Privacy Policy
This Privacy Policy (the “Policy”) explains how Sacre Group S.A.R.L., trading as Sacre Care (the “Company”, “we”, “us” or “our”) collects, uses, stores and shares personal data when you access or use sacrecare.com (the “Website”), create an account, place an order, contact us or otherwise interact with us.
The Company is responsible for the processing of personal data collected through the Website to the extent it determines the purposes and means of such processing.
We process personal data in accordance with applicable Lebanese law, including Law No. 81/2018 on Electronic Transactions and Personal Data.
By providing personal data through the Website, you acknowledge the processing described in this Policy. Where your express consent is legally required, we will request such consent separately.
1. Personal data we collect
Depending on how you use the Website, we may collect the following categories of personal data:
Identification and contact information, including your name, telephone number, email address, delivery address and billing information.
Account information, including your username, account details, preferences and account activity.
Order and transaction information, including Products ordered, order history, amounts, payment status, delivery information, cancellations, returns and refunds.
Payment-related information, including information necessary to process or verify payment. Full payment-card information may be processed directly by the relevant payment service provider rather than stored by the Company.
Communications, including messages, complaints, inquiries, customer-service requests and other correspondence with us.
Technical and usage information, including IP address, browser or device information, Website activity, log information and cookies or similar technologies, where applicable.
We will only collect personal data that is reasonably relevant to the purposes for which it is processed.
2. How we collect personal data
We may collect personal data:
- (a) directly from you when you create an account, place an order, make a payment, request delivery, contact us or otherwise use the Website;
- (b) automatically through the Website and applicable cookies or similar technologies;
- (c) from payment providers, delivery providers and other service providers involved in processing your transaction;
- (d) from your direct communications with us by email, WhatsApp or social media (messages sent through these platforms are also processed by the platform provider, such as Meta, under its own terms);
- (e) from other lawful sources where necessary for fraud prevention, verification or compliance with a legal obligation.
Where personal data is not collected directly from you, the Company will comply with any applicable notification requirements under Lebanese law.
3. Purposes of processing
We may process personal data for the following purposes:
- (a) creating and managing Customer accounts;
- (b) receiving, processing and fulfilling orders;
- (c) processing and verifying payments;
- (d) arranging shipping and delivery;
- (e) processing cancellations, returns, exchanges and refunds;
- (f) communicating with Customers concerning their accounts and orders;
- (g) responding to questions, complaints and customer-service requests;
- (h) detecting and preventing fraud, misuse and unauthorized transactions;
- (i) maintaining the security and proper operation of the Website;
- (j) establishing, exercising or defending legal rights;
- (k) maintaining appropriate business and transaction records;
- (l) improving the Website and its services; and
- (m) sending marketing communications where permitted by applicable law.
Personal data shall not be processed for purposes incompatible with the purposes for which it was collected except as permitted by applicable law.
4. Information required to process an order
Certain personal data is necessary to create an account, process an order, arrange delivery or comply with applicable law.
Where such information is required, failure to provide it may prevent the Company from:
- (a) creating or maintaining an account;
- (b) accepting or processing an order;
- (c) processing payment;
- (d) completing delivery; or
- (e) providing the requested service.
The Company will distinguish, where appropriate, between information that is required and information that is optional.
5. Sharing of personal data
The Company does not sell Customer personal data.
Personal data may be disclosed, only where reasonably necessary, to the following recipients:
- (a) payment processors, banks and payment service providers;
- (b) couriers and delivery providers;
- (c) Website hosting, IT, security and technical service providers;
- (d) professional advisers, including lawyers, auditors and accountants, where reasonably necessary;
- (e) insurers where relevant and lawful;
- (f) governmental, judicial, regulatory, public-health or law-enforcement authorities where disclosure is required or permitted by law; and
- (g) another entity in connection with a lawful merger, acquisition, restructuring or transfer of the Company's business, subject to applicable data-protection requirements.
Only information reasonably necessary for the relevant purpose will be disclosed.
6. Service providers
The Company may engage third parties to provide services necessary for the operation of the Website and fulfilment of orders.
Such providers may process personal data only to the extent necessary to perform the relevant service and subject to applicable legal and contractual requirements.
The Company will take reasonable measures when selecting service providers that process personal data on its behalf.
7. Payment information
Payments may be processed through third-party banks, payment gateways or payment service providers.
Where payment information is submitted directly to a payment provider, the provider may process that information under its own privacy and security terms.
The Company will only retain payment information to the extent necessary for transaction records, verification, refunds, fraud prevention, accounting and compliance with applicable law.
The Company's Payment Policy contains additional information concerning payment processing.
8. Delivery information
The Company may provide its delivery provider with information reasonably necessary to complete delivery, including the Customer's name, delivery address, telephone number and relevant delivery instructions.
