Skip to Content

Legal

Privacy Policy

Last updated: 30 September 2026

Scrub Seven Trading W.L.L. (“Scrub Seven”, “we”, “us”) respects your privacy. This policy explains what personal data we collect when you use www.scrubseven.com, visit our store or contact us, why we collect it, how we protect it and the rights you have. It is written to comply with the State of Qatar’s Law No. (13) of 2016 on the Protection of Personal Data Privacy (the “PDPPL”) and the guidelines issued by the National Cyber Security Agency (NCSA), together with Decree-Law No. (16) of 2010 on Electronic Commerce and Transactions and Law No. (8) of 2008 on Consumer Protection.

1. Who we are (data controller)

Scrub Seven Trading W.L.L.
Building 157, Street 523, Zone 51, Al Gharrafa, Doha, Qatar
Email: team@scrubseven.com · Phone / WhatsApp: +974 3106 2217

We are the “controller” of your personal data under the PDPPL. Questions or requests about your data can be sent to the contact details above; please write “Privacy request” in the subject line.

2. What personal data we collect

  • Identity and contact details – name, email address, phone number, delivery and billing address, and the name of your hospital, clinic or organisation if you order for a team.
  • Order and payment details – the products, sizes and colours you order, order history, delivery instructions, and the payment method you choose. We do not store card numbers: we currently accept cash on delivery and bank transfer, and any card payments we introduce will be processed by a licensed payment provider.
  • Account details – if you create an account: login email, password (stored encrypted), wishlist and saved addresses.
  • Messages – anything you send us through the contact form, B2B quotation form, email or WhatsApp.
  • Technical data – IP address, browser and device type, pages visited, and cookie identifiers (see section 8).

We do not intentionally collect data of a special nature (for example health, religion or ethnic origin). Please do not include such information in messages to us. We do not knowingly collect personal data from children under 18; if you believe a child has provided data to us, contact us and we will delete it.

3. Why we use your data and the legal basis

PurposeLegal basis under the PDPPL
Processing and delivering your order, sending order confirmations and delivery updates, handling returns and exchangesPerformance of a contract with you
Preparing B2B quotations and managing team uniform ordersPerformance of a contract / steps at your request before a contract
Answering your questions by email, phone or WhatsAppYour consent and our legitimate interest in serving customers
Keeping accounting, tax and commercial recordsLegal obligation (Qatar commercial and tax laws)
Preventing fraud and securing our website and systemsLegitimate interest in protecting the business and customers
Sending offers, new arrivals and news by email, SMS or WhatsAppYour consent – you can opt out at any time
Measuring how the website is used, using cookies or analyticsYour consent, given through the cookie banner

We collect only the data needed for these purposes and do not use it for other purposes without telling you first.

4. Direct marketing

We only send marketing messages if you have agreed to receive them, for example by ticking the newsletter box at checkout or subscribing on the website. Every marketing email includes an unsubscribe link, and you can stop WhatsApp or SMS messages by replying “STOP” or contacting us. Withdrawing consent does not affect messages we must send about your orders.

5. Who we share your data with

We share personal data only where necessary and only with parties who protect it:

  • Delivery partners in Qatar – name, phone number and address, so your order can be delivered and cash-on-delivery payments collected.
  • Odoo S.A. – the provider that hosts our website, online store and business software.
  • Email and messaging providers – our email host and, if you contact us on WhatsApp, Meta Platforms, whose own privacy policy applies to that service.
  • Payment providers – if you pay by a method operated by a licensed payment provider, they receive the data needed to process the payment.
  • Professional advisers and authorities – accountants, lawyers and Qatari government or judicial bodies where the law requires it.

We do not sell or rent your personal data to anyone.

6. International transfers

Our website and business systems are hosted by Odoo S.A. on servers that may be located outside Qatar (including in the European Union). Some service providers named above may also process data outside Qatar. Where personal data leaves Qatar we ensure the receiving party provides a level of protection consistent with the PDPPL, through contractual commitments and recognised security standards, and we do not transfer data where doing so would harm your privacy or the interests of the State of Qatar.

7. How long we keep your data

  • Order, invoice and accounting records – for the period required by Qatari commercial and tax law (generally 10 years), then deleted or anonymised.
  • Account data – for as long as your account is active; you can ask us to close it at any time.
  • Enquiries and quotation requests that do not lead to an order – up to 24 months.
  • Marketing consent records – until you withdraw consent, then a record of the withdrawal only.
  • Technical logs and cookies – see the cookie section; server logs are kept for a short period for security.

8. Cookies

Our website uses cookies. Essential cookies keep you signed in, remember your cart and protect the site; they cannot be switched off. Optional cookies (for analytics or marketing) are only set if you accept them in the cookie banner, and you can change your choice at any time from the banner or your browser settings. Blocking essential cookies may stop the online store from working.

9. How we protect your data

We use encrypted connections (HTTPS), password-protected and access-controlled systems, staff confidentiality obligations and regular reviews of who can see customer data. If a personal data breach is likely to cause serious harm to you, we will inform you and the competent department at the NCSA without undue delay, as the PDPPL requires.

10. Your rights

Under the PDPPL you have the right to:

  • know what personal data we hold about you and receive a copy;
  • ask us to correct data that is inaccurate or incomplete;
  • ask us to delete your data, or to stop or restrict processing, where we have no legal reason to keep it;
  • withdraw consent at any time where processing is based on consent;
  • object to direct marketing;
  • be told about any breach affecting your data.

To exercise these rights, email team@scrubseven.com or visit our store. We may ask you to confirm your identity. We will respond as soon as reasonably possible and normally within 30 days. There is no charge for a reasonable request.

If you are not satisfied with our response, you may lodge a complaint with the Competent Department for personal data protection at the National Cyber Security Agency (NCSA), State of Qatar. Consumer complaints about goods, prices or deliveries can also be raised with the Ministry of Commerce and Industry (MOCI) consumer protection department.

11. Third-party links

Our website links to social media platforms and embeds a Google Maps view of our store location. Those services have their own privacy policies and may set cookies when you interact with them.

12. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed, and significant changes will be announced on the website.

See also our Terms & Conditions and Shipping & Returns policy.