Bag It Boutique respects your privacy. This policy explains what information we collect when you browse or shop with us, why we use it, and the choices available to you.
Information we collect
We may collect your name, Jordanian phone number, optional email address, delivery address and notes, order and payment-status information, communications with us, and account information you choose to provide.
If you sign in, our authentication provider may share a stable account identifier, verified email address, name and profile image. We do not receive your Google password.
We may also receive basic technical information needed to operate and secure the Site, including device, browser, IP, cookie and request information.
How we use information
We use information to process and deliver orders, provide order tracking and customer support, maintain customer accounts and Bag It Credit, prevent fraud and abuse, protect the Site, comply with legal obligations, and improve our services.
Newsletter signup requests
When you enter your email and separately opt in to Bag It updates, we save your email address, language, consent time and consent-text version as an unverified signup request. Buying a product or signing in does not subscribe you automatically. Newsletter delivery is not active yet; saving a request does not send an email or verify ownership of the address.
Requests are accessible only to the authorised store owner and manager and are not linked to browsing analytics. You can withdraw your request or ask for its deletion through the store’s published contact channel. Short-lived rate limits protect the form from abuse; the signup record does not store your raw IP address.
Sharing
We share only what is reasonably necessary with service providers that help us operate the store, such as hosting, authentication, analytics, delivery and communications providers, or when disclosure is required by law. We do not sell customer personal information.
Cookies and sessions
Essential cookies and similar storage may be used for secure sign-in, language and cart preferences, fraud prevention and core Site operation. Blocking essential storage may prevent some features from working.
Optional first-party measurements
Only after you choose Allow measurements, we use random browser and visit identifiers to count public page and product views, additions to the bag and checkout-page entries. A browser identifier lasts up to 90 days; a visit ends after 30 minutes of inactivity. We retain your measurement choice for up to 180 days. These identifiers are separate from your sign-in and are not linked to your name, email or customer account.
Measurements record a fixed public page path, a product identifier where relevant, a broad device category and a broad referral category such as Instagram or Google. We do not record full referral URLs, URL queries, search text, addresses, phone numbers, card details, passwords or authentication tokens in these traffic records. No Google Analytics or Meta Pixel is used for these measurements.
You can decline or change your choice through Privacy choices on a public store page. Declining does not affect shopping, your bag or sign-in. We respect Do Not Track and Global Privacy Control browser signals; optional measurements remain off when these signals are enabled. Withdrawing consent stops new measurements and clears the measurement identifiers from your browser.
Traffic records are retained for up to 90 days. Separate successful sign-in audit records contain the verified account identifier, available name or email and sign-in time; they are retained for up to 180 days and accessible only to authorised store administrators. Refreshing a page or restoring a saved session is not recorded as a new sign-in. Security audit records do not depend on optional traffic-measurement consent. Retention cleanup runs in bounded batches during subsequent analytics or successful sign-in activity; expired records awaiting cleanup may remain until that activity occurs.
Retention and security
We retain information only as long as reasonably needed for orders, support, accounting, fraud prevention and legal obligations. We use access controls and technical safeguards, but no online system can guarantee absolute security.
Your choices
You may request access to or correction of your customer profile information, or ask questions about retention and deletion, subject to records we must keep for legitimate business or legal purposes. Contact us through the published Bag It Boutique contact channel.
Updates
We may update this policy as the store or applicable requirements change. The latest version and effective date will remain available on this page.