Privacy Policy

AYFA Oud sells oud oil, attar, bakhoor and fragrance in the United States — to the public on ayfaoud.com, and wholesale to retailers and resellers on ayfaoud.com/wholesale. AYFA Oud is operated by SA GROUPS LLC, a Kentucky limited liability company, which is responsible for your data under this policy. This policy covers ayfaoud.com and the ordering, account and messaging features on it.

For anything in this policy, including a request to see or delete your data, contact us using the details in the footer of every page.

Creating an account stores your name, email address and a hashed password. Your password itself is never stored and cannot be read by us or recovered — only replaced.

If you provide them, we also store your phone number, city and address, so that orders can be delivered and invoices addressed correctly.

If you were referred by another customer, we record who referred you, because wholesale pricing and account handling can depend on it.

Every visit records the IP address your connection arrives from, the pages you open and when, the address of the site that linked you here if there was one, and what your browser reports about itself — its name and the kind of device you are using. The IP address is also used to look up an approximate city and country, which is as precise as it gets: it locates a network, not a person or an address.

This is kept so we can see how many people reach the shop, which products draw interest, and whether a post or a link actually brought anyone. Page-by-page history is deleted after 90 days; the totals for a visitor are kept longer.

If you are signed in while you browse, these records are linked to your account, so we can see what a customer looked at and follow up on it. Signed out, they are not linked to a name — an IP address on its own does not tell us who you are.

We use no advertising networks and no third-party analytics service. None of this leaves our own systems, apart from the IP address sent to a geolocation lookup to obtain the city and country.

An order records the products, quantities and prices, the delivery details you supply, and the status of the order as it is fulfilled. Payments record the amount, method and date.

Items you add to your cart or wishlist are saved to your account so they are still there when you return.

If you message the business on WhatsApp, the conversation is stored — your WhatsApp number, your profile name as WhatsApp supplies it, and the content of the messages — so that whoever answers can see the history.

Some replies are drafted automatically. A person can take over a conversation at any point, and questions about money or an order's specifics are always handed to a person.

We do not sell personal data. It reaches other companies only where they perform part of the service:

• Amazon Web Services — hosting, the database, and file storage for images and video.
• Resend — sending transactional email such as order confirmations and password resets.
• Meta (Facebook, Instagram and WhatsApp) — messaging with customers, and publishing the shop's own marketing posts. Marketing posts contain product media, never customer data.
• TikTok — publishing the shop's own marketing videos. No customer data is sent.
• Google and fal.ai — generating marketing images and video from our own product photographs. No customer data is sent.

Accounts and their orders are kept while the account exists, and afterwards where we are required to retain records of a sale.

Visitor records and WhatsApp conversations are kept until they are no longer useful for running the shop. Media files that no longer belong to anything are removed automatically.

Ask us to delete your account and we will, except where a record of a completed sale has to be retained.

Signing in sets a cookie that keeps you signed in. It is strictly necessary — without it the site cannot tell one signed-in customer from another.

Some preferences are stored in your own browser and never sent to us. There are no advertising or third-party tracking cookies on this site.

You can ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. Depending on where you live you may have a formal right to these; we will honour the request either way.

Write to us using the contact details in the footer and we will respond.

If this policy changes materially we will update the date at the top. Continuing to use the site after a change means the updated policy applies.