign out or delete your account. You must be 16 or over to create an account.

If you sign up for emails (the "Stay connected" form, or "Notify me" on a sold-out product), we keep your email address, what you asked for and when.

When you look up an order, the app sends the order number and email address you enter to our shop to show its status. The app remembers the orders placed on your iPhone so you can check them again.

On your iPhone only. Your basket, saved items and the products you've asked to be notified about are kept on your iPhone. They are not sent to us unless you place an order or give us your email for a back-in-stock alert.

What the app doesn't do. It doesn't use analytics, advertising or tracking tools, doesn't track you across other apps or websites, and doesn't ask for your location, contacts, photos, camera or microphone. Our hosting provider and Stripe may record technical details such as your IP address and device type to keep the shop and payments secure and prevent fraud. If you've agreed to share app analytics with developers in your iPhone's settings, Apple may share anonymous crash reports and usage statistics with us.

Links in the app to our website, Google reviews, WhatsApp, Royal Mail tracking and our policies open those sites, whose own privacy policies apply.

Why we use it, and our legal basis

• To take, pay for, deliver and support your order (including emails about it, returns and refunds). This is needed to perform our contract with you.
• To run your account. This is needed to provide the account you've asked for.
• To send you back-in-stock alerts, sale and new arrival emails. Only with your consent, which you can withdraw at any time with the unsubscribe link in every email.
• To keep records for tax and accounting. This is a legal obligation.
• To keep the app, payments and records secure and prevent fraud. This is in our legitimate interests.

Who we share it with

We only share what each service needs to do its job:

• Stripe, our payment processor, which takes card and Apple Pay payments and handles refunds. Stripe also uses payment information to prevent fraud and to meet its own legal obligations, and for that it acts as a separate controller. See Stripe's privacy policy.
• Apple, if you pay with Apple Pay, and as the App Store that provides the app, under Apple's own privacy policy.
• Royal Mail, to deliver your order.
• Base44, our website and database host, which stores our product list, orders, accounts and email lists for us and sends our emails.
• Our accountant and HMRC, where needed for tax.
• The police or other authorities, if the law requires it.

We never sell your personal information. Some of these services may store or process information outside the UK, for example in the United States or the European Union; when they do, we rely on the protections UK law requires, such as UK adequacy regulations or the UK International Data Transfer Agreement.

How long we keep it

• Orders and payment records: 6 years after the order, as required for tax.
• Accounts: until you delete your account.
• Email sign-ups: until you unsubscribe. Back-in-stock requests are removed once we've emailed you.
• On your iPhone: your basket, saved items, alerts and order list stay until you remove them or delete the app.

Deleting your account

You can delete your account in the app at any time: tap the account button at the top of the screen, then Delete account. You can also do it on our website (see Delete Your Account). This deletes your account, saved address, email sign-ups and any reviews straight away. Orders are kept for tax as above, no longer linked to an account.

Your rights

You have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct it if it's wrong
• ask us to delete it, or to stop or limit how we use it
• object to us using it for our legitimate interests
• withdraw your consent to marketing emails at any time
• ask us to send it to you or another organisation in a portable format

To use any of these rights, contact us using the details above. We'll reply within one month, and it's free.

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Children

The app is for adults buying fragrance and gifts. You must be 16 or over to create an account, and we don't knowingly collect information from children under 13.

Changes to this policy

We may update this policy from time to time. The date below shows when it last changed.

Last updated: 9 October 2026