Privacy policy
How we handle the personal data you give us when you order, under Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016).
What we collect
Your name and phone number; the recipient's name, delivery area and address; the delivery date and time; and your gift message. If you pay by card, a payment reference. We never see or store card numbers — those are handled by the payment provider.
Why we use it
To prepare and deliver your order, to contact you on WhatsApp to confirm it, and to sort out any problem with a delivery. We do not use your details for marketing, and we do not sell them or share them with anyone for their own purposes.
Who handles it
Orders are stored with our hosting providers, Supabase and Railway, in Singapore, and the website is served through Cloudflare. They act only on our instructions. Deliveries are made by our own team, who see the recipient's name, address, phone number and gift message and nothing else.
Cookies
The site sets only the cookies it needs to work: one that remembers your bag and one that keeps pages loading quickly. There are no advertising or tracking cookies and no analytics, which is why we do not ask for cookie consent.
How long we keep it
Order records, including the gift message, are kept for five years to meet accounting obligations and then deleted. If you never placed an order, nothing about you is kept.
Your rights
You can ask what we hold about you, ask us to correct it, or ask us to delete it where the law allows. Message us on WhatsApp or write to the address below and we will answer within 30 days. If you are not satisfied, you may complain to the Compliance and Data Protection Department of the National Cyber Security Agency.
Who we are
- Trading name
- Tulips and Truffles
- +97451514161
Last updated 21 September 2026.