Privacy Policy

Last Updated: 13 August 2026

OLFA INCENSE (CARMEN LEBBOS & CO) S.C.S ("OLFA", "we", "us", or "our") respects your privacy and is committed to handling personal information responsibly and transparently.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit www.olfaincense.com, create an account, place an order, communicate with us, participate in our programs, or otherwise interact with OLFA.

This Privacy Policy applies to customers and website visitors in Lebanon and, where applicable, customers accessing or purchasing from OLFA internationally.

WHO IS RESPONSIBLE FOR YOUR INFORMATION?

The business responsible for the personal information described in this Privacy Policy is:

OLFA INCENSE (CARMEN LEBBOS & CO) S.C.S
Bkenaya, Hôpital Psychiatrique de la Croix Street
Mount Lebanon, Lebanon

Email: olfaincense@gmail.com
Website: www.olfaincense.com

You may contact us at the email address above regarding questions about this Privacy Policy or requests concerning your personal information.

INFORMATION WE COLLECT

The information we collect depends on how you interact with OLFA.

Information You Provide to Us

We may collect information such as:

Your name
Email address
Telephone number
Billing address
Shipping address
Country or region
Account and login information
Order and purchase history
Products purchased or viewed
Returns, refunds, and customer-service information
Wishlist information
Refill Program information, including refill codes and redemption history
Reviews and ratings
Photographs or other content you voluntarily submit
Survey responses
Birthday, where you voluntarily choose to provide it
Marketing and communication preferences
Email newsletter subscriptions
WhatsApp marketing preferences
Correspondence and communications with OLFA
Any other information you voluntarily provide through forms or features on our website

Please do not provide sensitive personal information through reviews, surveys, messages, photographs, or other free-text areas unless it is genuinely necessary.

Information Collected Automatically

When you visit our website, certain information may be collected automatically, including:

IP address
Browser type
Device type
Operating system
Approximate location derived from technical information
Pages viewed
Products viewed
Referring website or source
Date and time of visits
Website interactions
Shopping-cart activity
Cookie identifiers
Analytics information
Advertising and campaign interaction information

We may collect this information using cookies, pixels, tags, analytics technologies and similar tools.

ACCOUNT INFORMATION

You may be able to create an OLFA customer account.

When you create or use an account, we may process your contact information, login credentials, saved addresses, preferences, order history, wishlist and other account-related information.

You are responsible for maintaining the confidentiality of your account credentials and for notifying us if you believe your account has been accessed without authorization.

PAYMENT INFORMATION

OLFA uses CyberSource Unified Checkout to facilitate payment processing.

OLFA does not store your full payment-card number or card verification value (CVV).

Payment information required to complete your transaction is processed through CyberSource and the relevant banks, payment networks, financial institutions or payment-service providers involved in the transaction.

OLFA may receive and retain information relating to a transaction, such as:

Transaction reference or identification number
Payment status
Payment method or card type
Limited or masked card information where provided by the payment processor
Fraud or security indicators
Refund or chargeback information

The handling of information directly by CyberSource and other financial institutions may also be subject to their own privacy policies and security practices.

HOW WE USE YOUR INFORMATION

We may use personal information for the following purposes:

Orders and Customer Service

To:

Process and fulfil orders
Process payments
Arrange delivery
Provide order confirmations and updates
Manage returns, exchanges and refunds
Respond to questions or customer-service requests
Maintain customer accounts
Provide requested products and services

OLFA Programs and Website Features

To:

Operate the OLFA Refill Program
Validate and redeem refill codes
Manage wishlists
Display or manage customer reviews
Conduct surveys
Manage customer-submitted content
Personalize website features and customer preferences

Website Operation and Improvement

To:

Operate and maintain our website
Understand how visitors use our website
Analyze website performance
Improve products, services and website functionality
Diagnose technical problems
Develop new features and services

Security and Fraud Prevention

To:

Protect customer accounts
Prevent fraudulent transactions
Detect suspicious or unauthorized activity
Protect OLFA, our customers and our service providers
Enforce our terms and policies
Investigate security incidents

Legal and Administrative Purposes

To:

Maintain business and accounting records
Meet tax and financial requirements
Respond to lawful requests from authorities
Establish, exercise or defend legal claims
Resolve disputes
Comply with applicable laws and regulatory requirements

EMAIL AND WHATSAPP MARKETING

Where you choose to receive marketing communications, OLFA may use your contact information to send you information about:

New products
Collections
Product launches
OLFA news
Refill Program information
Events
Offers and promotions
Editorial content
Other OLFA communications

Marketing communications may be sent by email or WhatsApp, depending on the communication preferences you have provided.

Where consent is required by applicable law, we will send such marketing communications only after obtaining the appropriate consent.

You may withdraw your marketing consent or ask us to stop sending marketing communications at any time.

For email communications, you may use the unsubscribe option provided in the communication where available.

For WhatsApp communications, you may request that we stop sending marketing messages through WhatsApp or contact us at olfaincense@gmail.com.

Withdrawing from marketing communications will not prevent us from sending non-marketing messages necessary to complete an order, manage your account, respond to you, or provide information about a transaction.

