PRIVACY POLICY Version dated March 23, 2026
1. Purpose of the policy
The purpose of this privacy policy (hereinafter the “Policy”) is to inform any concerned natural person (hereinafter the “Data Subject”) about the conditions under which their personal data are collected and processed by TAHIRA LLC in the course of its activities.
This Policy applies in particular to the processing of personal data carried out via the website www.tahira.fr (hereinafter the “Site”), as well as during exchanges with customer service, orders, deliveries, returns, requests sent by email, via a contact form, by online chat, or by any other communication channel used by TAHIRA.
TAHIRA undertakes to process personal data in accordance with the applicable regulations, and in particular Regulation (EU) 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”), where applicable.
2. Identity of the data controller
The data controller is:
TAHIRA LLC Company registered in Cairo Registered office: No. 4, Building No. 8, Block 7 – Dubai Tower, Al-Waha District, Nasr City, Cairo, Egypt
For any questions regarding this Policy or the exercise of your rights, you can contact TAHIRA at the following address: sav@tahira.fr
Representative within the European Union
TAHIRA's representative within the European Union is:
Diena Jerome 7 rue Denis Papin, Trappes, France
Any request regarding your personal data can be sent to the following email address: sav@tahira.fr
3. Categories of processed data
In the course of its activities, TAHIRA may collect and process the following categories of personal data:
- identification data: surname, first name, title, order number;
- contact details: postal address, email address, telephone number;
- order data: products ordered, amount, purchase history, order status, delivery, return, exchange, or refund information;
- billing data;
- customer service and after-sales service data: content of exchanges, requests, complaints, documents or supporting evidence provided;
- commercial and marketing relationship data: newsletter subscription, preferences, interactions with communications;
- technical and navigation data: IP address, connection logs, browsing data, information relating to the use of the Site and, where applicable, data from cookies and other trackers;
- more generally, any data voluntarily communicated by the Data Subject in the context of their exchanges with TAHIRA.
TAHIRA ensures that it only collects data strictly necessary for the purposes pursued.
4. Mandatory or optional nature of the collection
Certain data are essential for processing orders, delivering products, managing customer relations, handling requests, and complying with applicable legal and regulatory obligations.
Failure to provide this data may prevent TAHIRA from processing the Data Subject's order, providing the requested services, or responding to their request.
Other data are optional, particularly when collected for commercial prospecting purposes or when the Data Subject chooses to transmit additional information.
5. Purposes and legal bases of processing
TAHIRA processes personal data for the following purposes:
5.1. Order management and contract performance
Personal data is processed to enable the creation and management of the customer account, the registration and execution of orders, the preparation and shipment of products, order tracking, management of returns, exchanges, refunds, and complaints, as well as after-sales service.
These processing activities are necessary for the performance of the contract concluded between the Data Subject and TAHIRA.
5.2. Payment management and fraud prevention
Data may be processed to ensure payment management, fraud prevention, detection of payment incidents, and transaction security.
These processing activities are based on the performance of the contract, compliance with TAHIRA's legal obligations, and, depending on the case, its legitimate interest in protecting its business.
5.3. Customer relationship management
Data is processed to respond to information requests, ensure the follow-up of exchanges with customer service, and handle requests made by email, via the Site, online chat, social networks, or any other communication channel.
These processing activities are based on the performance of pre-contractual or contractual measures, or on TAHIRA's legitimate interest in ensuring effective customer relationship management.
5.4. Commercial prospecting and sending newsletters
Data may be used to send commercial information, newsletters, promotional offers, or information relating to new brand arrivals.
Where required by regulation, these processing activities are based on the Data Subject's consent. In other cases authorized by applicable regulation, they may be based on TAHIRA's legitimate interest in promoting its products and developing its business.
The Data Subject may object to receiving these communications at any time or withdraw their consent when it constitutes the legal basis for processing.
