1. Introduction & Scope

This Privacy Policy (“Policy”) describes how Blaze Trading (“Blaze,” “we,” “our,” or “us”) collects, uses, stores, discloses, and protects personal data in connection with the operation of our website, www.blazeqa.com (the “Website”), and the provision of our products and services.

This Policy applies to all visitors, users, and customers (“you,” “your,” or the “Customer”) who access the Website, create an account, or purchase products from Blaze. It also applies to personal data collected offline through customer service or other communications.

By accessing the Website, creating an account, or placing an order, you acknowledge and agree that your personal data will be processed in accordance with this Policy, the Qatar Personal Data Privacy Law (Law No. 13 of 2016), and other applicable laws. Where required by international law, such as the EU General Data Protection Regulation (GDPR), this Policy extends to cover those obligations as well.

2. Company Identity & Contact Information

The Website is owned and operated by:

Blaze Trading

Doha, State of Qatar

Website: www.blazeqa.com

Email for Privacy Matters: blazewearr.qa@gmail.com

For the purposes of Qatar PDPL and, where relevant, other international data protection frameworks, Blaze Trading acts as the Data Controller of your personal data, meaning we determine the purposes and means of processing such data.

3. Legal Basis & Governing Law

Blaze processes personal data in accordance with:

Qatar Personal Data Privacy Law (Law No. 13 of 2016), which regulates the collection, use, and protection of personal information in Qatar.
Other applicable Qatari legislation, including the Electronic Commerce and Transactions Law (Law No. 16 of 2010).
International standards, including the GDPR, where required by law (for example, when processing data of residents in the European Economic Area or the United Kingdom).

Processing of personal data is always based on one or more lawful grounds, including:

The necessity of processing to perform a contract (e.g., fulfilling your purchase order).
Compliance with a legal obligation (e.g., retaining invoices for tax purposes).
Your explicit consent, where required (e.g., for marketing communications).
Blaze’s legitimate interests, provided they do not override your fundamental rights and freedoms (e.g., fraud prevention, Website security).

4. Definitions

For the purposes of this Policy:

“Personal Data” means any information relating to an identified or identifiable individual, including but not limited to your name, email, address, telephone number, payment details, or IP address.
“Processing” means any operation performed on personal data, such as collection, recording, storage, use, disclosure, or deletion.
“Controller” means the entity that determines the purposes and means of processing personal data (Blaze Trading in this case).
“Customer” means any individual or entity purchasing products or interacting with the Website.
“Cookies” means small text files stored on your device when you visit the Website, used for functionality, analytics, and personalization.
“Third Parties” means service providers, payment processors, couriers, and other external entities with whom Blaze may share data as necessary.

5. Information We Collect

Blaze collects the following categories of personal data:

1. Information You Provide Directly

Name, billing and shipping address, phone number, email address.
Payment details (processed securely through third-party providers).
Measurements or customization details for pre-order items.
Account login credentials if you register with us.
Customer service inquiries or communications.

2. Information Collected Automatically

IP address, browser type, operating system.
Website usage data, including pages visited, products viewed, and time spent on the site.
Device identifiers and cookies for analytics and security purposes.

3. Information from Third Parties

Payment confirmation from payment gateways.
Delivery details from logistics and courier partners.
Fraud prevention data from verification services.

We do not intentionally collect sensitive personal data (e.g., health information, religion, political views). If such data is inadvertently provided, it will be treated with heightened safeguards and deleted where appropriate.

6. Purpose of Data Collection

Blaze collects and processes personal data for the following purposes:

Order Fulfillment: To process, confirm, ship, and deliver purchases made through the Website.
Customer Support: To respond to inquiries, complaints, and requests.
Account Management: To enable you to register, log in, and manage your account.
Payment Processing: To facilitate secure transactions through authorized third-party payment processors.
Marketing & Promotions: To send newsletters, promotional offers, and updates, where you have consented.
Fraud Prevention & Security: To detect unauthorized activity, prevent fraud, and ensure the safety of transactions.
Legal Compliance: To meet obligations under Qatari law, such as record retention, regulatory requests, and consumer protection.

Personal data will not be processed in a manner incompatible with these purposes, unless required by law or with your explicit consent.

7. Legal Grounds for Processing

In compliance with Qatar PDPL and international standards, Blaze processes personal data under the following legal grounds:

Contractual Necessity: Processing is necessary to perform a contract with you, such as delivering your order.
Legal Obligation: Processing required by law, such as retaining financial records for tax compliance.
Consent: Processing based on your freely given consent, such as subscribing to marketing emails. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Legitimate Interests: Processing for Blaze’s legitimate interests, such as improving our Website, analyzing sales, and protecting against fraudulent activity, provided such interests do not override your fundamental rights.

8. Use of Cookies & Tracking Technologies

The Website uses cookies, pixels, and other tracking technologies to provide essential functionality, enhance user experience, and analyze usage trends. By continuing to use the Website, you consent to the placement and use of cookies on your device, unless you choose to disable them via your browser settings. Please note that certain features of the Website may not function properly if cookies are disabled.

