Privacy Policy

Privacy Policy for Al Nassr Online Store

Introduction

This Privacy Policy explains how we collect, use, and protect your personal data on the Al Nassr online store website, where we offer products related to the Al Nassr football club (shirts, accessories). We are committed to safeguarding your privacy and ensuring the security of your personal data in accordance with applicable laws and regulations, including the General Data Protection Regulation (GDPR).

Scope of the Privacy Policy

This Privacy Policy applies to all personal data collected through our website.

Types of Data Collected

We collect the following personal data:

  • Name

  • Email address

  • Phone number

  • Shipping address

  • Payment information (depending on the chosen payment method)

  • IP address

  • Cookies and other tracking technologies

Legal Basis for Data Processing

We process your personal data based on the following legal grounds under the GDPR:

  • Performance of a contract (Art. 6(1)(b) GDPR) – to process and fulfill your orders.

  • Legal obligation (Art. 6(1)(c) GDPR) – to comply with accounting, tax, and other legal requirements.

  • Legitimate interest (Art. 6(1)(f) GDPR) – to improve our services, prevent fraud, and analyze website traffic.

  • Consent (Art. 6(1)(a) GDPR) – for sending newsletters, using certain cookies, and personalized marketing.

Purpose of Data Processing

Your data is processed for the following purposes:

  • Processing and fulfilling orders

  • Handling payments

  • Shipping ordered products

  • Informing you about order status

  • Sending newsletters (if you have consented)

  • Personalizing content and offers

  • Analyzing website traffic and improving store functionality

Data Retention Period

We store your personal data only for as long as necessary for the purposes outlined in this policy, or as required by law. The retention periods are as follows:

  • Order-related data: Retained for 5 years after the purchase (to comply with tax and accounting regulations).

  • Marketing and newsletter data: Retained until you withdraw your consent.

  • Website analytics data: Retained for a maximum of 2 years.

Sharing of Personal Data

Your data may be shared with the following third parties:

  • Payment service providers (e.g., PayPal, Stripe, Przelewy24, Shopify Payments) – to process payments.

  • Courier companies (e.g., DHL, UPS) – for order delivery.

  • IT service providers – that maintain our website and database.

  • Marketing service providers – for sending newsletters and promotional content (only if you have given consent).

If your data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards, such as the EU Standard Contractual Clauses, are in place.

User Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right to access – You can request a copy of your personal data.

  • Right to rectification – You can correct inaccurate or incomplete data.

  • Right to erasure (“right to be forgotten”) – You can request the deletion of your data under certain conditions.

  • Right to restrict processing – You can request to limit how your data is processed.

  • Right to object – You can object to the processing of your data based on legitimate interests.

  • Right to data portability – You can request your data in a structured, commonly used format.

  • Right to withdraw consent – You can withdraw your consent at any time (for data processing based on consent).

To exercise any of these rights, please contact us at: support@alnassr-shop.com

Cookies and Tracking Technologies

Our website uses cookies and other tracking technologies for the following purposes:

  • Analyzing site traffic

  • Personalizing content and advertisements

  • Improving website functionality and user experience

You can manage your cookie preferences through your browser settings.

Data Security

We implement the following security measures to protect your personal data:

  • SSL encryption for data transmission

  • Secure storage systems to prevent unauthorized access

  • Access control measures to limit data access to authorized personnel only

We are the official distributor of the Al-Nassr products and have full rights to sell and distribute its products. We are only responsible for products sold through this website, not through third-party sites.

We operate in compliance with applicable regulations and guarantee the highest quality of our offered items.

Changes to the Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be communicated by posting the updated policy on our website. We encourage you to review this policy periodically.

If you have any questions regarding this Privacy Policy, please contact us at: support@alnassr-shop.com.