Policy
Privacy policy
Effective and last updated: August 2, 2026
Who controls your information
Sufra Stories is operated by Mubarak Mohamed Almahmeed, Bahrain Commercial Registration No. 870802569. The data controller’s address is Building 2953, Road 3444, Block 934, Riffa, Northern Governorate, Postcode 934, Bahrain. Privacy requests may be sent to hello@sufrastories.com.
Information we receive
We may receive your name, email address, country, order and product details, payment status, download activity, support messages, and limited technical or fraud-prevention data such as IP address, browser information, and timestamps. Payment credentials are entered with PayPal and are not stored by this storefront.
How information is used
We use information to fulfil our contract by processing orders, delivering purchased files, and providing support; for our legitimate interests in securing the service, preventing fraud, maintaining records, and improving the store; and to comply with accounting, tax, consumer-protection, and other legal duties. Where consent is required, such as for optional marketing, you may withdraw it at any time.
Service providers and international processing
We use OpenAI Sites and its infrastructure providers to host the storefront, Payhip to provide checkout, order records, receipts, and digital delivery, and PayPal to process payment. Email and security providers may process information when needed to deliver support or protect the service. These providers act under their own privacy terms or our instructions and may process data outside Bahrain or your home country. Where required, transfers are protected by applicable contractual or legal safeguards.
We do not sell personal information. We do not share it for cross-context behavioural advertising.
Retention and your choices
Order and transaction records are generally kept for the period reasonably needed for accounting, tax, fraud prevention, disputes, and legal obligations. Support messages are kept while the request is active and for a reasonable recordkeeping period afterward. Optional marketing records are kept until you unsubscribe or they are no longer needed. We then delete or anonymize information unless the law requires longer retention.
Depending on where you live, you may have rights to be informed, access a copy, correct inaccurate data, request deletion, restrict or object to processing, withdraw consent, or request portability. You may also complain to the Bahrain Personal Data Protection Authority or the relevant authority in your country. We may need to verify your identity before acting on a request.
Cookies and analytics
The storefront may use strictly necessary technology for security and basic site operation. Payhip and PayPal may use their own cookies when you visit checkout to provide payment, fraud prevention, and account features.
If you choose “Allow analytics,” we use Google Analytics to understand page use and product-checkout clicks. Analytics is not loaded before that choice, payment details are never included, and we do not use advertising trackers. You can change or withdraw your choice at any time through “Analytics settings” in the footer.
Security and children
We use reasonable administrative and technical safeguards and limit access to information, but no internet service can guarantee absolute security. The store is intended for adults and is not directed to children under 16. Please do not submit a child’s personal information without the authority and consent required by law.
Changes to this policy
We may update this policy when providers, features, or legal requirements change. The latest version will remain on this page with its updated date. Material changes will be highlighted when reasonably possible.
Contact
Send privacy questions or rights requests to hello@sufrastories.com. Please use the subject “Privacy request” and tell us the email address connected with your order, if applicable.