Who handles your data
Kávoholik Oman is operated by Global Flair LLC, Sultan Taymoor Street, A1 saad South, Salalah -211, Oman. Company registration number: 1498094. VAT: OM1100391639. Contact eshop@kavoholikoman.com for privacy requests.
Scope and sources of information
This policy covers browsing, orders, café collection, delivery, support, returns and wholesale enquiries. We receive information directly from you and order-related updates from staff, delivery and payment providers. Essential hosting services may generate technical connection and error logs. We do not currently offer customer account registration or optional analytics tracking.
Information and purpose
When you order, we collect your name, email, telephone, selected branch or delivery address, order items and payment/fulfilment status. We use these details to process orders, arrange delivery or collection, send order updates and handle support and refunds. We also process correspondence you send us. Hosting services may process connection and security logs.
Payment information and Thawani
Thawani is our designated provider for online payments when enabled. Card details are entered through the payment provider, not sent to our staff. We retain the order payment method, status and transaction reference needed to reconcile payments and refunds; the shop does not request or store full card numbers or card security codes. Cash-on-delivery and café payments are recorded against the order.
Who can receive information
Authorised Muscat and Salalah staff use order information for fulfilment and support. Only the details reasonably needed are shared with delivery, hosting, payment and communication providers. Records may also be disclosed to professional advisers or competent authorities when necessary for accounting, legal duties or disputes. We do not sell customer personal information.
Service providers
The site is hosted through Sites on Cloudflare infrastructure. Order email delivery may use our configured email provider. Asyad Express receives the contact and address details needed for delivery. When enabled, Thawani processes online card payments; do not send card numbers by email. These providers may process data outside Oman. Provider locations, transfer safeguards and applicable consent arrangements must be confirmed before live customer processing.
Email services and marketing consent
Hostinger hosts our business mailboxes and is the intended service for transactional order emails. Brevo is reserved for separately authorised marketing, such as offers, news and café events. An order does not subscribe you to those campaigns. You can unsubscribe from marketing using the message instructions or by contacting us; necessary order and support messages remain separate.
Cookies and external links
See Cookie preferences for the current storage features. Maps, Instagram, WhatsApp and payment-provider pages have their own privacy practices when you open them. We do not embed their marketing trackers in the shop.
Retention and your requests
We keep records only as needed for order service, complaints and applicable recordkeeping obligations. The operator must confirm the retention schedule before launch. You may contact us to request access, correction or deletion, or to withdraw consent, subject to applicable obligations. We may need to verify your identity. Data-protection complaints may be raised with MTCIT.
Security and personal-data incidents
We use access controls and reasonable technical and organisational safeguards to protect personal information. No electronic service offers absolute security. If we become aware of a personal-data breach, we will investigate, contain it and take corrective steps, including notifying the competent authority and affected people where required by applicable law.
How to exercise your rights
Email eshop@kavoholikoman.com with your name, the contact details you used with us, your request and the relevant order number if applicable. Subject to applicable law, you may request information about processing, access or a copy, correction, deletion, restriction or transfer where applicable, and withdraw consent or object to direct marketing. We may verify identity and retain records required for accounting, disputes or legal obligations. When records are no longer required, we take reasonable steps to delete or anonymise them.
Children, complaints and policy changes
The shop is not intended for children making independent purchases. A parent or guardian who believes a child has provided personal information should contact us. Privacy complaints can be sent to eshop@kavoholikoman.com or the competent personal-data protection authority in Oman, including MTCIT. We update this policy as our services change and show the revision date; mandatory privacy rights remain unaffected.
Customer accounts and loyalty
When accounts are enabled, registration requires first name, last name, street, city, country, telephone and email. Email is the sign-in identifier. The configured authentication provider processes passwords and account details; passwords are not stored in the shop order database. An essential secure session cookie keeps you signed in. We use verified account identity, verified email, online order history and payment, cancellation and refund status to determine loyalty eligibility and calculate discounts. Earlier guest purchases are matched only after email verification; orders bound to another account are not matched by email alone. Authorised authentication, hosting and order service providers may process these data. Joining does not subscribe you to marketing. Retention and privacy requests follow this policy.