Privacy Policy

NARFFUM is an online perfume store operating in the Republic of Armenia. We are the data controller for the personal data described in this policy.

Contact: narffum@gmail.com, +374 33 116 616.

We collect only the data needed to run the store and deliver your orders:

• Account data: name, e-mail address, password (stored in hashed form), and, if you sign in with Google or Facebook, the name, e-mail and profile picture those services share with us.
• Order data: first and last name, phone number, city, delivery address, order comment, ordered items, order history and status.
• Loyalty data: cashback and points balance, promo codes you have used.
• Wishlist and cart contents.
• Reviews and ratings you leave on products.
• Technical data: IP address, device type, operating system, browser, app version, language preference, pages visited and basic performance metrics.

We do not collect payment card details. Orders are paid on delivery, and any payment you make goes directly to the courier or payment provider, not through our systems.

• To create and manage your account and sign you in.
• To process, confirm by phone, deliver and track your orders.
• To run the cashback and points programme.
• To show your wishlist, cart and order history on every device you sign in from.
• To answer your questions and handle returns or complaints.
• To keep the Service secure, prevent fraud and fix technical problems.
• To measure how the website and app perform and improve them.
• To send you order updates. Marketing messages are sent only if you have opted in, and you can opt out at any time.

The website uses cookies that are strictly necessary to keep you signed in and to remember your language. We also use performance measurement from our hosting provider (Vercel Speed Insights), which collects anonymous page-speed metrics and does not identify you.

The iOS app does not use cookies. It stores your sign-in session on your device so you do not have to log in every time.

We never sell your personal data. We share it only with service providers who help us run the Service and who are bound to protect it:

• Supabase, which hosts our database and authentication service.
• Vercel, which hosts the website.
• Google and Meta (Facebook), only when you choose to sign in with those accounts.
• Courier and delivery partners, who receive your name, phone number and address to deliver your order.
• Apple, in relation to the distribution of the iOS app through the App Store.

We may also disclose data when required by law or to protect our legal rights.

Account data is kept while your account is active. Order records are kept for as long as required by Armenian accounting and consumer-protection law. Technical logs are kept for a short period and then deleted or anonymised.

You can at any time:

• View and update your account details in the My Account section of the website or app.
• Ask us for a copy of the personal data we hold about you.
• Ask us to correct or delete your data, or to delete your account entirely.
• Withdraw consent to marketing messages.

To exercise these rights, write to narffum@gmail.com from the e-mail address linked to your account. We reply within 30 days.

All traffic between your device and the Service is encrypted (HTTPS). Passwords are stored only as salted hashes. Access to personal data inside the company is limited to staff who need it to process orders and support customers.

The Service is intended for adults. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy from time to time. The date at the top shows the latest version. Significant changes will be announced on the website or in the app.

Questions about privacy: narffum@gmail.com or +374 33 116 616.