Legal

Privacy Policy

Last updated: 08 October 2026

1. Who We Are

This website, www.emnahussein.com, is operated by Emna Hussein, trading under the Emna Hussein brand.

For applicable data protection laws, the data controller is:

Emna Hussein
Correspondence address: River Oaks, Houston, Texas, USA
Email: contact@emnahussein.com

This Privacy Policy explains how we collect, use, store, share and protect personal data when you visit our website, create an account, place an order, subscribe to our communications, join a waiting list or otherwise interact with us.

This Policy should be read together with our Cookie Policy, Terms & Conditions, Shipping Policy and Returns Policy.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data collected through:

  • our website and online store;
  • the WooCommerce checkout;
  • customer accounts;
  • contact and enquiry forms;
  • newsletter subscriptions;
  • waiting lists and back-in-stock notifications;
  • product questionnaires and personalisation requests;
  • customer-service emails;
  • advertising and social-media integrations;
  • payment, delivery and order-management services connected to our website.

It does not govern the independent privacy practices of third-party websites or platforms that you access through external links.

3. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data.

Identity and contact information

  • First name and last name
  • Email address
  • Telephone number, including country code
  • Billing address
  • Delivery address
  • Country, region, city and postcode
  • Company name, where provided
  • Customer-account username and account information

Order and transaction information

  • Products ordered
  • Selected product size, colour, material, finish or variation
  • Personalisation requests, including initials
  • Order number
  • Order value and currency
  • Payment method and payment status
  • Shipping method
  • Tracking and delivery information
  • Returns, exchanges, refunds or cancellation requests
  • Gift-card or promotional-code information
  • Customer service and complaint history

We do not directly store your complete payment card number or card security code.

Marketing and product-interest information

  • Newsletter subscription status
  • Marketing preferences
  • Waiting-list registrations
  • Back-in-stock notification requests
  • Products or materials in which you have expressed an interest
  • Email engagement information, such as delivery, opening or link interaction, where provided by our email platform

Communications

  • Messages submitted through contact forms
  • Emails and customer-service correspondence
  • Feedback, reviews or survey responses
  • Information you voluntarily provide in questionnaires
  • Content of order notes or personalisation instructions

Please do not provide sensitive personal information unless it is strictly necessary for a specific request.

Technical and usage information

When you use our website, our authorised service providers or we may collect:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Approximate location derived from an IP address
  • Language and currency preferences
  • Pages visited
  • Referring website or campaign
  • Website interactions
  • Shopping-cart activity
  • Cookie identifiers
  • Consent preferences
  • Security and diagnostic logs
  • Advertising and analytics identifiers, where consent has been given

4. How We Collect Personal Data

We may collect personal data:

  • directly from you when you place an order, complete a form, contact us or subscribe;
  • automatically through cookies, server logs and similar technologies;
  • from payment providers when a payment is authorised, rejected, refunded or disputed;
  • from delivery companies in relation to shipment and tracking;
  • from advertising or analytics platforms where their technologies are enabled and you have provided the required consent;
  • from social-media platforms when you interact with our profiles, advertisements or embedded content;
  • from service providers involved in maintaining and securing our website.

5. Why We Process Your Personal Data

We use personal data only for identified and legitimate purposes.

Performance of a contract

We process personal data where necessary to:

  • receive and process your order;
  • manufacture or personalise your product;
  • process payment;
  • send order confirmations;
  • arrange shipping and delivery;
  • communicate delivery or tracking information;
  • provide customer service;
  • manage returns, exchanges, repairs, cancellations or refunds;
  • maintain your customer account;
  • Respond to issues relating to a purchase.

Consent

Where required, we rely on your consent to:

  • send newsletters and promotional communications;
  • register you for marketing communications;
  • use analytics cookies;
  • use advertising and marketing cookies;
  • activate certain embedded third-party content;
  • process the optional information that you voluntarily provide.

You may withdraw your consent at any time. Withdrawal will not affect processing that occurred before consent was withdrawn.