Types of Cookies Used

Strictly Necessary Cookies – These cookies are essential for the operation of the Website and enable functions such as shopping cart management, secure login, and transaction processing. Without them, the Website cannot function properly.
Performance & Analytics Cookies – These cookies collect anonymous information about how visitors interact with the Website, such as pages visited, time spent, and error messages. This helps us improve performance and user experience.
Functional Cookies – These cookies remember your preferences, such as language, region, or saved login details, to provide a more personalized browsing experience.
Marketing & Advertising Cookies – These cookies track browsing behavior across websites in order to deliver more relevant advertisements and promotional content, both on our Website and third-party platforms.

Third-Party Cookies

Some cookies are placed by third-party service providers that support Website functionality or advertising. Examples include:

Analytics tools (such as Google Analytics) for measuring traffic and usage patterns.
Social media plugins that allow you to share content.
Advertising partners that deliver targeted campaigns.

These third parties may collect information about your online activity over time and across different websites. Such data processing is subject to their own privacy policies.

Managing Cookies

Most web browsers allow you to control cookies through settings, including blocking certain types or deleting existing cookies. Instructions vary by browser, but common options include:

Accepting all cookies.
Rejecting all cookies.
Notifying you when a cookie is being set.

Please note that if you disable or reject certain cookies, parts of the Website may become inaccessible or may not function as intended.

Retention of Cookie Data

Cookies are retained for varying durations depending on their type and purpose:

Session cookies are temporary and expire once you close your browser.
Persistent cookies remain on your device until they expire or are manually deleted.

Blaze ensures that cookie data is retained no longer than necessary to fulfill the purposes outlined in this Policy.

9. Payment Data Security

Blaze does not store or retain full payment card details on its servers. All online payments are processed securely through third-party payment gateways that comply with internationally recognized security standards, including PCI DSS (Payment Card Industry Data Security Standard).

All transactions processed through Visa, Mastercard, and PayPal are also subject to the terms and privacy policies of those providers, in addition to this Policy.

We receive only limited transaction information from such providers (e.g., payment confirmation, transaction ID). Customers are responsible for ensuring that the payment information provided is accurate and authorized.

Blaze disclaims liability for the security practices of third-party payment processors, which are governed by their own terms and privacy policies.

10. Sharing & Disclosure of Personal Data

Blaze may share personal data with third parties only where necessary, lawful, and consistent with this Policy. Such sharing includes, but is not limited to:

Shipping & Logistics Providers – to deliver products to you.
Payment Processors – to authorize and complete transactions.
IT Service Providers – including hosting, data storage, and website maintenance partners.
Professional Advisors – including auditors, accountants, and legal advisors, where necessary for compliance.
Regulatory & Government Authorities – where disclosure is required by law, court order, or official request.

All third parties engaged by Blaze are contractually bound to handle personal data securely and only for the specified purposes.

11. International Data Transfers

As Blaze serves customers across the GCC and worldwide, personal data may be transferred outside the State of Qatar. Such transfers may include storage on cloud servers or processing by service providers located abroad.

Where international transfers occur, Blaze ensures that adequate safeguards are in place, including:

Contractual agreements with service providers requiring compliance with Qatari data protection principles.
Use of providers certified under recognized frameworks (where applicable, e.g., EU/US data transfer standards).
Ensuring transfers are limited to what is necessary for providing services.

Where data is transferred outside Qatar, we ensure compliance with Qatar PDPL through contractual safeguards or other lawful mechanisms.

By using the Website and placing international orders, you acknowledge and consent that your personal data may be transferred outside Qatar, subject to the safeguards described in this Policy.

12. Data Retention & Storage

Blaze retains personal data only as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required by law. Retention periods include:

Order Records & Invoices – retained for at least 10 years in accordance with Qatari commercial law and tax obligations.
Customer Account Data – retained until account closure or inactivity for a defined period.
Marketing Data – retained until you unsubscribe or withdraw consent.
Legal & Compliance Records – retained for as long as necessary to resolve disputes or comply with legal obligations.

Once retention periods expire, personal data is securely deleted, anonymized, or archived in accordance with industry best practices.

13. Data Security Measures

Blaze employs appropriate technical, organizational, and administrative safeguards to protect personal data against unauthorized access, disclosure, alteration, or destruction. Such measures include:

SSL/TLS encryption for all Website transactions.
Restricted access to personal data on a need-to-know basis.
Secure servers and firewalls.
Regular security audits and monitoring.

Despite these safeguards, no system can be guaranteed 100% secure. Customers acknowledge that data transmission over the internet carries inherent risks, and Blaze cannot be held liable for breaches outside its reasonable control.

14. Customer Rights under Qatar Law

Under the Qatar Personal Data Privacy Law (PDPL), Customers have the following rights:

Right of Access – to obtain confirmation of whether personal data is being processed and to access such data.
Right of Rectification – to request correction of inaccurate or incomplete data.
Right of Erasure – to request deletion of personal data, subject to legal or contractual retention obligations.
Right to Withdraw Consent – to revoke consent for processing where consent is the basis of processing (e.g., marketing communications).
Right to Object – to object to processing based on Blaze’s legitimate interests, where applicable.

