Privacy & Data Policy
Your trust matters. This policy explains exactly what personal information we collect, how it's used, and the security measures we use to keep it safe — always with respect, transparency, and in full compliance with global and regional data standards.
Personal Information We Collect
To process your orders, ship your jewelry safely, and keep you informed at every step, we collect only the information necessary to serve you — and nothing more.
Types of personal data:
- Identity & Contact — Your full name, email address, phone number, and billing / shipping address (including country, city, and postal code).
- Shipping & Delivery — Delivery address, recipient details, and any access or delivery notes provided at checkout.
- Payment Information — Card details (processed securely via our payment providers), billing address, and order transaction data. We do not store raw card numbers on our servers.
- Account & Profile — Username, password (encrypted), saved addresses, order history, and wishlist selections (when registered).
- Personalized Orders — Engraving text, names, custom font selections, and any specifications you provide for made-to-order jewelry.
How We Use Your Information
Every piece of data we collect has a specific purpose. We never sell your information, and we use it only to deliver a better experience, not to spam or share without consent.
Primary purposes:
- To fulfill orders — Process payments, prepare packaging, engrave personalized pieces, and hand off to courier for delivery to the address you provide.
- To improve service — Understand sizing, style, and product preferences to refine our jewelry collection, sizing guides, and website experience.
- Order & shipping updates — Send tracking links, dispatch confirmation, delivery ETA, and (when enabled) WhatsApp or SMS delivery alerts directly from our courier partners.
- Support & returns — Verify your order during customer support, refunds, and replacement requests (see our Refund & Returns policy).
- Security & fraud prevention — Monitor transactions for unusual activity, prevent misuse, and protect our store and customers from unauthorized access.
- With your consent — Occasional updates on new collections and exclusive offers via email (you can unsubscribe at any time).
Third-Party Sharing & Processors
We share only the minimum required data with trusted, contractually-bound partners to deliver jewelry and process payments securely. All partners are GDPR & regional data-regulation compliant.
Categories of third-party processors:
Aramex & iMile
Shared data: recipient name, delivery address, phone number, and package weight. Used exclusively to arrange pickup, provide tracking, and complete last-mile delivery in GCC countries.
Stripe
Processes all Visa, Mastercard, and Apple Pay transactions. Card data is handled entirely within Stripe's PCI-DSS compliant infrastructure — MoonAndNoor never stores raw PAN or CVV.
Tabby & Tamara
Buy-Now-Pay-Later partners popular across Saudi & UAE. Shared data is limited to order value, customer ID, and billing address required for credit decisions and installment plans.
Email & Hosting
Transactional emails (dispatch, tracking) via secure SMTP providers; infrastructure hosted under strict access controls with regular audit logging.
Data Security & Compliance
PCI-DSS Compliant
All credit card transactions are handled through Stripe and GCC payment partners, which are PCI-DSS Level 1 certified — the highest standard in payment-card industry security. Your card data is tokenized and encrypted end-to-end, with no raw card numbers ever stored on MoonAndNoor infrastructure.
SSL Encryption
Every page and every checkout on MoonAndNoor runs over 256-bit TLS (SSL) encryption with an extended-validated certificate. All data transmitted between your browser and our servers — including name, address, and payment details — is securely encrypted in transit, visible only to you and our authorized processors.
Moon And Noor. All Rights Reserved.
Registered in Dubai, UAE