Legitimate interests

Where permitted by law, we may process information for our legitimate interests, including:

  • operating and improving the website;
  • understanding general website performance;
  • securing the website and customer accounts;
  • preventing fraud and misuse;
  • maintaining accurate business records;
  • responding to enquiries and disputes;
  • measuring the general effectiveness of our content and services;
  • protecting our legal rights.

We consider the potential impact on your privacy before relying on legitimate interests.

Legal obligations

We may process and retain personal data where necessary to:

  • comply with accounting and tax requirements;
  • comply with customs and import or export requirements;
  • maintain legally required transaction records;
  • respond to lawful requests from courts, regulators or public authorities;
  • prevent fraud, money laundering or unlawful transactions;
  • establish, exercise or defend legal claims.

Applicable privacy notices should clearly identify the controller, purposes, legal bases, recipients, retention periods, international transfers and individual rights.

6. Orders and WooCommerce Accounts

Our online store is operated using WordPress and WooCommerce.

When you place an order, WooCommerce processes the information necessary to:

  • maintain your shopping cart;
  • calculate totals;
  • determine available shipping methods;
  • process checkout;
  • create the order;
  • manage customer accounts;
  • send transactional emails;
  • maintain order history;
  • manage stock.

If you create an account, we may retain your account details and order history so that you can access previous orders and complete future purchases more easily.

You are responsible for keeping your account credentials confidential.

7. Payments

Online card payments and PayPal payments are processed through PayPal and its connected payment services.

We may provide PayPal with information necessary to process the transaction, including:

  • name;
  • email address;
  • billing and delivery information;
  • order value;
  • currency;
  • transaction reference;
  • device or fraud-prevention information.

We do not directly receive or store your complete card number or card security code.

PayPal may process certain payment and fraud-prevention information as an independent data controller under its own privacy statement. PayPal’s data-protection terms specifically request that merchants inform customers of this independent-controller role.

Where direct bank transfer is offered, we may receive information necessary to identify the transfer and match it with your order.

8. Shipping and Delivery

We may share the minimum information necessary to complete delivery with shipping providers, fulfilment partners, customs authorities and local delivery partners.

This information may include:

  • recipient name;
  • delivery address;
  • telephone number;
  • email address;
  • parcel contents or product description where required;
  • parcel value;
  • country of origin;
  • customs information;
  • tracking number.

Delivery companies may process this information under their own privacy policies and legal obligations.

9. Newsletter and Marketing Communications

We use Mailchimp, an Intuit service, to manage newsletter subscriptions and certain email communications.

If you subscribe, we may process:

  • your email address;
  • your name, where supplied;
  • subscription date and source;
  • marketing preferences;
  • delivery and engagement information;
  • products or categories in which you expressed an interest.

Mailchimp generally processes newsletter contact data on our instructions as a data processor for the permitted purposes described in its Data Processing Addendum.

You may unsubscribe at any time by:

Unsubscribing from marketing will not prevent us from sending essential transactional communications concerning an order.

10. Waiting Lists and Back-in-Stock Notifications

You may ask to be notified when a product or variation becomes available.

For this purpose, we may collect:

  • your email address;
  • the selected product;
  • the selected size, colour, material or variation;
  • the date of the request;
  • technical information used to prevent duplicate or abusive registrations.

A back-in-stock request does not automatically subscribe you to general marketing communications unless you separately agree to receive them.

Waiting-list information may be deleted after the notification has been sent, when the request is withdrawn or when the information is no longer required.

11. Cookies and Consent Management

Our website uses cookies and similar technologies.

We use Complianz to display our consent banner, record your selected privacy preferences and manage the activation or blocking of non-essential services.

Our banner provides the following choices:

  • Accept all
  • Reject all
  • Manage preferences
  • Save preferences

Your consent preferences may be stored for up to 365 days, unless you change or withdraw them earlier.

Complianz creates and maintains a separate Cookie Policy based on the website scan and the configuration selected in the Complianz Wizard.

You can reopen the privacy-choice tool and modify your consent at any time.

Essential cookies

Essential cookies are required to:

  • operate the website;
  • maintain the shopping cart;
  • process checkout;
  • remember essential currency or country settings;
  • support security and fraud prevention;
  • maintain customer sessions;
  • Remember your privacy choices.