Requests to exercise these rights may be made by contacting Blaze at the email address provided in Section 24. Blaze will respond in accordance with Qatari law, subject to verification of identity and applicable exemptions.

15. Additional Rights for International Users

Where required by law, such as under the European Union General Data Protection Regulation (GDPR) or the UK GDPR, Customers residing in the European Economic Area (EEA) or the United Kingdom may have additional rights, including:

Right to Data Portability – to receive personal data in a structured, commonly used, and machine-readable format.
Right to Restrict Processing – to request suspension of processing under certain circumstances.
Right to Object to Automated Decision-Making – to challenge decisions made solely by automated means that significantly affect you.

These rights are subject to legal limitations and may not apply where Blaze’s processing is governed exclusively by Qatari law.

16. Children’s Privacy

Blaze does not knowingly collect or process personal data from individuals under the age of 18. The Website and its services are not directed to minors.

If we become aware that personal data of a minor has been collected without verifiable parental consent, such data will be deleted promptly. Parents or guardians who believe that their child’s data has been improperly collected should contact us using the details in Section 24.

17. Marketing & Communication Preferences

With your consent, Blaze may use your personal data to send promotional emails, newsletters, product updates, and special offers.

You may opt out of marketing communications at any time by:

Clicking the “unsubscribe” link in any email we send; or
Contacting us directly at the address provided in Section 24.

Opting out of marketing communications will not affect transactional communications related to orders, delivery, or customer service.

18. Third-Party Links & Services

The Website may contain links to third-party websites, applications, or services. Such third parties operate independently and are not controlled by Blaze.

This Privacy Policy does not apply to third-party websites or services. Customers are encouraged to review the privacy policies of those third parties before providing any personal data. Blaze disclaims responsibility for the practices of such third parties.

19. Changes to the Privacy Policy

Blaze reserves the right to amend, update, or revise this Privacy Policy at any time, at its sole discretion. Updates will be effective upon posting to the Website, with the “Last Updated” date revised accordingly.

Customers are encouraged to review this Policy periodically to remain informed of how personal data is handled. Continued use of the Website following updates constitutes acceptance of the revised Policy.

20. Website Platform & Security Disclaimer

The Website is developed, hosted, and maintained using third-party website-building and e-commerce platform providers (“Platform Providers”). Blaze relies on the security infrastructure, encryption protocols, and operational safeguards implemented by these Platform Providers to operate the Website.

While Blaze takes reasonable steps to ensure the Website operates securely and reliably, Blaze does not own, control, or operate the underlying technical infrastructure of the Website. Accordingly, Blaze shall not be held liable for any loss, damage, error, delay, or unauthorized access arising from:

Technical failures, outages, bugs, or malfunctions of the Website or Platform Provider’s systems.
Errors in order processing, duplicate orders, missed orders, or incorrect charges resulting from technical issues beyond Blaze’s reasonable control.
Unauthorized access, hacking, security breaches, or cyberattacks affecting the Website, Platform Provider, or any third-party payment processor, which result in the unauthorized access to, or use of, a Customer’s personal or payment data.

In the event of any such incident, Blaze will make reasonable efforts to assist affected Customers and cooperate with relevant authorities and service providers; however, responsibility for resolving such incidents may lie with the Platform Provider or other third parties involved, in accordance with their own terms and security policies.

By using the Website, creating an account, or placing an order, you acknowledge and agree to the terms of this section and accept that Blaze cannot be held liable for matters arising from the security, performance, or operation of third-party platforms beyond its reasonable control.

21. Your Responsibilities as a Customer

You are responsible for ensuring that the personal data you provide to Blaze is accurate, complete, and up to date.

You must also:

Keep account credentials confidential and secure.
Notify Blaze promptly of any unauthorized use of your account.
Ensure that any personal data provided to Blaze on behalf of a third party (e.g., shipping recipient) has been lawfully obtained and shared with proper consent.

22. Complaints & Dispute Resolution

If you believe that Blaze has violated your privacy rights under this Policy or applicable law, you may first contact us using the details provided in Section 24.

If you are not satisfied with our response, you may lodge a complaint with the Compliance and Data Protection Department of the Ministry of Communications and Information Technology in Qatar, which is the supervisory authority for data protection matters under the Qatar PDPL.

International customers may also have the right to file complaints with their local data protection authorities.

23. Governing Law

This Privacy Policy, and any dispute arising out of or relating to the processing of personal data, shall be governed by and construed in accordance with the laws of the State of Qatar.

Any disputes shall be subject to the exclusive jurisdiction of the competent courts of Doha, Qatar, without prejudice to rights that may be available to international customers under mandatory laws.

24. Contact Information

For all questions, requests, or complaints concerning this Privacy Policy or the handling of your personal data, you may contact: