Privacy Policy

Privacy Policy — Johar Gold Suite
Leen Gold FZE
Last updated: July 2026

1. Introduction
Johar Gold Suite ("Johar", "we", "us") is a Shopify application operated by Leen Gold FZE. This policy explains what data we access, why, how we protect it, and your rights. It applies to merchants who install Johar and to the customers of those merchant stores.

2. Data we access
When a merchant installs Johar, we access, through Shopify's API and only as needed to provide our features:

  • Store information (shop domain, currency, timezone, settings)
  • Product and order data, to calculate and update gold pricing and to create draft orders
  • Customer name, email, and address, solely to attach draft orders to the correct customer, maintain per-customer wallet balances, and enable store staff to process fixing and withdrawal requests
  • Theme and page data, to provision and display Johar's storefront features

We do not access data beyond what our features require.

3. How we use data
We use the data to: display live gold and silver rates, calculate product pricing, create and manage custom-jewellery and gold-fixing draft orders, maintain customer wallet balances, and let authorised store staff process related requests. We process data solely on the merchant's behalf.

4. How we protect data
Data is encrypted in transit (HTTPS/TLS) and sensitive credentials are encrypted at rest (AES-256-GCM). Access is limited to authorised personnel. Data is stored on secure, access-controlled infrastructure.

5. Data sharing
We do not sell personal data and do not share it with third parties for their own purposes. Data is processed only through the infrastructure providers required to operate the service (hosting and database providers), under confidentiality obligations.

6. Data retention
We retain data only while a merchant uses Johar. When a merchant uninstalls the app, their data is deactivated and deleted in accordance with Shopify's compliance webhooks, including full erasure of shop data following the mandatory retention window. Individual customer data is anonymised or deleted upon a valid erasure request, except where we are legally required to retain financial records.

7. Your rights
Customers may request access to, correction of, or deletion of their personal data by contacting the store they purchased from, who can relay the request to us. We honour Shopify's mandatory data-request, customer-redaction, and shop-redaction processes.

8. Contact
For any privacy question or request, contact Leen Gold FZE at info@leen.gold.