Privacy policy
1. Introduction
Khalaifat Company W.L.L. ("Khalaifat", "we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit or purchase from our website, www.khalaifat.com, and its related domains, services, and tools (the "Website").
This Policy is issued in accordance with the Personal Data Protection Law of the Kingdom of Bahrain (Law No. 30 of 2018) ("PDPL") and applicable regulations.
By using the Website, you acknowledge that you have read and understood this Policy. Where the law requires your consent for a specific processing activity (such as marketing), we will ask for it separately and explicitly.
2. Who we are
Khalaifat Company W.L.L. is a kitchen supply, installation, and home appliance retailer established in Bahrain in 1968. The Website sells goods — including electronics, home appliances, homeware, FMCG, sinks, mixers, worktops, and kitchens — and related services to consumers and businesses.
Contact for privacy matters:
Email: Support@khalaifat.com
Phone / WhatsApp: +973 1714 1414
Address: Building 57, Road 200, Block 373, Abu Ghazal Avenue, Tubli, Kingdom of Bahrain
3. Personal data we collect
Identity Data — first name, last name, username, and an encrypted version of your password. If you interact with us through social media, this may include your social media username.
Account Data — if you create an account with your email address, we email you a 6-digit code to confirm that the address is yours; we keep only a secure, coded form of the code, for 15 minutes. If you choose “Sign in with Google”, Google shares your name, email address and Google account ID with us. We never receive your Google password.
Contact Data — billing address, delivery address, email address, and telephone numbers.
Transaction Data — details of payments to and from you, and details of products and services you have purchased from us.
Profile Data — your orders, preferences, reviews, feedback, and survey responses.
Technical Data — IP address, login data, browser type and version, time zone and location, device and operating system, and other technology identifiers on the devices you use to access the Website.
Usage Data — information about how you use the Website, our products, and our services.
We do not collect Special Categories of Personal Data (such as data revealing race, religion, health, or biometric data), and we do not collect data relating to criminal convictions or offences.
4. How we use your personal data
We use your personal data only where we have a lawful basis to do so, including:
- To perform our contract with you — processing and delivering orders, arranging installation, providing warranty service, and responding to your enquiries.
- To comply with legal obligations — including tax, accounting, consumer protection, and record-keeping requirements under Bahraini law.
- For our legitimate business interests — operating, securing, and improving the Website; preventing fraud; and understanding how customers use our services.
- To keep your account and the Website secure — verifying your email address when you create an account, and protecting sign-up, password reset and contact forms against automated abuse (bots).
- To confirm and deliver your order — for cash-on-delivery orders, our team may call you to confirm your order before it is prepared; our driver may call you before arriving, and we email you when your order is out for delivery.
- With your consent — for direct marketing communications and optional features. You may withdraw consent at any time.
Signing in with Google — we use the information Google shares with us only to sign you in and to manage your account and orders. We do not post to your Google account or access any other Google data. Our use of this information complies with the Google API Services User Data Policy. You can remove our access at any time at myaccount.google.com/permissions.
5. Marketing communications
With your consent, we may send you offers, news, and product updates by email, SMS, WhatsApp, phone, or post.
You can opt out at any time by: using the unsubscribe link at the bottom of any marketing email; replying STOP to SMS or WhatsApp messages; or contacting us using the details in Section 2.
Opting out of marketing does not affect communications we must send you about your orders (order confirmations, delivery updates, warranty matters).
6. Cookies
The Website uses cookies and similar technologies to operate core functionality, remember your preferences, measure Website performance, and — with your consent — deliver relevant advertising.
If you accept cookies, we use Google Analytics 4 and Google Ads, managed through Google Tag Manager, to measure visits and the results of our advertising. If you choose “Only essentials” in the cookie banner, these are not used.
Some advertising and analytics cookies are placed by third-party networks that we do not control. You can manage or withdraw your cookie preferences at any time through the cookie settings banner on the Website or your browser settings.
For full details, see our Cookie Policy.
7. Payments
Online payments by card, Apple Pay or Benefit are processed through our payment gateway, Ottu, in accordance with Payment Card Industry Data Security Standards (PCI DSS). Your card details are sent directly from your browser to the payment provider in encrypted form. Khalaifat never receives or stores your full card number (PAN).
Cash on delivery — if you choose cash on delivery, you pay our driver when your order is delivered; no card details are collected.
8. How we share your personal data
We may share your personal data with:
- Suppliers and service providers — technology providers, payment processors, fraud prevention providers, manufacturers, and delivery and courier services;
- Professional advisers — auditors, bankers, lawyers, accountants, and insurers;
- Government authorities, regulators, and law enforcement — where required by law;
- Advertising and analytics partners — subject to your cookie preferences;
- Business transfer parties — if Khalaifat is involved in a sale, merger, or acquisition, in which case the new owner will be required to handle your personal data in accordance with this Policy.
We require all third parties to protect your personal data, process it only on our instructions, and never use it for their own purposes.
The main service providers behind the Website are: Odoo S.A. (hosting of the Website, online shop and order system); Cloudflare, Inc. (our domain name, and Turnstile bot protection, which looks at technical data such as your IP address and browser to tell people from automated programs); Ottu (online payments); and Google LLC (Google sign-in and, only if you accept cookies, Google Analytics and Google Ads).
9. International transfers
Some of our service providers (such as cloud hosting providers) may store or process data outside the Kingdom of Bahrain. Where personal data is transferred outside Bahrain, we do so in accordance with the PDPL, ensuring the receiving country provides adequate protection or that appropriate safeguards are in place.
10. Data retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, including satisfying legal, tax, accounting, and warranty obligations. When personal data is no longer required, it is securely deleted or anonymised.
11. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, use, alteration, disclosure, or destruction. Access to personal data is restricted to personnel and service providers who need it to perform their functions.
12. Your rights
Under the PDPL, you have the right to:
- Access the personal data we hold about you;
- Correct inaccurate or incomplete data;
- Request erasure of your data where there is no lawful basis for us to keep it;
- Object to processing, including direct marketing;
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, contact us using the details in Section 2. We will respond within the timeframes required by law. You also have the right to lodge a complaint with the Personal Data Protection Authority of the Kingdom of Bahrain.
13. Third-party links
The Website may contain links to third-party websites, plug-ins, and applications. We do not control these third parties and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.
14. Keeping your data accurate
Please keep us informed if your personal data changes during your relationship with us. You can update your details at any time through your account or by contacting us.
15. Changes to this policy
We may update this Policy from time to time to reflect changes in law or our business. The latest version will always be published on this page with an updated "Last updated" date. Material changes will be highlighted on the Website.
16. Governing law
This Policy is governed by the laws of the Kingdom of Bahrain, and the courts of Bahrain shall have jurisdiction over any dispute arising from it.