Privacy policy

Last updated: September 16, 2026

C and O General Trading – Sole Proprietorship L.L.C., trading as C&O ("C&O," "we," "us" or "our"), operates this online store and website, including the related products, services, content and features (collectively, the "Services"). Our store is hosted by Shopify.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit or use the Services, place an order, contact us or otherwise interact with C&O. It also explains the privacy rights and choices that may be available to you.

For personal information processed for our own business purposes, C&O is the data controller or equivalent responsible business under applicable privacy law. Shopify, payment providers and certain other service providers may also process personal information under their own privacy notices and, in some circumstances, act as independent controllers.

By using the Services, you acknowledge that you have read this Privacy Policy. Where applicable law requires consent, we will request it separately.

Personal Information We Collect

Depending on how you interact with the Services and which features you use, we may collect the following categories of personal information:

  • Identity and contact information, such as your name, email address, telephone number, billing address and shipping address.
  • Order and transaction information, such as products viewed or purchased, cart activity, order history, returns, refunds, cancellations, delivery information and customer-service records.
  • Payment information, such as payment method, billing details, payment status and transaction identifiers. Payment-card information is generally collected and processed directly by Shopify, Stripe or another payment provider. C&O does not ordinarily receive or store your complete card number or card-security code.
  • Account information, such as account identifiers, login or authentication information, saved preferences and account settings.
  • Communications, including information contained in emails, enquiries, complaints, reviews, return requests or other messages you send to us.
  • Device and technical information, such as IP address, browser type, device type, operating system, network information, cookie identifiers and other online identifiers.
  • Usage information, such as pages viewed, links selected, searches, referral pages, interactions with the Services and approximate location derived from an IP address.
  • Marketing and preference information, such as marketing choices, cookie preferences and interactions with promotional communications.

Please do not provide sensitive personal information unless it is reasonably necessary for us to address a request and you are legally permitted to provide it.

Sources of Personal Information

We may collect personal information:

  • Directly from you when you browse the store, create an account, place an order, subscribe to marketing, request a return or contact us;
  • Automatically through cookies and similar technologies when you use the Services;
  • From Shopify, Stripe and other payment, fraud-prevention, technology, analytics, marketing or customer-support providers;
  • From business partners, social-media platforms or other third parties where permitted by law.

How We Use Personal Information

We may use personal information to:

  • Operate, maintain and improve the Services;
  • Process payments and orders;
  • Arrange fulfilment, international shipping, customs processing, tracking, delivery, returns, replacements and refunds;
  • Create and manage customer accounts;
  • Communicate about orders, delivery, returns, customer-service enquiries and policy changes;
  • Personalise content and product recommendations;
  • Detect, investigate and prevent fraud, abuse, security incidents and unlawful activity;
  • Measure store performance and understand how customers use the Services;
  • Send marketing communications where permitted by law and in accordance with your preferences;
  • Display or measure advertising, subject to applicable consent and opt-out requirements;
  • Comply with legal, tax, accounting, regulatory and record-keeping obligations;
  • Establish, exercise or defend legal claims and enforce our policies; and
  • Carry out a merger, sale, restructuring or other legitimate business transaction.

Legal Bases for Processing

Where the laws of the European Economic Area, United Kingdom or another jurisdiction require us to identify a legal basis, we generally rely on one or more of the following:

  • Performance of a contract, including processing an order, taking payment, delivering products and managing returns or refunds;
  • Compliance with legal obligations, including tax, accounting, consumer-protection and lawful government requirements;
  • Legitimate interests, including operating and improving the Services, providing customer support, preventing fraud, securing our systems and understanding store performance, provided those interests are not overridden by your rights;
  • Consent, including for certain marketing communications, non-essential cookies or targeted advertising where consent is required; and
  • Protection of vital interests, where processing is necessary to protect someone from serious harm.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

How We Disclose Personal Information

We may disclose personal information when reasonably necessary to the following categories of recipients:

  • Shopify, which hosts and supports the store;
  • Payment and fraud-prevention providers, including Stripe where used at checkout;
  • Order-management and fulfilment providers, aby fulfilment partners;
  • Shipping and logistics providers, including carriers, customs agents and local delivery partners;
  • Technology and professional-service providers, such as hosting, cloud storage, IT support, analytics, customer service, accounting, insurance and legal advisers;
  • Marketing and advertising providers, subject to applicable consent and opt-out rights;
  • Government authorities, regulators, courts or law-enforcement bodies where disclosure is legally required or reasonably necessary to protect rights, safety or property; and
  • A buyer, investor or successor organisation in connection with a proposed or completed merger, financing, restructuring, sale or transfer of all or part of our business.

To fulfil an order, we may provide a supplier or fulfilment partner with the customer's name, shipping address, telephone number, email address, product ordered and other information reasonably required to prepare, ship and deliver the order. These recipients may be located outside the customer's country.

