Privacy Policy
Ayman Lahmouni respects the privacy and discretion of every client.
This Privacy Policy explains how Ayman Lahmouni Online Atelier collects, uses, stores, shares, and protects personal data when you:
- Visit aymanlahmouni.com;
- Create a customer account;
- Purchase or return a product;
- Request a consultation or fitting;
- Commission a made-to-order, made-to-measure, bridal, or haute couture creation;
- Subscribe to our communications;
- Contact our client-care team; or
- Otherwise interact with us online or in person.
This Policy should be read together with our Terms and Conditions, Cookie Policy, Shipping Policy, and Return and Exchange Policy.
1. Who We Are
For the purposes of applicable data-protection law, the controller responsible for your personal data is:
Legal entity: A&L Atelier LLC
Trading name: A&L Atelier By Ayman Lahmouni
Tax Registration No.: 508-479-266
Email: info@aymanlahmouni.com
Telephone/WhatsApp: +201110222119
References to “Ayman Lahmouni,” “the Atelier,” “we,” “us,” or “our” mean the entity identified above.
2. Laws Applicable to This Policy
We process personal data in accordance with applicable data-protection and consumer-protection requirements, including:
- Egyptian Personal Data Protection Law No. 151 of 2020 and its Executive Regulations;
- Egyptian Consumer Protection Law No. 181 of 2018 and its Executive Regulations;
- Applicable Egyptian electronic transactions, taxation, accounting, cybersecurity, and commercial laws; and
- The European Union General Data Protection Regulation (“GDPR”), where it applies to the relevant processing activity.
Other mandatory privacy laws may apply depending on your location and the nature of our interaction with you.
3. Personal Data We Collect
The personal data we collect depends on how you interact with the Atelier.
3.1 Identity and Contact Information
This may include:
- Full name;
- Title;
- Email address;
- Telephone and WhatsApp number;
- Billing address;
- Shipping address;
- Country or region;
- Preferred language; and
- Customer account details.
3.2 Order and Transaction Information
This may include:
- Products purchased or reserved;
- Order number and date;
- Selected size, color, and product specifications;
- Purchase price, currency, discounts, and taxes;
- Payment status and transaction reference;
- Shipping and delivery details;
- Returns, exchanges, repairs, and alterations;
- Customer-service history; and
- Invoices and other transaction records.
We generally do not receive or store complete payment-card details. Card and payment information is processed by authorized banks, payment gateways, and payment-service providers.
3.3 Atelier, Sizing and Fitting Information
When you request alterations, made-to-measure services, bridalwear, or a haute couture commission, we may collect:
- Garment size;
- Body measurements;
- Fit and alteration notes;
- Design and silhouette preferences;
- Selected fabrics, colors, linings, and embellishments;
- Occasion or event date;
- Appointment and fitting history;
- Reference images voluntarily provided by you;
- Fitting photographs, where necessary and appropriately authorized;
- Footwear or undergarment specifications relevant to fitting; and
- Other information needed to create or adjust your garment.
Body measurements and fitting information are used only as reasonably necessary to provide the requested Atelier service, maintain accurate production records, and resolve relevant quality or fitting concerns.
Please do not provide health information or other sensitive personal data unless it is genuinely necessary for garment construction, comfort, accessibility, or fitting. Where such information is necessary, we will apply the protections and obtain any authorization required by law.
3.4 Communications
We may retain information you provide through:
- Email;
- Telephone;
- WhatsApp or other messaging services;
- Website contact forms;
- Live chat;
- Social media messages;
- Appointment requests;
- Client-care communications; and
- Reviews, surveys, or feedback.
Telephone or video conversations will not be recorded without appropriate notice and authorization where required.
3.5 Website and Device Information
When you use the Website, we may collect:
- IP address;
- Device type;
- Browser type and version;
- Operating system;
- Language and time-zone settings;
- Approximate geographic region;
- Session and device identifiers;
- Pages visited;
- Products viewed or searched;
- Referral source;
- Shopping-bag and checkout activity;
- Website errors and performance information; and
- Cookie and consent preferences.
For further details, please review our Cookie Policy.
3.6 Marketing and Preference Information
Where applicable, we may collect:
- Newsletter subscription status;
- Marketing consent;
- Preferred communication channel;
- Product and collection interests;
- Event or campaign responses;
- Advertising interactions; and
- Records of opt-outs and withdrawn consent.
3.7 Security and Fraud-Prevention Information
We may process information required to authenticate transactions, protect accounts, prevent fraud, investigate suspicious activity, and maintain Website security.
This may include IP addresses, device information, payment verification results, transaction patterns, security logs, and information supplied by payment or fraud-prevention providers.
3.8 Information From Other People
If you purchase a product for another person or provide another person’s delivery details, measurements, or contact information, you confirm that you are authorized to provide that information and that the person has been informed about this Policy where required.
4. How We Collect Personal Data
We may collect personal data:
Directly From You
For example, when you create an account, submit an order, provide measurements, attend a fitting, contact us, subscribe to marketing, or request a return.
Automatically
For example, through cookies, server logs, security technologies, and Website analytics, subject to your cookie choices and applicable law.
From Service Providers
For example, payment providers may confirm whether payment was authorized, and couriers may provide delivery-status information.
From Public or Social Platforms
If you interact with us through a social media platform, we may receive information made available by that platform in accordance with your settings and the platform’s policies.
From Authorized Representatives
We may receive information from a stylist, family member, personal assistant, wedding planner, or other representative authorized to act for you.
5. Why We Use Personal Data
We may use personal data for the following purposes:
5.1 Providing Products and Atelier Services
To:
- Process, confirm, and fulfil orders;
- Create customer accounts;
- Reserve products or materials;
- Arrange consultations and fittings;
- Create made-to-order and made-to-measure garments;
- Perform alterations, repairs, and after-sales services;
- Communicate production and fitting updates;
- Arrange delivery, collection, returns, and exchanges; and
- Provide client care.
5.2 Processing Payments
To:
- Submit transactions to payment providers;
- Confirm payment or installment status;
- Issue invoices and refunds;
- Reconcile financial records; and
- Prevent fraudulent or unauthorized transactions.
5.3 Managing Our Relationship With You
To:
- Respond to inquiries and complaints;
- Maintain an appropriate history of orders and fittings;
- Provide information about your account or purchases;
- Manage appointments;
- Enforce our contractual rights; and
- Improve the quality and continuity of our service.
5.4 Improving the Website and Client Experience
To:
- Analyze Website performance;
- Understand how visitors navigate the Website;
- Identify errors and technical problems;
- Improve product presentation, navigation, and checkout;
- Develop collections and services; and
- Measure general customer satisfaction.
Non-essential analytics cookies are used subject to your choices and applicable consent requirements.
5.5 Marketing and Atelier Communications
With your consent where required, we may send:
- Collection launches;
- Private previews;
- Bridal and couture appointments;
- Event invitations;
- Editorial content;
- Special offers; and
- Other Atelier news.
You may withdraw marketing consent at any time without affecting your orders or access to essential services.
Operational messages relating to an order, fitting, security issue, policy change, or service request are not marketing communications and may still be sent where necessary.
5.6 Security and Legal Compliance
To:
- Protect the Website, our clients, and our business;
- Authenticate accounts and transactions;
- Detect, investigate, and prevent fraud;
- Maintain business, accounting, and tax records;
- Respond to lawful requests from regulators or authorities;
- Establish, exercise, or defend legal claims; and
- Comply with applicable laws and court orders.
6. Our Legal Bases for Processing
Depending on the circumstances and applicable law, we process personal data on one or more of the following grounds:
| Purpose | Principal legal basis |
|---|---|
| Processing and delivering an order | Performance of a contract |
| Consultations, measurements and fittings | Contractual necessity or steps requested before entering a contract |
| Payment, refunds and fraud prevention | Contractual necessity, legal obligation, and legitimate interests |
| Invoices, taxation and accounting | Legal obligation |
| Customer service and complaints | Contractual necessity, legal obligation, and legitimate interests |
| Website security and business protection | Legitimate interests and legal obligation |
| Optional analytics | Consent where required |
| Personalized advertising | Consent |
| Promotional emails or messages | Consent or another legally permitted basis |
| Retaining evidence of transactions | Legal obligation and legitimate interests |
| Establishing or defending legal claims | Legitimate interests and applicable legal provisions |
| Processing sensitive data, where necessary | Explicit consent or another basis expressly permitted by law |
Where we rely on legitimate interests, we consider the impact of processing on your rights and use the information only where our interests are not overridden by your rights and freedoms.
Where we rely on consent, you may withdraw that consent at any time.
7. Couture Measurements and Fitting Photographs
Measurements, fitting records, and private reference images are handled with particular discretion.
We may retain them where reasonably necessary to:
- Produce or alter your garment;
- Maintain consistency between fittings;
- Confirm approved specifications;
- Address fit or workmanship questions;
- Support future orders requested by you; or
- Establish or defend relevant legal claims.
Fitting or client photographs taken for production records will not be published, used in advertising, posted on social media, or shared with the press merely because they were collected for a fitting.
Any marketing or editorial use of an identifiable client image requires a separate and appropriate authorization. Refusing marketing use will not affect the provision of Atelier services.
You may ask us to delete fitting photographs or measurements when they are no longer legally or operationally required, subject to applicable retention obligations and legal exceptions.
8. Who We Share Personal Data With
We do not sell or rent personal data.
We may share only the information reasonably necessary with:
8.1 Payment and Finance Providers
Banks, card processors, payment gateways, fraud-prevention providers, and Buy Now, Pay Later providers involved in processing or financing a transaction.
These providers may act as independent controllers for certain activities and may apply their own privacy policies.
8.2 Delivery and Logistics Providers
Couriers, freight services, customs agents, and delivery partners that need contact and delivery information to complete a shipment.
8.3 Technology and Website Providers
Providers supporting:
- Website hosting;
- WooCommerce or e-commerce functionality;
- Cloud storage;
- Cybersecurity;
- Email delivery;
- Customer relationship management;
- Appointment management;
- Analytics;
- Cookie consent;
- Website maintenance; and
- Technical support.
8.4 Professional Advisers
Lawyers, accountants, auditors, insurers, and other professional advisers where reasonably necessary.
8.5 Atelier Production Partners
Specialist embroiderers, craftspeople, workshops, alteration providers, or material suppliers may receive limited order specifications where necessary to complete a creation.
They do not need to receive your full customer profile unless this is genuinely necessary for the service.
8.6 Advertising and Social Media Providers
Where you have provided any consent required by law, limited Website and campaign data may be shared with analytics, advertising, and social media platforms.
8.7 Governmental and Regulatory Authorities
We may disclose information when required by law, court order, tax obligation, customs procedure, consumer-protection requirement, or a lawful governmental request.
8.8 Business Reorganization
If the business is reorganized, merged, financed, sold, or transferred, relevant information may be disclosed to professional advisers and prospective or actual parties, subject to confidentiality and applicable law.
Service providers acting on our behalf are expected to process personal data according to our instructions, apply appropriate security, and use the information only for authorized purposes.
9. International Data Transfers
Some technology, payment, analytics, communication, or delivery providers may process personal data outside Egypt or outside your country of residence.
Where personal data is transferred internationally, we will implement the measures required by applicable law. These may include:
- Using legally recognized transfer mechanisms;
- Entering into appropriate contractual safeguards;
- Assessing the protection provided in the destination;
- Obtaining regulatory authorization where required;
- Obtaining explicit consent where this is the appropriate legal basis; and
- Limiting the data transferred to what is necessary.
Where the GDPR applies, relevant measures may include adequacy decisions, Standard Contractual Clauses, or another lawful transfer mechanism.
10. How Long We Retain Personal Data
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, accounting, tax, consumer-protection, and evidentiary requirements.
Indicative retention periods include:
| Data category | Indicative retention approach |
|---|---|
| Customer accounts | While the account remains active and for a reasonable period afterward |
| Orders, invoices and payment records | For the legally required tax and accounting period |
| Delivery and return records | For the transaction period and applicable claims period |
| Customer-service communications | For as long as necessary to resolve the matter and manage possible claims |
| Measurements and alteration records | For the order and, where justified, to support future services or legal claims |
| Fitting photographs | Only for as long as necessary for production, quality control, or an authorized continuing purpose |
| Marketing subscriptions | Until consent is withdrawn or the information is no longer needed |
| Marketing opt-out records | As necessary to respect and demonstrate your opt-out |
| Security and fraud-prevention logs | For a limited period proportionate to the security purpose |
| Cookie and consent records | For the period stated in our Cookie Policy or consent-management tool |
The final retention schedule will be determined according to applicable Egyptian legal requirements and the systems actually used by the Atelier.
When personal data is no longer required, we will securely delete or anonymize it, unless continued retention is required or permitted by law.
11. Marketing Preferences
We will send direct marketing only where we have an appropriate legal basis.
Marketing communications will identify the sender and provide a clear method to unsubscribe or withdraw consent.
You may opt out by:
- Selecting the unsubscribe link in a marketing email;
- Adjusting available account preferences;
- Following the opt-out instructions in the communication; or
- Contacting us at info@aymanlahmouni.com.
We may retain limited information recording your opt-out so that we can respect your preference.
Withdrawing marketing consent will not affect transactional communications concerning purchases, appointments, deliveries, returns, security, or customer-service requests.
12. Cookies and Online Advertising
We use cookies and similar technologies for Website operation, shopping functionality, security, preferences, analytics, and—where permitted—advertising.
Strictly necessary cookies may operate without optional consent where required to provide the Website or a service requested by you.
Analytics, personalization, advertising, and other non-essential cookies will be managed according to applicable consent requirements.
You may review or change your selections through the “Cookie Settings” or “Manage Cookies” link on the Website.
For more information, please read our Cookie Policy.
13. Automated Processing
We may use limited automated tools to support fraud detection, payment verification, Website security, product recommendations, or campaign measurement.
We do not intend to make decisions producing legal or similarly significant effects solely through automated processing unless this is permitted by applicable law and appropriate safeguards are provided.
Where applicable, you may request information about significant automated decision-making, ask for human review, express your point of view, or contest a decision.
14. Your Privacy Rights
Subject to applicable law, verification requirements, and legal exceptions, you may have the right to:
- Be informed about the collection and use of your personal data;
- Request access to personal data held about you;
- Receive a copy of eligible personal data;
- Request correction or completion of inaccurate information;
- Request deletion of personal data;
- Request restriction or suspension of certain processing;
- Object to processing based on legitimate interests;
- Object to direct marketing;
- Withdraw consent at any time;
- Request data portability where applicable;
- Challenge certain automated decisions;
- Submit a complaint to the competent data-protection authority; and
- Seek compensation or another remedy where provided by law.
Withdrawing consent does not affect processing lawfully carried out before withdrawal.
Some rights may be limited where continued processing is required for an order, legal obligation, fraud prevention, tax record, legal claim, or other lawful purpose.
15. Exercising Your Rights
To submit a privacy request, please contact:
Email: info@aymanlahmouni.com
Subject line: Privacy Request
Please explain the nature of your request and identify the relevant account, order, or interaction.
To protect your information, we may request reasonable proof of identity or authority before acting on a request. We will use verification information only for security and request-handling purposes.
Authorized representatives may submit requests where permitted, provided that appropriate proof of authorization is supplied.
We will respond within the period required by applicable law. If additional time is lawfully required because of the request’s complexity or volume, we will inform you where required.
16. Security
We use reasonable and appropriate administrative, technical, and physical measures designed to protect personal data against:
- Unauthorized access;
- Accidental or unlawful loss;
- Misuse;
- Unauthorized disclosure;
- Alteration;
- Destruction; and
- Other unlawful processing.
These measures may include access controls, authentication procedures, encryption where appropriate, secure payment processing, system monitoring, backups, confidentiality obligations, staff access limitations, and provider due diligence.
No online system or transmission method can be guaranteed to be completely secure. You are responsible for protecting your account password and notifying us if you suspect unauthorized access.
17. Personal Data Breaches
If a personal data breach occurs, we will investigate it, take reasonable steps to contain and remedy it, and notify the competent authority and affected individuals where required by applicable law.
Notifications may describe the nature of the incident, potential consequences, measures taken, and recommended protective steps.
18. Children’s Privacy
The Website and our online store are not directed toward children who lack legal capacity to enter into a purchase contract.
We do not knowingly collect personal data from children without the authorization required by applicable law.
A parent, guardian, or legally authorized representative should arrange purchases, fittings, or made-to-measure services for a minor.
If you believe that personal data relating to a child has been collected without appropriate authorization, please contact us so that we can investigate and take the legally required action.
19. Third-Party Websites and Platforms
The Website may contain links to social media platforms, payment providers, installment providers, embedded content, or other third-party services.
Those organizations may collect and process personal data under their own privacy policies. We encourage you to review their policies before providing information or using their services.
We are not responsible for the independent privacy practices of third parties, except where applicable law makes us responsible for their processing.
20. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in:
- Applicable law;
- Our products or Atelier services;
- Website functionality;
- Technology and security practices;
- Service providers; or
- The ways in which we process personal data.
The revised Policy will be published on this page with an updated effective date.
Where a change materially affects the way we rely on your consent or use your personal data, we will provide additional notice or request renewed consent where required.
21. Complaints
We encourage you to contact us first so that we can investigate and attempt to resolve any privacy concern.
You may also submit a complaint to the Egyptian Personal Data Protection Center or another competent supervisory authority where you have the legal right to do so.
If the GDPR applies to your personal data, you may have the right to complain to the data-protection authority in the European Economic Area country in which you reside, work, or believe an infringement occurred.
22. Contact Us
For questions about this Privacy Policy, our privacy practices, or your personal data, please contact:
Ayman Lahmouni Online Atelier
Legal entity: A&L Atelier LLC
Trading name: A&L Atelier By Ayman Lahmouni
Tax Registration No.: 508-479-266
Email: info@aymanlahmouni.com
Telephone/WhatsApp: +201110222119
Use of the Website does not by itself constitute consent to every form of personal-data processing. Where consent is required—such as for optional cookies, direct marketing, sensitive data, or the promotional use of client photographs—we will request it separately and provide a method for withdrawal.
