Last updated: 2026-10-20
Nooraglow (“we”, “us”) is operated by an individual based in Amman, Jordan, at nooraglow.com. Contact: hello@nooraglow.com. This policy explains what personal data we collect and why. We currently sell to customers in the United States, the United Arab Emirates and Saudi Arabia. It is written with the CCPA/CPRA in mind and also follows GDPR-style principles.
What we collect
- Order data: name, shipping and billing address, email, phone number, items ordered.
- Payment data: payments are processed by PayPal. We never see or store your full card details. We receive confirmation of payment and your PayPal email.
- Technical data: basic technical data such as IP address and browser/device type, handled by our hosting provider and by PayPal during checkout.
- Optional account: if you choose to sign in, we store your email address, your name and delivery address if you save them, and short-lived sign-in and session records. There are no passwords: we email you a one-time sign-in link (sent through our email provider, Resend) and keep only a hashed form of the link and of your session. Signing in is never required to buy, and you can ask us to delete your account at any time.
- Communications: emails you send us at hello@nooraglow.com.
Why we use it (legal bases)
- To fulfil your order and provide support (contract).
- To comply with legal and tax obligations (legal obligation).
- To prevent fraud and secure the site (legitimate interest).
- To keep the store working and improve it (legitimate interest).
- To send marketing emails only if you opt in (consent).
Who we share it with
We share only what is needed with: PayPal (payments); our dropshipping suppliers and delivery carriers, such as CJ Dropshipping (to ship your order, they receive your name, address and phone); and our hosting and email providers (Cloudflare; Resend for sign-in emails). We do not sell your personal data.
Cookies
We use only essential cookies that make the cart and checkout work, plus, only if you sign in, a secure sign-in cookie (ng_sess) and a small flag cookie (ng_in) that last up to 30 days or until you sign out. We do not use advertising or tracking pixels. You can block cookies in your browser, but the cart and checkout may then not work.
International transfers
We are in Jordan and our suppliers and service providers operate in other countries (including the USA and other countries). Your data may be transferred internationally, with appropriate safeguards where required.
Retention
We keep order records as long as needed for legal, tax and accounting purposes (typically up to 6 years), then delete or anonymise them.
Your rights
Depending on where you live, you may: access, correct or delete your data; object to or restrict processing; withdraw consent; receive a copy (portability); and, in California, know what we collect and not be discriminated against for exercising your rights. Email hello@nooraglow.com and we will respond within 30 days. EU/UK residents can also complain to their local data protection authority.
Children
Our store is not directed to children under 16 and we do not knowingly collect their data.
Security
We use reasonable technical measures (HTTPS, access controls), but no online system is 100% secure.
Changes
We may update this policy and will change the date above.
Contact
hello@nooraglow.com