These cookies cannot normally be disabled through our consent banner because the website may not function properly without them.

Statistics cookies

With your consent, statistics cookies help us understand:

  • how visitors reach the website;
  • which pages are viewed;
  • how visitors navigate the website;
  • general website performance;
  • whether technical improvements are required.

Marketing cookies

With your consent, marketing technologies may be used to:

  • measure advertising campaigns;
  • understand interactions with advertisements;
  • create advertising audiences;
  • measure purchases or other campaign results;
  • display more relevant advertising on third-party platforms.

Further details about individual cookies, providers, purposes and expiry periods are available in our separate Cookie Policy.

12. Google Analytics, Google Ads and Consent Mode

We use Google services that may include:

  • Google Analytics;
  • Google Ads;
  • Google Site Kit;
  • Google Consent Mode;
  • conversion measurement.

Google Consent Mode communicates the choices made through our consent banner to Google services. Google explains that its tags adapt their behaviour based on the visitor’s consent status for analytics storage, advertising storage, advertising user data and advertising personalisation.

Depending on our technical configuration and your choice, Google may receive:

  • cookie or device identifiers;
  • IP and browser information;
  • website interactions;
  • pages visited;
  • campaign information;
  • purchase or conversion information;
  • consent signals.

Where consent is required, analytics and advertising storage will not be activated unless the relevant permission is granted.

13. Meta, Facebook and Instagram

Our website and advertising activities may use services provided by Meta, including:

  • Facebook for WooCommerce;
  • Meta Pixel;
  • Facebook and Instagram advertising;
  • campaign and conversion measurement;
  • Instagram content integrations.

Where the relevant consent is provided, Meta may receive information concerning:

  • browser and device;
  • cookie or advertising identifiers;
  • pages viewed;
  • products viewed;
  • cart or checkout activity;
  • purchase value and currency;
  • campaign interaction;
  • technical and security information.

Meta processes information under its own Privacy Policy, which describes how it collects, uses, retains and transfers information across its products.

14. Pinterest

Our website may use Pinterest for WooCommerce and the Pinterest advertising tag.

Where marketing consent is provided, Pinterest may process information relating to:

  • pages and products viewed;
  • campaign interactions;
  • shopping-cart or purchase activity;
  • device, browser and cookie identifiers;
  • order value and currency.

This information may be used for campaign measurement, audience creation and relevant advertising.

15. Embedded Content and Social Media

Our website may contain embedded content or integrations from services such as:

  • Instagram;
  • Facebook;
  • YouTube;
  • Pinterest.

Embedded content may behave as though you visited the third-party platform directly. The provider may collect device, cookie and interaction information under its own privacy policy.

Where required, embedded third-party content may remain blocked until the relevant consent is granted.

Simple external links to social media profiles may direct you to a third-party platform whose privacy practices are independent of ours.

16. Contact Forms and reCAPTCHA

Our contact forms may use Contact Form 7 and Google reCAPTCHA to reduce spam, abuse and automated submissions.

reCAPTCHA may process technical information such as:

  • IP address;
  • device and browser information;
  • website interactions;
  • security and risk signals.

Where required by our consent configuration, reCAPTCHA is blocked until the relevant consent is provided.

Information submitted through a contact form is used to respond to your enquiry and maintain an appropriate record of the communication.

17. How We Share Personal Data

We may share personal data only where reasonably necessary with:

  • website hosting and security providers;
  • WordPress and WooCommerce service providers;
  • PayPal and connected payment providers;
  • Mailchimp;
  • delivery and logistics providers;
  • customs and public authorities;
  • Google;
  • Meta;
  • Pinterest;
  • customer support and form providers;
  • accountants, insurers, legal advisers and professional consultants;
  • fraud-prevention and cybersecurity providers;
  • service providers supporting website maintenance, backups and communications;
  • authorities where disclosure is required by law.

We do not sell or rent customer mailing lists for monetary consideration.

We may disclose information in connection with a genuine merger, business sale, restructuring, investment or transfer of assets, subject to appropriate confidentiality and legal safeguards.