9. Marketing communications
The Company may send promotional or marketing communications where permitted by applicable law and, where required, after obtaining the Customer's consent.
The Customer may withdraw consent to marketing communications or unsubscribe using the method provided in the relevant communication or by contacting the Company.
Withdrawal from marketing communications will not prevent the Company from sending necessary transactional communications relating to orders, payments, deliveries, recalls, safety notices, returns or account security.
10. Cookies and similar technologies
The Website may use cookies and similar technologies to operate properly, remember Customer preferences, maintain security, understand Website usage and, where applicable, support analytics or advertising.
Cookies may include:
- (a) strictly necessary cookies, required for Website operation, security, checkout or account functionality;
- (b) functional cookies, used to remember preferences;
- (c) analytics cookies, used to understand how the Website is used; and
- (d) advertising or marketing cookies, where applicable.
Where consent is required by applicable law for a particular cookie or tracking technology, such technology shall be used subject to the required consent.
Customers may also control certain cookies through their browser settings, although disabling necessary cookies may affect Website functionality.
11. Data security
The Company shall take reasonable measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, misuse or destruction.
Access to personal data shall be restricted to persons who reasonably require such access for their duties.
However, no electronic system or internet transmission can be guaranteed to be completely secure. The Company therefore cannot guarantee absolute security, but this does not limit any legal obligation of the Company concerning the protection of personal data.
12. Data retention
The Company shall retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for any additional period required by applicable legal, accounting, tax, regulatory or record-keeping obligations.
Different categories of information may therefore be retained for different periods.
When personal data is no longer required, it shall be deleted, destroyed, anonymized or otherwise handled in accordance with applicable law.
13. Your personal data rights
Subject to applicable Lebanese law, you may request access to and a copy of your personal data, correction or updating of inaccurate or incomplete information, and deletion where legally applicable. You may also object to processing where permitted by law.
To make a request, contact us using the details at the end of this Policy. We may ask for information reasonably necessary to verify your identity and will handle your request within the applicable legal deadlines.
14. Withdrawal of consent
Where processing is based on the Customer's consent, the Customer may withdraw that consent for future processing, subject to applicable law.
Withdrawal of consent does not affect processing lawfully carried out before the withdrawal.
Where particular information is necessary to fulfil an order, comply with a legal obligation or establish or defend legal rights, withdrawal of consent may not require the Company to delete the information immediately or prevent processing based on another lawful ground.
15. Accuracy of personal data
The Customer is responsible for providing accurate and current personal information.
The Customer should update account information or notify the Company where information relevant to an order or delivery changes.
The Company may take reasonable steps to verify or correct information where necessary.
16. Data relating to other persons
Where a Customer provides personal data concerning another person, including an order delivered to another recipient, the Customer shall ensure that he/she is lawfully authorized to provide that information.
Where necessary, the Company may request appropriate confirmation or documentation before processing such information.
17. Children and minors
The Website is intended for persons aged 18 or over. The Company does not knowingly collect personal data from minors without the involvement of a parent or legal guardian.
Where personal data concerning a minor is required in connection with a lawful purchase, such data shall be processed only to the extent reasonably necessary and in accordance with applicable law.
Where appropriate, the Company may require information or authorization from a parent or legal guardian.
18. International data transfers
Certain Website, hosting, cloud, payment, communications or technical service providers may process or store data outside Lebanon.
Where personal data is transferred or made accessible outside Lebanon, the Company shall take the measures required under applicable Lebanese law.
19. Legal and regulatory disclosures
The Company may retain, use or disclose personal data where reasonably necessary to:
- (a) comply with applicable law or a lawful order of a competent authority;
- (b) investigate fraud or unlawful activity;
- (c) protect the rights, safety or property of the Company, Customers or others;
- (d) establish, exercise or defend a legal claim; or
- (e) cooperate with competent judicial, administrative or regulatory authorities.
Only information reasonably relevant to the applicable purpose shall be disclosed.
20. Changes to this privacy policy
The Company may amend this Policy from time to time to reflect changes in applicable law, Website functionality, technology, service providers or business operations.
The updated Policy shall be published on the Website together with its effective date.
Where a material change requires additional notice or consent under applicable law, the Company shall take the required measures.
21. Applicable law
This Privacy Policy shall be governed by the laws of the Republic of Lebanon, including applicable provisions of Law No. 81/2018 on Electronic Transactions and Personal Data.
Nothing in this Policy shall exclude or restrict any right relating to personal data that cannot lawfully be excluded or restricted.
22. Contact information
For questions concerning this Privacy Policy or requests relating to personal data, please contact us on the following:
Email: info@sacrecare.com
