Last updated: 2026-09-16
CLOI ("we", "us") runs the online shop at cloistore.com and the CLOI mobile app. This notice explains what we collect, why, and what you can ask us to do about it.
CLOI Salhia - Damascus - Syria Email: info@cloistore.com Phone: 00963957777163
When you create an account. Your mobile number, which is how you sign in. Your name, and an email address if you give one. A password, stored only as a one-way hash — we cannot read it.
When you shop. What you put in your basket, what you order, the prices you paid, your delivery address or the branch you chose to collect from, and the status of each order.
If you choose to tell us. Gender, date of birth, sizes and fit, and the categories you prefer. Every one of these is optional and exists only to make what we show you more relevant. You can leave them blank and shop normally.
Payment information. If you pay by card, the payment is handled by our payment provider on their own pages. We never see or store your card number. We keep the amount, the currency, whether the payment succeeded, and the provider's reference for it.
How you use the site. Pages you view, products you look at and for how long, what you search for, what you tap, how far you scroll, and where you arrived from. This is tied to a random identifier for your browser or app session, and to your account if you are signed in. We use it to understand what is and is not working and to improve the shop.
Your device, if you allow notifications. A push token from Apple or Google so we can tell you when your order status changes. You can withdraw this at any time in your device settings.
When you contact us. Messages you send through the contact form, and reviews you post.
- To take, process, deliver and support your orders. - To run your account, including signing you in by one-time code. - To tell you about your order by email, SMS or push notification. - To operate gift cards and loyalty points where you use them. - To remind you about a basket you left behind, if you have an account. You can ask us to stop at any time. - To understand how the shop is used, and to improve it. - To prevent fraud and abuse, and to keep the service secure. - To meet our legal and accounting obligations.
We do not sell your personal data. We share it only with parties who need it to do a job for us, and only as much as that job needs:
- Delivery. The courier or branch handling your order receives your name, address and phone number. - Payment. Our card payment provider receives what it needs to take the payment. We receive back only its result. - Messaging. The providers that send our email, SMS and push notifications receive the address, number or token being sent to. - Our own in-store system. Orders are recorded in the same back-office system our branches use, so stock, invoicing and after-sales are handled in one place. - When the law requires it, or to establish or defend a legal claim.
We keep backups of the shop's database and product images so that a failure does not lose your order history. Backups are encrypted where they contain credentials and are copied to a private cloud storage account controlled by us and not shared with anyone else.
We use a small number of cookies and browser storage entries, and no advertising trackers:
You can clear these in your browser at any time. Clearing them signs you out and empties your basket.
Order records are kept for as long as accounting and tax rules require. Account details are kept while your account is open. Usage measurements are kept in a form tied to a random identifier rather than your name. If you ask us to delete your account, we delete what we are not required to keep, and tell you plainly what remains and why.
Traffic to the site is encrypted. Passwords are hashed and never stored in a readable form. Credentials held in our own settings are encrypted at rest. Access to customer data is limited to staff who need it for their work. No system is perfectly secure, and we will not pretend otherwise — but if a breach affects you, we will tell you.
You can ask us to:
Write to info@cloistore.com and we will respond. We may need to confirm your identity first — usually by a code to the mobile number on the account.
The shop is not intended for children under 16, and we do not knowingly create accounts for them. If you believe a child has given us personal data, write to info@cloistore.com and we will remove it.
If we change this notice we will update the date at the top and, where the change is significant, tell you directly.
Questions about this notice, or about your data:
CLOI Salhia - Damascus - Syria Email: info@cloistore.com Phone: 00963957777163
