Who we are
Formulas is a cold-press juice business operating in the State of Kuwait,Hawalli Governorate. In this policy, "we" and "our" mean Formulas as the data controller for the personal data described below.
For any privacy question or to exercise a right, write to talal@formulasme.com. We reply within 30 days, as required under the CITRA Data Privacy Protection Regulation.
The data we collect
Account and order data: your full name, phone number, email address, delivery addresses, order history, delivery preferences, and any notes you leave for a driver.
Payment data: the last four digits and card brand for a completed card payment, and MyFatoorah's transaction reference. Full card numbers, CVV and PIN never reach our servers — the payment is handled inside MyFatoorah, our licensed Kuwaiti payment processor.
Communications: the messages you exchange with us on WhatsApp, email or the site's contact form, and the delivery notifications we send you.
Technical data: your IP address, device type, browser, and pages viewed on our site. We use this to keep the site secure and to understand which pages need work.
We do not knowingly collect data from anyone under 21 and we do not use race, religion, health or biometric data for any purpose.
Why we use it, and the legal basis
To prepare, deliver and take payment for your order, and to handle refunds and support — necessary to perform the contract we have with you.
To send delivery, payment and account notifications by email, SMS or WhatsApp — necessary to perform the contract; you cannot opt out of transactional messages while you have an active order or subscription.
To send marketing about new juices, offers and cleanses — only with your prior consent, given at signup or from your account. Every marketing message carries a one-click unsubscribe.
To meet legal duties under the Kuwaiti Consumer Protection Law, the Electronic Transactions Law, and tax and accounting rules — including keeping invoices for the period required by law.
To detect and prevent fraud, abuse and misuse of the service — a legitimate interest of ours that we balance against your privacy.
Cookies and similar technologies
Strictly necessary cookies keep you signed in and your cart alive between pages; they cannot be switched off because the site does not work without them.
We do not use advertising cookies that track you across other websites, and we do not run analytics that fingerprint you. You can clear or block cookies at any time from your browser settings.
Who we share it with
MyFatoorah, for card payment processing under a data-processing agreement.
Our delivery drivers and dispatch team, for the addresses and phone numbers needed to complete a delivery.
Email and messaging providers (for order confirmations and WhatsApp notifications), and cloud hosting and database providers (for running the site itself), each under a written contract that binds them to CITRA-equivalent protection.
Government and regulatory bodies, where we are legally required to disclose — for example a court order, a tax audit, or a request from CITRA or the Ministry of Commerce.
We never sell your personal data to anyone, and we do not share it with advertisers.
Cross-border transfers
Some of our processors (hosting, email delivery, analytics) operate from outside Kuwait. Where personal data leaves the country we rely on the safeguards permitted by the CITRA Regulation — including data-processing agreements with equivalent-protection clauses — and we limit what is transferred to what is strictly needed for the service.
How long we keep it
Order and invoice records: at least 5 years from the date of the transaction, as required by Kuwaiti commercial and tax law.
Account data: while your account is active, and up to 24 months after your last order, then anonymised for statistics.
Support conversations: 24 months, so we can pick up where we left off if you write again.
Marketing consent and preference history: until you unsubscribe, plus a suppression record so we do not accidentally email you again.
How we protect it
All traffic to and from the site is served over HTTPS. Passwords are hashed, payment data is tokenised through MyFatoorah, and access to the customer database is restricted to trained staff on a need-to-know basis. We review our security controls regularly and will notify you and CITRA of any personal-data breach that is likely to affect your rights, without undue delay.
Your rights
Under the CITRA Data Privacy Protection Regulation you have the right to:
Access the personal data we hold about you and receive a copy of it.
Correct data that is inaccurate or out of date.
Delete data we no longer have a lawful reason to keep.
Withdraw consent for marketing at any time, without losing access to the service.
Object to processing based on our legitimate interests, and ask for a human review of any decision made about you.
Complain to CITRA if you believe your rights are not being respected.
To exercise any of these rights, email talal@formulasme.com with enough detail for us to identify you. We reply within 30 days.
Changes to this policy
We may update this policy — for example if the law changes or we add a new service. The current version is always at formulasme.com/privacy with the date it was last updated shown at the top. If a change materially affects how we handle your data, we will tell you before it takes effect.