Privacy Policy
What OurScent collects, why, how long it is kept, who it is shared with, and how to see or delete it.
Who we are
OurScent (ourscent.online) is an Arabic-first perfume encyclopedia and a shop. We describe perfumes and their notes, show what stores charge for them, and sell decants and sets we fill ourselves from sealed original bottles.
The controller of your data is the company that sells in your country, named in the terms of sale and at the foot of every page. In countries where we do not sell yet, it is the team that runs OurScent.
OurScent does not sell in Egypt yet. When it does, the selling company, its commercial registration, tax number and address will be listed here.
This policy covers the site in every language, the OurScent app, our sign-up pages and our WhatsApp messages.
What we collect
You can read the whole site without an account. What we keep depends on what you do:
| Data | When | What exactly |
|---|---|---|
| Account | When you sign up or sign in | Your email or mobile number, a display name if you choose one, and when you joined and last signed in. If you use a password we keep only an encrypted form of it, never the password. If you sign in with Google or Apple we receive only your email and name. Verification codes reach you by SMS through Twilio. |
| Orders | When you order from our shop | Your name, number, delivery address and notes; what you bought, what you paid and the delivery status. We also keep where your visit came from (an ad or a creator’s link, for example) and an ad click ID if there is one. |
| Cash-on-delivery check | When you choose to pay on delivery | The system estimates automatically how likely an order is to be refused at the door, from things like a first order, its value and earlier refusals. It may ask you to pay the delivery fee upfront. You can ask for a person to review the decision. |
| Marketing consent | When you give it | Whether you agreed to offers, per channel (WhatsApp, email, notifications), and when. |
| Viewing history | When you open a perfume or a set while signed in | Which perfumes and sets you opened, when and how often, so they appear as “Seen recently” on your other devices and help us suggest perfumes. You can remove any item or clear it all from your account page. Kept for 180 days at most. |
| Messages | When you write to us or confirm an order | The WhatsApp messages we send and your replies, through our messaging provider OurGrowth. |
| Notifications | When you turn them on | Your browser’s or app’s notification token, and the link between your account and our Telegram bot if you make one. |
| Waitlists | When you sign up | On the launch waitlist: your name, number, city and your answer about the club. On a club city list: your city and contact. |
| The club | When you join | Your name, number, city and district, your monthly vote, and what you collect. |
| Creators programme | When you apply | Your social accounts and follower counts, nationality, Mawthooq licence if any, agency, number, the videos you send, and your earnings and payouts. |
| Reviews and photos | When you send them | Your ratings and review text, and your review videos and photos. The “liked it / didn’t” taps after a purchase become part of the public rating, without your name. |
| Swap board | When you use it | Your number in an encrypted form, photos of the perfume, and your messages with the other person. |
| Camera scan | When you use it | The photo you take. We send it to Anthropic to recognise the perfume. We keep it to improve recognition only if you agree, for 365 days at most. |
| Wardrobe and preferences | When you use them | Saved, wished-for and compared perfumes, wear reports, quiz answers, and the suggestions built from them. |
| Shop and device requests | When you send one | The business’s name, how to reach you, and the request. |
| Usage statistics | As you browse | The pages you visit and the buttons you press, with a random ID for your device. Kept on our servers for 180 days, never sold. |
| Clicks to stores | When you leave OurScent for a store | The link, the perfume, the store, the price and the page you were on. This log never stores your IP address. |
| Server logs | With every request | IP address, time, page and browser type. Used only for security and fixing faults. |
Card payments happen on our payment provider Paymob’s page. We never see or keep your card number; we only learn whether the payment succeeded and its reference.
Why we use it
- To fulfil your order: confirm it, deliver it, keep you informed and issue the invoice.
- To run the features you use: your account, wardrobe, votes, reviews, the club and the swap board.
- To protect accounts and orders: number verification, slowing repeated sign-in attempts, and the cash-on-delivery check.
- To show your country’s prices and currency.
- To send offers and news, only on the channels you agreed to.
- To measure ads, only if you accept advertising cookies.
- To improve the site and fix faults.
We never sell your personal data.
Legal basis
We process your data under Saudi Arabia’s Personal Data Protection Law and Egypt’s Personal Data Protection Law No. 151 of 2020, relying on:
- Contract: to complete your order and run your account.
- Your consent: for marketing messages, analytics and advertising cookies, and keeping scan photos to improve recognition.
- Legal obligation: such as keeping invoices for tax.
- Legitimate interest: for site security, fraud prevention and aggregate usage statistics.
You can withdraw consent at any time: in your notification settings, by replying “STOP” to our messages, or by clearing this site’s data in your browser so the consent banner appears again.
Third-party services on the page
These services load in the page and may receive data about your visit. We list only those actually switched on here:
| Service | Purpose | When it loads |
|---|---|---|
| Google Analytics (Firebase) | Visit and usage statistics. | Only after you accept cookies |
We also load Google Fonts on every visit to display text, which gives Google your IP address and browser type.
Transfers outside your country
Our servers and database are in Germany (Frankfurt), and photos and videos are stored in the European Union. Some providers that do one specific job for us (such as Google, Meta, Twilio and Anthropic) are in the United States. So your data is transferred abroad. We send each provider only what it needs, choose providers bound to protect it, and seek the approvals or permits your country’s law requires for the transfer.
How long we keep it
- Account, wardrobe, votes and reviews: until you delete them or your account.
- Orders and invoices: as long as your country’s tax law requires. When you delete your account we remove your name and contact details from them.
- Usage statistics: 180 days.
- Scan photos kept with your consent: 365 days at most.
- The source of your first visit: 400 days.
- Clicks to stores: 24 months.
- Waitlists: until we have told you about the launch, or until you ask to be removed.
- Server logs: about two weeks.
Your rights
You can see your data, correct it, get a copy, delete it, object to its use and withdraw consent. With an account, you can do two of these yourself right now, below:
- Export: download one file with your account, orders, wardrobe, votes, reviews, and what you recorded on the swap board and in the club.
- Delete: removes your account and all of the above. It cannot run while an order is still open. Completed orders stay, without your name, as tax law requires.
If you ordered without an account, or joined a waitlist, write to us from the same number or email. We reply within 30 days.
You can also complain to the Saudi Data & AI Authority (SDAIA) in Saudi Arabia, or Egypt’s Personal Data Protection Centre.
Children
Browsing OurScent is for ages 13 and up. Buying, the club and the creators programme are for ages 18 and up. If a child has given us data, write to us and we will delete it.
Security
Connections to the site are encrypted. We never store passwords themselves. Access to data is limited to the people whose work needs it.
If your data is affected by a breach, we will tell you and the competent authority within the time the law sets.
Changes to this policy
When we change this policy in substance we update the date at the top. If a change affects how we use data you already gave us, we will announce it on the site before it takes effect.