Our email marketing provider has not yet been selected. When an email marketing provider is introduced, this Privacy Policy will be updated where necessary.

COOKIES, ANALYTICS AND ONLINE TRACKING

Our website uses cookies and similar technologies.

These technologies may include:

Necessary Technologies

Technologies required for functions such as:

Shopping carts
Checkout
Security
Account login
Fraud prevention
Website operation
Remembering essential website settings

Analytics Technologies

We use Google Analytics to help us understand how visitors interact with our website and to measure website performance.

Advertising Technologies

We may use advertising and measurement technologies provided by platforms including:

Google
Meta
TikTok

These technologies may help us:

Measure advertising performance
Understand whether an advertisement resulted in a website visit or purchase
Understand audience interaction
Improve advertising campaigns
Present advertising that may be more relevant to users, where permitted

Where applicable law requires consent before non-essential cookies or similar tracking technologies are used, we will request that consent before activating the relevant technologies.

Where available, you may use our cookie-management controls to accept, reject or manage non-essential cookies.

[TO BE UPDATED: The final cookie and tracking list will be confirmed once OLFA's developer provides the complete list of cookies, pixels, tags and third-party trackers installed on the website.]

LEGAL BASES FOR PROCESSING

Where applicable data-protection law requires us to identify a legal basis for processing personal information, our processing may rely on one or more of the following:

Performance of a Contract

Where processing is necessary to:

Accept or fulfil your order
Process your payment
Deliver products
Manage your account
Provide requested services

Legal Obligations

Where processing is required to comply with applicable legal, tax, accounting, regulatory or other obligations.

Legitimate Interests

Where permitted by applicable law, we may process information where reasonably necessary for legitimate business interests such as:

Operating and improving our business
Customer service
Website security
Fraud prevention
Protecting our legal rights
Understanding business performance

We will consider your rights and interests when relying on legitimate interests.

Consent

We may rely on your consent for activities such as:

Certain marketing communications
Non-essential cookies
Advertising technologies
Certain analytics technologies
Other activities where applicable law requires consent

Where processing is based on consent, you may withdraw that consent, subject to applicable law.

Withdrawal does not affect processing lawfully carried out before consent was withdrawn.

WHEN WE SHARE PERSONAL INFORMATION

We may disclose personal information where reasonably necessary to operate OLFA and provide our services.

Recipients may include:

Payment Providers

Including CyberSource, banks, payment networks and other financial institutions involved in processing or securing transactions.

Delivery and Logistics Providers

We may provide couriers and delivery companies with information such as your:

Name
Telephone number
Shipping address
Delivery instructions
Information reasonably necessary to complete delivery

Technology and Hosting Providers

Companies that provide website hosting, infrastructure, databases, cloud services, security, technical support and related services.

Analytics and Advertising Providers

Including providers such as:

Google
Meta
TikTok

where the relevant services are enabled and subject to applicable consent requirements.

Communication Providers

Providers that assist with email, messaging, customer communication or marketing services.

Professional Advisers

Including accountants, auditors, insurers, lawyers and consultants where reasonably necessary.

Authorities and Legal Recipients

We may disclose information when required by applicable law, regulation, court order or lawful government request, or where reasonably necessary to establish, exercise or defend legal rights.

Business Transactions

If OLFA undergoes a merger, acquisition, restructuring, financing, sale of assets or similar business transaction, relevant information may be transferred as part of that transaction subject to applicable law and appropriate safeguards.

We do not sell personal information to data brokers for monetary payment.

Certain advertising and analytics technologies may involve transmitting identifiers, device information or website activity to advertising and analytics providers as explained in this Privacy Policy and through our cookie controls.

INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION

OLFA is established in Lebanon and serves customers internationally.

Some of our service providers may operate, store information, or process information in countries other than Lebanon or the country in which you live.

As a result, personal information may be transferred internationally.

Where applicable data-protection law requires safeguards for an international transfer, OLFA will take appropriate steps required under that law. Depending on the jurisdiction, these may include:

Using approved contractual protections
Transferring to jurisdictions recognized as providing an adequate level of protection
Obtaining consent where legally required
Using another transfer mechanism permitted by applicable law

[TO BE UPDATED: OLFA's primary hosting provider and the country/region in which website and customer databases are hosted will be added once confirmed by the developer.]

HOW LONG WE KEEP INFORMATION

We do not intend to keep personal information indefinitely merely because it has been collected.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy and to comply with applicable legal, accounting, tax, security and dispute-resolution requirements.

The appropriate retention period may depend on the type of information and why it was collected.

For example:

Order and transaction records may be retained for the period necessary to fulfil the transaction and satisfy accounting, tax, legal and dispute-resolution obligations.
Customer account information may generally be retained while an account remains active and for a reasonable period afterward where required for legitimate or legal purposes.
Marketing information may be retained until you unsubscribe, withdraw consent or we otherwise determine that it is no longer necessary.
Refill Program information may be retained for as long as necessary to operate the program, validate redemptions, prevent misuse and maintain relevant transaction records.
Customer-service communications may be retained for a reasonable period to manage enquiries, disputes and service history.
Reviews and voluntarily submitted content may remain available while relevant to the purpose for which they were submitted, unless removal is requested and we are legally permitted and reasonably able to remove them.
Security and fraud-prevention information may be retained where reasonably necessary to protect OLFA and our customers.

