Privacy Policy

This Privacy Policy explains how Tawahhuj (“we”, “us”, or “our”) collects, uses, stores, and shares personal information when you visit our website, create an account, sign in with Google, or place an order for our handcrafted Himalayan salt lamps.

Tawahhuj operates the online store at constellationsgateway.shop. By using our store, you agree to this Policy.

1. Information we collect

1.1 Account, identity, and contact details

We collect information that you provide directly, that is generated when you place an order, or that we receive when you sign in with Google, including:

• Full name
• Email address
• Phone number
• Shipping and billing address
• Order history and customer-support messages

1.2 Google Sign-In and Google APIs

If you choose “Continue with Google”, we use Google OAuth 2.0 and Google APIs to create or sign in to your Tawahhuj customer account. During that process we collect the following Google user data:

• Name from your Google profile, so we can identify you on invoices, orders, and shipping labels.
• Email address from your Google account, so we can create your account, authenticate you, and send order confirmations, shipping updates, and customer-support messages.
• Phone number through the Google People API (OAuth scope https://www.googleapis.com/auth/user.phonenumbers.read), so we can contact you about delivery, shipping, and order fulfillment. If Google does not provide a phone number, we may ask you to add one before checkout.

We request only the Google user data needed to operate your account and to fulfill and ship your orders. We do not use Google user data for advertising, for sale to third parties, for creditworthiness decisions, or for any purpose unrelated to providing Tawahhuj’s store services.

Tawahhuj’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

1.3 Payment information

Payments are processed by trusted third-party providers such as Stripe and PayPal. We do not store full payment-card numbers on our servers. Those providers process your payment data according to their own privacy policies and applicable card-network rules.

1.4 Technical data

When you visit the store we may automatically collect limited technical information such as IP address, browser type, device information, and pages viewed. We use this information to operate, secure, and improve the website.

2. How we use your information

We use personal information to:

• Create, authenticate, and manage your customer account
• Process, fulfill, pack, and ship orders
• Communicate with you about orders, delivery, returns, and support
• Send transactional emails (order confirmation, invoices, and status updates)
• Prevent fraud, abuse, and unauthorized access
• Comply with legal, tax, and accounting obligations

Names, email addresses, and phone numbers collected through Google Sign-In or the Google People API are used solely for account creation, customer identification, shipping, and order fulfillment.

3. How we share information

We share personal information only when needed to operate the store:

• Payment processors (Stripe, PayPal) to complete your payment
• Shipping and logistics partners to deliver your order
• Service providers that host our website, email, or infrastructure, under confidentiality obligations
• Authorities when required by law or to protect our rights, customers, or security

We do not sell your personal information. We do not share Google user data with third parties except as needed to fulfill the purposes described in this Policy (for example, putting your name, phone number, and address on a shipping label).

4. Data retention

We keep account and order records for as long as your account is active and for a reasonable period afterwards to complete orders, handle returns, prevent fraud, and meet tax and legal record-keeping requirements. You may request deletion of your account as described below, subject to those legal obligations.

5. Security

We use administrative, technical, and organizational measures designed to protect personal information, including encrypted connections (HTTPS), access controls, and limiting staff access to what is needed to fulfill orders and support customers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your rights

Subject to applicable law, you may request to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated personal data, except where we must retain records
• Withdraw Google Sign-In access from your Google account settings at any time

To exercise these rights, contact us using the details below. If you signed in with Google, you can also review and revoke Tawahhuj’s access to your Google account from your Google Account permissions page.

7. Children’s privacy

Our store is intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

8. International transfers

Our service providers (including Google, Stripe, and PayPal) may process information in countries other than your country of residence. Where we do so, we take steps designed to protect your information in accordance with this Policy.

9. Changes to this Policy

We may update this Privacy Policy from time to time. The updated version will be published on this page with a revised date. Continued use of the store after changes become effective constitutes acceptance of the updated Policy.

10. Contact us

If you have questions about this Privacy Policy, Google Sign-In, or how we handle your personal information, please contact Tawahhuj:

• Website: constellationsgateway.shop
• Contact page: constellationsgateway.shop/contact
• Email: [email protected]

We will review privacy requests and respond as soon as reasonably possible.