Privacy Policy

Effective Date: July 20, 2026

Last Updated: July 20, 2026

At Atayeb Khadijah, we craft our authentic Levantine delicacies with deep devotion, patience, and care. We hold your personal privacy to that exact same standard.

This Privacy Policy explains how Atayeb Khadijah (“we,” “our,” or “us”) collects, uses, protects, and handles your personal information when you visit our website, communicate with us via WhatsApp, or order our handcrafted bakes and savouries.

We operate in compliance with applicable data protection laws, including the Qatar Personal Data Privacy Protection Law (Law No. 13 of 2016). We encourage you to read this policy carefully to understand how we honour your personal data.

1. Introduction & Commitment

Your trust is the foundation of our kitchen. Whether you are ordering freshly baked Fatayer for a family gathering or selecting handcrafted Ma’amoul for a special occasion, we are committed to protecting your personal data with the utmost integrity.

We collect only the information necessary to serve you efficiently, personalising your experience while ensuring your details remain private, secure, and protected. We will never sell, rent, or trade your personal data to third parties.

2. Data We Collect

To fulfill your orders and provide a seamless browsing and ordering experience, we may collect and process the following categories of personal data:

Identity & Contact Data

Order & Transaction Data

Dietary & Health Preferences (Optional)

Technical & Usage Data

3. How We Collect Data

We collect data through two primary methods:

Direct Interactions: Information you actively provide when placing an order, filling out a web form, contacting us via WhatsApp (+974 33561424), signing up for our newsletter, or providing feedback.
Automated Technologies: Technical details automatically captured via essential website cookies, Google Analytics 4, Meta Pixel, and server logs as you navigate our platform.

4. Legal Basis & Purpose of Processing

We process your personal data under clear legal grounds to deliver exceptional culinary experiences and fulfill our operational duties:

Order Fulfillment & Contract Performance: Processing purchases, coordinating advance preparations, verifying payments (via Cash or Fawran), and managing local pickups at Ezdan 9 R53a or coordinating courier deliveries.
Customer Support & Communication: Responding to inquiries, confirming WhatsApp orders, and providing updates regarding order readiness.
Legitimate Business Interests: Improving our menu offerings, refining platform navigation, securing our digital infrastructure, and analysing website traffic.
Legal & Regulatory Compliance: Maintaining accounting records, complying with Qatari commercial standards, and satisfying lawful regulatory requests.

5. Data Sharing & Third Parties

We share your information strictly on a need-to-know basis with trusted service providers who assist us in operating our business. Every third party is bound by strict confidentiality and data protection obligations.

Communication Platforms: WhatsApp (Meta Platforms) for direct order processing and customer care.
Payment & Banking Partners: Local banking institutions supporting Fawran transfers and manual cash audit routines.
IT & Platform Hosting Providers: Secure cloud hosting, website administration, and database management services.
Analytics & Marketing Tools: Web analytics providers (such as Google Analytics 4 and Meta Pixel) to help us understand user experience trends.
Delivery Partners: Local courier and logistics partners appointed to bring your order directly to your door.
Our Pledge: We do not, and will never, sell or rent your personal data to commercial third parties for marketing purposes.

6. Cookies & Tracking Policy

Our platform uses cookies and similar tracking technologies to ensure optimal performance, keep track of your selection, and enhance overall usability.

Essential Cookies: Required for basic platform functionality, enabling core navigation, session management, and secure order placement.

Performance & Analytics Cookies: Help us measure website traffic and user interaction patterns (e.g., Google Analytics 4) so we can refine our digital storefront.

Marketing Cookies: Used (e.g., Meta Pixel) to deliver relevant updates and evaluate cmpaign effectiveness across digital platforms.

Managing Cookies: You can adjust your browser settings at any time to block or delete non-essential cookies. Please note that disabling essential cookies may impact certain interactive features on our website.

7. Data Security & Retention

Security Protocols

We implement appropriate technical and organisational safeguards—including SSL encryption, secure access controls, and regular infrastructure reviews—to safeguard your personal data against accidental loss, unauthorized access, or misuse.

Data Retention

Order & Accounting Records: Stored for up to 5 years to satisfy statutory tax, accounting, and commercial requirements in Qatar.

Customer Communication Records: Retained for as long as necessary to maintain customer relationship continuity or until deletion is requested.

Marketing Data: Retained until you unsubscribe or request the removal of your contact details.

8. Your Legal Rights

Under Qatar’s Personal Data Privacy Protection Law (Law No. 13 of 2016), you hold clear rights regarding your personal data:

Right of Access: You may request confirmation of the personal data we hold about you and receive a copy.
Right to Rectification: You may request immediate correction of inaccurate or incomplete information.
Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer required for legitimate or statutory purposes.
Right to Withdraw Consent: Where processing relies on consent (e.g., direct marketing), you may opt out at any time via the "unsubscribe" link in our emails or by contacting us directly.
Right to Object & Restrict: You may object to data processing activities that violate your privacy rights under local law.
To exercise any of these rights, please contact our Privacy Team at hello@khadijah.com.

9. Children's Privacy

Our online platform and ordering channels are intended for general adult audiences and are not directed at unsupervised children. We do not knowingly collect personal data from individuals under 18 years of age without parental or legal guardian consent. If you believe a minor has provided us with personal information, please contact us immediately so we can promptly remove the data.

10. Changes & Contact Information

We may update this Privacy Policy periodically to reflect enhancements to our kitchen operations, menu ordering processes, or legal requirements. Updates will be published directly on this page with a revised “Last Updated” date.