Privacy Policy

How Lebseh collects, uses, and protects your personal information.

Lebseh Team · 5 min read

This Privacy Policy explains how Lebseh collects, uses, and protects your personal information when you visit lebseh.com, place an order, or contact us by email.

1. Who we are

Lebseh is the brand and operator of this website. References to "we," "us," and "our" mean Lebseh as the data controller for the site. References to "you" and "your" mean the visitor or customer using it.

2. Information we collect

We collect only what we need to take your order and run the store. The categories are:

Account information — your name and email when you sign up or sign in (via email magic link or your Google account). We never see or store any password.
Order and delivery details — your shipping address, phone number, and the items in your order. We use the phone number to confirm timing and the address before dispatch.
Order history — what you've ordered, when, and the delivery status. Linked to your account if you have one, or to your guest session otherwise.
Communications — emails you send to contact@lebseh.com and the contents of our replies.
Usage data — pages you visit, the device type (mobile or desktop), and an anonymous browser identifier we use to count unique visitors. No personally identifiable details are tied to this.
Technical data — your approximate country (from your IP address, via our hosting provider), browser type, and request timestamps. Used for fraud prevention and performance monitoring.

3. How we use your information

Process and fulfil your orders — including sharing your delivery address with our courier so they can find you.
Send transactional emails about your order (confirmation, dispatch, delivery).
Communicate with you about questions, issues, or returns you raise.
Operate the site reliably — measuring traffic, fixing bugs, and watching for fraud.
Improve the product catalogue and shopping experience over time.
Comply with legal obligations, including tax records, audits, and valid law-enforcement requests.

We don't sell your data. We share it only with the service providers we need to run the site:

Cloudflare — hosting, edge delivery, and the database that stores your account and orders.
Azure Communication Services — sending transactional emails (order confirmations, magic-link sign-in emails).
Google — if you choose to sign in with Google, your Google profile (name, email, profile picture) is shared with us for authentication only.
Delivery couriers — your name, address, phone number, and order contents are shared with the courier handling your order.

We may also disclose information if required by a valid legal request or to protect Lebseh's rights, property, or the safety of our users.

5. How long we keep your data

Account data — kept while your account is active. Inactive accounts and their data are removed after three years of no activity.
Order records — kept for the period required by applicable tax and commercial law (typically several years).
Magic-link tokens and session tokens — short-lived; deleted automatically shortly after use or expiry.
Usage data — kept for up to two years, in aggregated form, for analytics.
Support emails — kept for as long as needed to resolve the issue, typically up to two years.

6. Cookies and similar storage

Lebseh uses a small set of strictly necessary cookies and browser storage:

Session cookie — keeps you signed in. Removed when you sign out.
Cart cookie — remembers the items in your cart between visits so you don't lose your selection.
Anonymous identifier — a randomly generated ID stored in your browser's local storage, used to count unique visitors. It doesn't identify you personally.

We don't run third-party advertising or marketing trackers.

7. Your rights and choices

You have the right to:

Access the personal information we hold about you.
Correct information that is wrong or out of date.
Delete your account and the personal data tied to it. (We'll keep order records for as long as required by law, even after account deletion.)
Unsubscribe from any non-essential emails using the link in those emails.

To exercise these rights, email contact@lebseh.com from the address linked to your account.

8. Children

Lebseh is intended for users aged 18 and over. We don't knowingly collect information from children under 18. If you believe a child has shared information with us, contact us and we'll remove it.

9. International transfers

Lebseh runs on a global edge network, so your data may be processed in countries other than your own. Our hosting and email providers maintain industry-standard security and contractual safeguards for international transfers.

10. Security

We use HTTPS across the site, encrypt sensitive data at rest in our database, sign you in via short-lived magic links rather than passwords, and limit administrative access to a small team. No system is ever completely secure, but we monitor for unusual activity and patch quickly when issues are found.

11. Changes to this policy

We may update this Privacy Policy as the site grows. The "Last updated" date at the bottom of this page shows when the current version took effect. Material changes will be highlighted on the site for a reasonable period.

12. Contact

Questions, requests, or concerns about your data? Email contact@lebseh.com and we'll respond as soon as we can. See also our Terms of Service for the rest of how the site works.