18. International Data Transfers

We serve customers internationally and use service providers operating in different countries.

Personal data may therefore be processed in a country other than the country in which you live.

Where required by applicable law, our providers and we use recognised safeguards for international transfers, which may include:

  • adequacy decisions;
  • contractual data-protection clauses;
  • data-processing agreements;
  • approved transfer frameworks;
  • other legally recognised safeguards.

19. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected.

Retention periods may vary according to the type of information.

Order and transaction information

Order, payment, invoice, refund and transaction records may be retained for the period required by applicable tax, accounting, customs and legal obligations.

Customer-service information

Correspondence and complaint records may be retained until the matter is resolved and for a reasonable period afterwards to manage disputes or legal claims.

Marketing information

Marketing subscription information is retained until you unsubscribe, withdraw consent or the information is no longer required.

We may retain minimal suppression information to ensure that an unsubscribe request continues to be respected.

Waiting-list information

Waiting-list or stock-notification information may be retained until:

  • The notification is sent;
  • You withdraw the request;
  • The product is discontinued;
  • The information is no longer needed.

Cookie preferences

Cookie-consent preferences may be retained for up to 365 days unless changed earlier.

Technical and security logs

Security, diagnostic and fraud-prevention logs may be retained for a reasonable period necessary to investigate incidents and protect the website.

Information may be retained for longer where required by law, litigation, a regulatory investigation or an unresolved dispute.

20. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

  • receive information about how your personal data is processed;
  • Request access to your personal data;
  • request correction of inaccurate or incomplete information;
  • request deletion of eligible personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • object to direct marketing at any time;
  • withdraw consent at any time;
  • request data portability in an eligible case;
  • request information about certain automated processing;
  • Lodge a complaint with a competent privacy or data-protection authority.

These rights are not absolute. A request may be limited where continued processing or retention is required by law, necessary to complete a contract or required for legal claims.

The European Commission identifies access, rectification, erasure, restriction, portability, objection and rights concerning automated decisions among the principal individual data-protection rights.

To exercise a privacy right, contact: contact@emnahussein.com

We may request information necessary to verify your identity before fulfilling a request.

21. Automated Fraud and Security Checks

We do not use personal data to make decisions producing legal or similarly significant effects based solely on automated processing.

However, payment, hosting and security providers may use automated systems to:

  • detect fraud;
  • evaluate suspicious transactions;
  • prevent abuse;
  • identify cybersecurity threats;
  • block automated spam.

A payment or submission may be refused, delayed or referred for review where a provider identifies a potential security or fraud risk.

22. Data Security

We use reasonable technical and organisational measures intended to protect personal data against:

  • unauthorised access;
  • accidental loss;
  • unlawful disclosure;
  • alteration;
  • destruction;
  • misuse.

These measures may include:

  • HTTPS and SSL encryption;
  • access controls;
  • account and password protections;
  • website security monitoring;
  • firewall and anti-malware tools;
  • software and plugin maintenance;
  • backups;
  • restricted administrative access.

No online transmission or storage system can be guaranteed to be completely secure.

23. Children’s Privacy

Our website and products are not directed at children under the age of 16.

We do not knowingly collect personal data directly from children under 16 without appropriate parental or guardian authorisation.

If you believe that a child has submitted personal data improperly, contact contact@emnahussein.com so that we can review and, where appropriate, remove the information.

24. Third-Party Websites

Our website may contain links to third-party websites and platforms.

We are not responsible for the content, security or privacy practices of independent third parties. We recommend reviewing their privacy policies before providing personal data.

25. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

  • changes to our business;
  • changes to the website;
  • changes to payment, delivery or marketing providers;
  • new technologies or integrations;
  • changes in applicable law;
  • changes to our privacy and cookie configuration.

The latest version will be published on this page with an updated revision date.

Where a change materially affects how personal data is used, we may provide an additional notice where appropriate.

26. Contact Us

For questions, concerns or requests relating to this Privacy Policy or your personal data, contact:

Emna Hussein
Correspondence address: River Oaks, Houston, Texas, USA
Email: contact@emnahussein.com