Privacy policy

MyIrthi (إرثي)
Last updated: April 2026

1. Scope & Position

This Privacy Policy describes how MyIrthi (“we”, “our”, or “the House”) collects, uses, and protects personal data when you:

  • Visit our website
  • Acquire a volume or archive
  • Engage with us directly

For the purposes of applicable law, MyIrthi acts as a Data Controller.

This policy is structured in accordance with:

  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018 (UK)
  • Qatar Law No. (13) of 2016 on Personal Data Privacy Protection
  • Applicable GCC data protection frameworks

2. Nature of Data We Collect

We collect only what is necessary to fulfil, safeguard, and administer your acquisition.

2.1 Identity & Contact Data

  • Full name
  • Email address
  • Telephone number
  • Billing and shipping address

2.2 Order & Transaction Data

  • Purchase history
  • Order details
  • Payment confirmation (processed securely via third-party providers)

Note: MyIrthi does not store full payment card details.

2.3 Personalisation Data (Critical Category)

Where applicable, we collect:

  • Names, dedications, inscriptions
  • Personal duʿāʾ selections
  • Uploaded images or biographical inputs

This category is treated as high-sensitivity cultural data, even where not legally classified as sensitive.

It is handled with restricted access and controlled processing protocols.

2.4 Technical & Usage Data

Collected automatically:

  • IP address
  • Browser type and version
  • Device information
  • Interaction patterns (pages viewed, navigation behaviour)

2.5 Customer Correspondence

  • Support enquiries
  • Email communications
  • Feedback or complaints

3. Sources of Data

We collect data from:

  • You directly (orders, forms, communication)
  • Automated technologies (cookies, analytics tools)
  • Service providers supporting our infrastructure

This structure is consistent with standard e-commerce frameworks such as those outlined in your previous policy .

4. Lawful Basis for Processing (UK GDPR)

We process personal data under the following lawful bases:

  • Contractual necessity – to fulfil your order
  • Legal obligation – compliance with tax, fraud prevention, and regulatory duties
  • Legitimate interests – to improve service quality and platform performance
  • Consent – for marketing communications where required

We do not process personal data in a manner that overrides your fundamental rights.

5. Purpose of Processing

Your data is used strictly for:

  • Order fulfilment and delivery
  • Personalisation of volumes and archives
  • Customer support and communication
  • Fraud detection and prevention
  • Service improvement and analytics
  • Marketing (only where consent is given or lawful to do so)

6. Data Sharing & Disclosure

We do not sell personal data.

We share data only where necessary with:

6.1 Core Infrastructure Providers

  • Shopify – hosting and order processing
  • Payment processors (secure financial transactions)
  • Logistics partners (delivery fulfilment)

6.2 Analytics Providers

  • Google Analytics – usage insights

6.3 Legal & Regulatory Authorities

Where required by law, subpoena, or regulatory obligation.

All third parties are required to maintain strict confidentiality and data protection standards.

7. International Data Transfers

Your data may be processed outside your country of residence, including:

  • United Kingdom
  • European Economic Area
  • United States
  • Canada

Where such transfers occur, we ensure:

  • Adequate safeguards
  • Standard contractual clauses
  • Compliance with GDPR transfer mechanisms

8. Data Retention

We retain personal data only for as long as necessary:

  • Order records: retained for legal and tax obligations
  • Personalisation data: retained only as required for production and record integrity
  • Marketing data: retained until consent is withdrawn

You may request deletion at any time, subject to legal limitations.

9. Your Rights

Depending on your jurisdiction, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (right to erasure)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent (where applicable)

To exercise your rights:

Email: support@myirthi.com

10. Children’s Data

MyIrthi does not knowingly collect data from individuals under the age of 16.

If such data is identified, it will be promptly deleted.

11. Cookies & Tracking Technologies

We use cookies to:

  • Enable site functionality
  • Maintain session integrity
  • Analyse performance
  • Improve user experience

Types of Cookies

  • Essential (required for operation)
  • Performance and analytics
  • Marketing (where consent applies)

You may control cookies via your browser settings.

Disabling cookies may affect site functionality.

12. Behavioural Advertising

Where permitted, we may use limited data to:

  • Deliver relevant content
  • Improve communication relevance

You may opt out via:

  • Browser controls
  • Platform settings
  • Industry opt-out tools

13. Automated Decision-Making

MyIrthi does not engage in automated decision-making that produces legal or significant effects.

Limited automation may be used for:

  • Fraud detection
  • Transaction risk screening

This does not materially impact your rights.

14. Data Security

We implement appropriate technical and organisational measures, including:

  • Encrypted transactions
  • Restricted internal access
  • Secure hosting environments
  • Controlled handling of personalisation data

Despite these measures, no system is completely secure. Risk is mitigated, not eliminated.

15. Policy Updates

This policy may be updated to reflect:

  • Legal requirements
  • Operational changes
  • Platform evolution

The latest version will always be available on our website.

16. Complaints & Regulatory Authority

If you are not satisfied with our response:

  • UK residents may contact the Information Commissioner’s Office (ICO)
  • GCC residents may contact relevant local data protection authorities

17. Contact

For all privacy-related matters:

Email: support@myirthi.com
Response Time: 1–2 business days