Privacy Policy

This Privacy Policy explains how Issamoon LLC (trading as AYA, licence FRLA-26022026-00094, Sharjah, UAE) collects, uses and protects the personal data of visitors and customers of ayapowder.com.

1. Data we collect

• Contact data: email address (when you subscribe to the newsletter or to a coming-soon product waitlist).
• Order data: name, delivery address, phone number, email, payment token (when you place an order via Stripe).
• Usage data: aggregated page views and referrer (via Plausible Analytics — privacy-first, no cookies, no IP storage).
• Technical data: preferred language (via an aya-lang cookie, 1-year lifetime) and currency (aya-currency cookie).

2. Why we process it

• To deliver the email and product you requested (legal basis: contract performance).
• To fulfil your order and comply with tax and accounting obligations (legal basis: legal obligation).
• To send you transactional updates (order confirmation, shipping) and — only if you opted in — marketing communications (legal basis: consent, withdrawable at any time).
• To improve site performance through anonymous traffic statistics (legal basis: legitimate interest).

3. Who we share it with

We do not sell or rent your data. We share the minimum necessary with:

• Stripe Inc. — payment processor (USA, EU data centres). stripe.com/privacy
• Resend Inc. — email delivery. resend.com/legal
• Cloudflare Inc. — hosting and CDN. cloudflare.com/privacypolicy
• Plausible Insights OÜ (Estonia, EU) — privacy-first analytics. plausible.io/privacy
• Shipping couriers (DHL, Aramex, FedEx) — only the address required to deliver.

4. International transfers

Some processors are established outside the EU. Where applicable, transfers rely on Standard Contractual Clauses (SCCs) approved by the European Commission.

5. Retention

• Newsletter email addresses: until you unsubscribe.
• Coming-soon waitlist emails: until 12 months after the product launch email is sent, or until you unsubscribe.
• Order data: 10 years (UAE accounting/tax obligation).
• Analytics data: aggregated, no personal identifiers; retained indefinitely in anonymised form.

6. Your rights (GDPR)

If you are in the EU, EEA, UK or Switzerland, you have the right to:

• Access your personal data and receive a copy
• Request correction or deletion
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time
• File a complaint with your local data protection authority

To exercise any of these rights, email info@ayapowder.com with "GDPR request" in the subject line. We respond within 30 days.

7. Cookies

We use only strictly necessary cookies (aya-lang, aya-currency, aya-cart-v1, aya-newsletter-v1) for language/currency preference and cart state. We do not use advertising, tracking, or third-party cookies. Plausible Analytics is cookieless.

8. Security

All traffic is encrypted in transit (HTTPS). Payment data never touches our servers — Stripe handles it end-to-end with PCI-DSS Level 1 certification.

9. Changes

We may update this policy. Material changes will be announced on this page with a revised "Last updated" date.

10. Contact

Issamoon LLC — AYA
Licence: FRLA-26022026-00094
Email: info@ayapowder.com
WhatsApp: +971 58 598 6118