When information is no longer required, we may delete, anonymize or securely dispose of it, subject to applicable law.

REVIEWS, PHOTOGRAPHS AND OTHER USER CONTENT

If you voluntarily submit a review, photograph, testimonial, survey response or other content, the information you submit may be processed for the purpose for which it was provided.

If a feature clearly allows content to be published publicly, information submitted through that feature may be visible to other website visitors.

Please avoid including unnecessary personal information in public reviews or other public content.

You should not submit personal information, photographs or other content concerning another person unless you have the appropriate authority or permission to do so.

Any separate rights granted to OLFA to reproduce or use customer-created content for advertising, marketing or other commercial purposes may be governed by separate terms or permissions and are not automatically created solely by this Privacy Policy.

DATA SECURITY

OLFA takes reasonable administrative, organizational and technical measures intended to protect personal information against:

Unauthorized access
Accidental loss
Improper use
Unauthorized disclosure
Alteration
Destruction

However, no website, internet transmission or electronic storage system can be guaranteed to be completely secure.

You are also responsible for using reasonable precautions to protect your account information and passwords.

If we become aware of a personal-data breach, we will investigate the incident and take the actions required by applicable law, which may include notifying affected individuals or relevant authorities where legally required.

YOUR PRIVACY RIGHTS

Depending on where you live and which law applies to the processing of your personal information, you may have rights that include the right to:

Request information about how your personal information is processed
Request access to personal information we hold about you
Request correction of inaccurate or incomplete information
Request deletion of personal information
Request restriction of certain processing
Object to certain processing
Withdraw consent where processing is based on consent
Request portability of certain information where applicable
Opt out of direct marketing
Lodge a complaint with an appropriate regulatory or data-protection authority

These rights are subject to applicable legal requirements, exceptions and limitations.

For example, a deletion request may not require us to delete information that we are legally required to retain or that is reasonably necessary to establish, exercise or defend legal claims.

To exercise a privacy right, contact:

olfaincense@gmail.com

Please describe your request clearly.

We may need to request reasonable information to verify your identity before fulfilling certain requests in order to protect personal information from unauthorized disclosure or deletion.

EEA AND EUROPEAN UNION CUSTOMERS

Where European data-protection law applies to our processing, individuals may have the rights provided under applicable European data-protection legislation, including rights relating to access, correction, deletion, restriction, objection, portability and withdrawal of consent.

Where required, OLFA will use an appropriate lawful basis for processing and appropriate safeguards for international transfers.

Where consent is legally required for non-essential cookies, advertising technologies or direct marketing, those activities will be subject to the appropriate consent mechanism.

If OLFA's activities in the European Union reach a level at which applicable law requires the appointment of a representative in the European Union, the relevant representative details will be added to this Privacy Policy.

GCC CUSTOMERS

Customers located in Gulf Cooperation Council countries may have additional rights under the data-protection laws applicable in their country.

Where those laws apply to OLFA, we will process personal information in accordance with the applicable requirements, including requirements concerning, where relevant:

Transparency
Lawful processing
Consent
Direct marketing
Data-security safeguards
Individual privacy rights
International transfers
Data retention
Data-breach management

Where local law provides rights or protections beyond those described elsewhere in this Privacy Policy, the applicable local legal requirements will apply.

AUTOMATED FRAUD AND PAYMENT CHECKS

Payment providers, banks and fraud-prevention services may use automated tools to assess transactions for fraud, security or payment risk.

These checks may use information relating to a transaction, device, payment method, account or previous activity.

Where applicable law provides rights concerning automated decision-making, those rights will apply.

You may contact us at olfaincense@gmail.com if you have questions concerning OLFA's use of automated processing.

CHILDREN'S PRIVACY

OLFA's website and services are not specifically directed toward children.

We do not knowingly seek to collect personal information from children where applicable law requires parental or guardian authorization for that processing.

If you believe a child has provided personal information to OLFA in circumstances where parental or guardian authorization was required, please contact us at olfaincense@gmail.com so that we can review the matter and take appropriate action.

THIRD-PARTY WEBSITES AND SERVICES

Our website may contain links to third-party websites, social-media platforms or services.

OLFA is not responsible for the privacy practices of websites or services operated independently by third parties.

We recommend reviewing the privacy information provided by those third parties before providing personal information to them.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

Changes to our website
New products or services
New technologies or service providers
Changes to our data-processing practices
Changes in applicable legal or regulatory requirements

When we make changes, we will update the Last Updated date at the beginning of this Privacy Policy.

Where required by applicable law, we may provide additional notice or request renewed consent for material changes.

If you have questions about this Privacy Policy, wish to exercise a privacy right, or have concerns about how your personal information is handled, please contact: