Privacy Policy for Decoration One

• Effective Date:1^st of September 2025
  Last Updated:1^st of September 2025

1. INTRODUCTION

Design One (“Design One“, “we“, “our“, or “us“) operates an online platform that enables customers to browse and purchase furniture and home décor products. This Privacy Policy outlines how we collect, use, store, share, and protect your personal data in accordance with the applicable laws of the Hashemite Kingdom of Jordan, including the Jordanian Personal Data Protection Law (PDPL). If you do not agree with or cannot comply with the terms of this policy or the applicable law, you must immediately cease using our services. You may return once you are able to comply.

This policy applies to your use of our Decoration One Site, hosted on decoration-one.com which can be accessed via desktop or mobile browser (“Site”). Additionally, this Privacy Policy applies to all purchases or interactions made at Decoration One’s physical store location (“Store”).

2. DEFINITIONS

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:

• “Personal Data” means any information relating to an identified or identifiable natural person. It also applies to identifiable business-related data (such as company registration details, contact information of representatives, and service usage data) submitted by or associated with legal entities (e.g., companies, freelancers, SMEs).
• “Processing” means any operation performed on Personal Data, whether or not by automated means.
• “Data Subject” refers to the individual to whom the Personal Data relates.
• “Controller” means the entity that determines the purposes and means of Processing Personal Data.
• “Processor” means the entity that processes Personal Data on behalf of the Controller.
• “Legitimate Interest” means our company’s need to operate and manage our business effectively, enabling us to deliver high-quality products and services while maintaining a secure experience for our users. We ensure that our use of personal data does not override your rights and freedoms, unless we have your consent or are legally required or permitted to do so

3. LAWFUL BASIS FOR PROCESSING

• We process Personal Data only when we have a lawful basis to do so. This includes the Data Subject’s explicit and informed consent, the necessity of Processing for the performance of a contract, compliance with legal obligations under the PDPL, protection of vital interests, and legitimate interests pursued by us, provided such interests do not override the rights and freedoms of the Data Subject.

4. PERSONAL DATA CATEGORIES PROCESSED AND PURPOSES OF USE

You provide us with Personal Data directly when you contact us for information about our website, inquire about our products, or engage with our services. You may share your contact details by filling in forms or by corresponding with us via postal mail, phone, email, or other communication channels. This includes personal information you may provide when you:

• Request marketing publications;
• Create an account on our Site;
• Inquire about our home décor products or bespoke services;
• Download or engage with our newsletters; or
• Provide feedback or contact us for customer support.

We also collect certain personal information when you visit or interact with our website or communications. This may include technical details about the device you are using, such as your internet protocol (IP) address, login data, browser type, and usage patterns. As you navigate our site, we automatically collect data about your browsing actions and behaviour using technologies such as cookies, web beacons, server logs, and similar tools. For more information, please refer to our section on Cookies.

We also collect, use, and share Aggregated Data, such as statistical or demographic information, for various purposes. Aggregated Data may be derived from your personal data but is not considered personal data under the law, as it does not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific feature on our website. However, if we combine or link Aggregated Data with personal data in a way that could identify you directly or indirectly, we treat the resulting data as personal data and handle it in accordance with this Privacy Policy

We do not collect any special categories of Personal Data (as defined under applicable data protection laws), such as information relating to your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, health, or genetic and biometric data.

The types of Personal Data we may process include: Identity Data, Contact Data, Financial Data, Transaction Data, Device Data, Content Data, Profile Data, Usage Data, Marketing and Communications Data, and Location Data. For more detail on how each category is used, please refer to the section titled “Purpose and Legal Basis for Processing Personal Data.”

5. HOW YOUR PERSONAL DATA IS USED

We will only use your Personal Data when permitted by law. Most commonly, we will process your Personal Data in the following circumstances:

• Where you have provided your Consent prior to the processing.
• Where we need to perform a contract we are about to enter into or have already entered into with you.
• Where it is necessary for our Legitimate Interests (or those of a third party), provided that your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.

We will only send you direct marketing communications by email or text if we have your consent. You have the right to withdraw that consent at any time by contacting us.

The table below explains the different purposes for which we process your personal data and the relevant lawful basis or bases on which we rely for that processing:

6. DATA SHARING

We may share your personal data with selected third parties, including business partners and service providers, for the purpose of delivering our services to you and supporting our efforts to prevent and investigate fraudulent activity. Any third parties acting on our behalf are required to maintain strict confidentiality and handle your data in accordance with the PDPL.

More specifically, we may disclose your personal data:

• If Decoration One undergoes a business transfer, reorganisation, merger, or sale of assets, we may disclose or transfer your personal data to the prospective buyer, seller, or other third party involved in the transaction (including their advisors).
• If we are required to disclose your personal data to comply with a legal or regulatory obligation.
• To protect the rights, property, or safety of Decoration One, our users, or others. This may include sharing information with other companies and organisations for fraud prevention and credit risk reduction, or disclosing data to courts, court-appointed entities, receivers, tribunals, regulatory authorities, or law enforcement in connection with legal proceedings or to establish, exercise, or defend our legal rights.
• To our insurers, where necessary.
• To any other third party as directed by you.

Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers, and affiliates. Please note that these websites and any services accessible through them have their own privacy policies. We do not accept any responsibility or liability for those policies or for any personal data that may be collected through those websites or services, such as contact or location data.

We may share Personal Data with authorized service providers, legal or regulatory authorities, and business partners only when necessary and in accordance with the law. We do not sell or rent Personal Data. Any third party receiving data must provide equivalent protection and comply with applicable legal obligations.

We share data only with third parties who are contractually obligated to maintain confidentiality and comply with data protection laws. These parties include service providers, legal authorities, and business partners as necessary for platform operation and legal compliance.

7. DATA SUBJECT RIGHTS

• Data Subjects have the right to access their Personal Data, request correction or completion of inaccurate or incomplete data, restrict Processing to specific purposes, object to unnecessary or unlawful Processing, request deletion or anonymization of data, transfer their data to another Controller, and be notified of any breach affecting their data. These rights may be exercised without financial or contractual penalty by contacting us at [email protected]

8. PROCESSING WITHOUT CONSENT

• We may process Personal Data without prior consent in specific circumstances, including compliance with legal obligations, protection of public health, prevention or investigation of crimes, performance of tasks in the public interest, or when the data is already publicly available from the Data Subject.

9. DATA RETENTION

• Personal Data is retained only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Once the purpose is fulfilled, data is securely deleted or anonymized unless further retention is legally justified.

10. DATA ACCURACY AND INTEGRITY

• You are responsible for ensuring that any Personal Data you provide is accurate, complete, and current. If you become aware of any inaccuracies, you must inform us immediately so we can update our records before further processing.

11. DATA SECURITY AND CONFIDENTIALITY

We implement appropriate technical, administrative, and organizational measures to protect Personal Data from unauthorized access, alteration, disclosure, or destruction. All data is treated as confidential, and our personnel and service providers are contractually bound to uphold data protection standards.

These measures include:

• Encryption of data in transit and at rest
• Secure hosting environments with industry certifications (e.g., [Insert Certifications])

12. INTERNATIONAL DATA TRANSFERS

If Personal Data is transferred outside the Hashemite Kingdom of Jordan, we ensure that such transfers are conducted in accordance with applicable data protection laws.

We may rely on mechanisms such as Standard Contractual Clause, adequacy decisions, or binding corporate rules to ensure an adequate level of protection.

A list of countries and the safeguards applied to each transfer is available upon request. We remains responsible for ensuring that any third party receiving data provides a level of protection equivalent to that required under applicable law.

13. RIGHT TO ERASURE

• Data Subjects may request deletion or anonymization of their Personal Data if it was processed for a different purpose than originally stated, if consent is withdrawn, if the Processing was unlawful, or if deletion is required by law or contract. We will comply with such requests unless exceptions apply.

14. COOKIES

• A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you.
• Please note that certain information about your computer hardware and software and browsing actions and patterns may be collected by us through Cookies as you navigate through and interact with our Site. This information is used by us for operation of our Site.
• We only use necessary cookies which are essential for the operation of our Site. For example, they enable us to recognize you when you return to our Site, login more easily and keep track of your specified preferences (such as location, language preference and currency). They also let us save your cookie preferences and keep our Site secure. Essential cookies will remain on your device for 14 days from your last visit to our Site.
• 15. USE OF AI ASSISTANT

• Our website features an AI Assistant powered by Tawk.to, which functions as a live chat tool to help you navigate our services and answer your questions. When you use the chat feature, you may be asked to provide personal information such as your name and phone number, particularly in cases where the chat gets disconnected and we need to follow up.
• Please note that your use of the AI Assistant is subject to Tawk.to’s own privacy policy and terms of service, which govern how your data is collected and processed through their platform. We encourage you to review their privacy policy before submitting any personal data via the chat feature.

16. GOVERNING LAW AND JURISDICTION

• This Privacy Policy shall be governed by and construed in accordance with the laws of the Hashemite Kingdom of Jordan. Any disputes arising from or related to this policy shall be subject to the exclusive jurisdiction of the competent courts of Amman (Palace of Justice).

15. CONTACT INFORMATION

• For any questions, concerns, or requests regarding this Privacy Policy or your Personal Data, please contact:

Decoration One Co. Ltd.

Sherket Alola Lel Zeena

GF, 4 Abdulillah Tabbaa Building, Mohammad Jamaan Street, Wadi Saqra 11181, Amman, Jordan

Email: [email protected]

Telephone number: +962795831313