5.5. Site improvement, audience measurement, and security
Technical and navigation data may be processed to ensure the proper functioning of the Site, improve its performance, measure audience, prevent abuse, and guarantee its security.
These processing activities are based on TAHIRA's legitimate interest and, when required, on the Data Subject's consent for cookies and trackers that are not strictly necessary.
5.6. Compliance with legal obligations and defense of rights
Data may be retained and used to comply with applicable legal, accounting, tax, and regulatory obligations, as well as for the establishment, exercise, or defense of TAHIRA's legal claims.
These processing activities are based on compliance with TAHIRA's legal obligations or its legitimate interest in ensuring its defense.
6. Recipients of the data
Personal data is accessible, within the limits of their respective duties and according to the need to know:
- to authorized personnel within TAHIRA;
- to technical service providers involved in hosting the Site, its maintenance, email sending, customer relationship management, audience analysis, or payment;
- to logistics, warehousing, order preparation, and delivery providers;
- to advisors, administrative or judicial authorities, when required by law or when necessary for the defense of TAHIRA's rights.
TAHIRA ensures that its subcontractors and authorized partners provide appropriate guarantees regarding the confidentiality and security of personal data.
7. Data transfers outside the European Economic Area
No personal data is transferred outside the EU.
Personal data is, in principle, hosted and processed within the European Economic Area.
In the event that certain TAHIRA service providers are located outside the European Economic Area, any data transfers would be governed in accordance with applicable regulations, in particular through an adequacy decision by the European Commission or appropriate safeguards such as standard contractual clauses, when required.
8. Data retention period
TAHIRA retains personal data for a period not exceeding that necessary for the purposes for which they are collected, subject to legal retention obligations and evidentiary requirements.
In this respect:
- data relating to orders, deliveries, returns, exchanges, and refunds are kept for the duration necessary for the management of the contractual relationship, then archived for the duration necessary to comply with legal obligations or defend TAHIRA's rights;
- billing data and accounting documents are kept for the applicable legal period;
- data used for commercial prospecting purposes are kept until the withdrawal of consent, unsubscribing, or for a period not exceeding three years from the last contact from the Data Subject;
- data related to requests for the exercise of rights are kept for the time necessary to process the request and then, if applicable, archived for evidentiary purposes.
At the end of the applicable periods, the data are deleted or anonymized, unless a legal obligation requires longer retention.
9. Rights of Data Subjects
In accordance with applicable regulations, the Data Subject has, subject to the conditions and limits provided by law, the following rights:
- a right of access to their personal data;
- a right to rectify their data if they are inaccurate or incomplete;
- a right to erasure of their data;
- a right to limitation of processing;
- a right to the portability of their data where this right is applicable;
- a right to object to the processing of their data, in particular for commercial prospecting purposes;
- a right to withdraw their consent at any time when processing is based on it;
- the right to lodge a complaint with a competent supervisory authority.
These rights can be exercised by sending a request to the following address: sav@tahira.fr
The request can also be sent by postal mail to TAHIRA's representative within the European Union at the following address:
Diena Jerome 7 rue Denis Papin, Trappes, France
For security reasons and to avoid any fraudulent request, TAHIRA may request proof of identity when strictly necessary to verify the identity of the requester.
The Data Subject also has the right to lodge a complaint with the competent supervisory authority, and in particular with the CNIL when in France.
10. Data security
TAHIRA implements appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of personal data, and in particular to prevent it from being altered, damaged, disclosed to unauthorized persons, or accessed by unauthorized third parties.
11. Cookies and trackers
The Site may use cookies and other trackers.
When they are not strictly necessary for the operation of the Site, these cookies and trackers are only deposited in compliance with applicable regulations and, when required, after obtaining the consent of the Data Subject.
Additional information regarding the use of cookies may be provided in a separate cookie policy or directly on the Site via the dedicated information banner.
12. Modification of the policy
TAHIRA reserves the right to modify this Policy at any time to take into account any legal, regulatory, jurisprudential, technical, or organizational changes.