We do not sell personal information for money. However, some uses of analytics, advertising technologies or Shopify enhanced services may be treated as a "sale," "sharing" or use for targeted advertising under certain US state privacy laws. Where applicable, you may opt out through the Your Privacy Choices or data-sharing opt-out link displayed on our website, by using the available cookie controls, or by contacting us.

Payments

Payments are processed by Shopify, Stripe or another payment provider displayed at checkout. Payment providers collect and process payment information under their own privacy notices and security standards. We recommend reviewing the privacy notice of the payment provider used for your transaction.

Relationship With Shopify

Shopify collects and processes personal information concerning your access to and use of the Services to host and improve the store and provide related services. Information submitted through the Services may be transmitted to Shopify and other providers located in countries other than your country of residence.

If Shopify Network Intelligence or other enhanced Shopify services are enabled, Shopify may use information about your interactions with our store, other merchants and Shopify to provide those services. In those circumstances, Shopify may be responsible for certain processing and for responding to related privacy requests.

For more information, review the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags and similar technologies to:

  • Enable essential store and checkout functions;
  • Remember preferences and account settings;
  • Maintain security and prevent fraud;
  • Analyse store traffic and performance; and
  • Support marketing, personalisation and advertising where permitted.

Where required by law, non-essential cookies will not be activated until you provide consent. You can manage available choices through our cookie banner or privacy-preference tools and through your browser settings. Blocking some cookies may affect the operation of certain store features.

Where legally required and technically supported, we recognise applicable browser-based opt-out preference signals, such as Global Privacy Control, through Shopify's customer-privacy settings.

Marketing Communications

Where permitted, we may send promotional communications based on your consent or another lawful basis. You can unsubscribe from promotional emails at any time using the unsubscribe link in the message or by contacting us.

Opting out of marketing does not prevent us from sending non-promotional communications concerning orders, payments, deliveries, returns, security or changes affecting the Services.

Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal information. However, no system, transmission or storage method is completely secure, and we cannot guarantee absolute security.

Do not send complete payment-card details, passwords or other highly sensitive information through ordinary email or other unsecured communication channels.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • Complete orders and provide customer service;
  • Maintain an account at your request;
  • Manage returns, refunds, disputes and fraud investigations;
  • Comply with applicable tax, accounting, regulatory and legal obligations; and
  • Establish, exercise or defend legal claims.

Retention periods vary depending on the type of information, the nature of our relationship, legal requirements and whether an unresolved issue exists. When information is no longer required, we will delete, anonymise or securely dispose of it, subject to applicable law and technical limitations.

International Transfers

C&O is based in the United Arab Emirates. Shopify, Stripe, fulfilment partners and other providers may process personal information in the UAE, Canada, the United States, China or other countries. Those countries may have privacy laws that differ from those in your country.

Where required for transfers from the European Economic Area or United Kingdom, we or the relevant service provider will use an approved transfer mechanism, such as an adequacy decision, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, together with supplementary safeguards where appropriate.

Your Privacy Rights and Choices

Depending on your location and subject to applicable exceptions, you may have the right to:

  • Request access to or confirmation of the personal information processed about you;
  • Request correction of inaccurate or incomplete information;
  • Request deletion of personal information;
  • Restrict or object to certain processing;
  • Receive certain information in a portable format;
  • Withdraw consent where processing relies on consent;
  • Opt out of certain targeted advertising, sale or sharing of personal information;
  • Appeal a decision concerning a privacy request where applicable; and
  • Lodge a complaint with the relevant data-protection or privacy authority.

You may exercise available rights through the privacy tools displayed on the Services or by emailing sami_nour@hotmail.com. We may request information reasonably necessary to verify your identity and protect your information. An authorised agent may submit a request where permitted by law, but we may require proof of authority and identity verification.

We will respond within the period required by applicable law. We will not unlawfully discriminate against you for exercising a privacy right.

Children's Privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. Purchases must be made by a person who has reached the age of legal majority in their jurisdiction or by an adult acting with appropriate parental or guardian authority.

If you believe that a child has provided personal information to us, please contact us so that we can investigate and delete it where required.

Third-Party Websites

The Services may contain links to websites or platforms operated by third parties. We do not control and are not responsible for their privacy, security or content. Review the privacy policies of third-party services before providing personal information to them.

Complaints

If you have a concern about our processing of personal information, please contact us first so that we can attempt to resolve it. Depending on your location, you may also have the right to complain to the data-protection or privacy authority responsible for your jurisdiction.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, service providers or legal obligations. We will publish the revised policy on this page, update the "Last updated" date and provide any additional notice required by applicable law.

Contact Us

For questions, complaints or requests concerning this Privacy Policy or your personal information, contact the data controller:

C and O General Trading – Sole Proprietorship L.L.C., trading as C&O
Email: sami_nour@hotmail.com
Telephone: +971 50 220 7825
Business location: Abu Dhabi, United Arab Emirates