Privacy Policy

To process your order, we collect two separate sets of information:

• About you (the sender): full name, country of residence, phone/WhatsApp number, email address, and — if you create an account — a password (stored securely, never in plain text) and order history.
• About the recipient in Iran: full name, exact delivery address, and phone number, provided by you so we can complete delivery.
• Payment information: the public cryptocurrency wallet address you send payment from, and the transaction hash on the relevant blockchain. We never ask for or store private keys, seed phrases, or banking passwords.
• Technical data: basic, non-identifying analytics (pages visited, device type, approximate location by country) collected automatically via Google Analytics, described further under Cookies below.

We use your information solely to: process and deliver your order, confirm your crypto payment, contact you or the recipient if there is a delivery issue, provide customer support, honor our money-back guarantee, prevent fraud, and — only with your separate consent — send you updates about new products or promotions. We do not use your data to build advertising profiles or sell it to data brokers.

Your information is never sold. It is shared only with the minimum parties required to fulfill your order:

• The courier or local supplier in Iran actually handling preparation and delivery of your specific order (recipient's name, address, and phone only).
• Our database and infrastructure provider (Supabase), which securely stores order and account data on our behalf.
• Google Analytics, for anonymized site-usage statistics.
• Law enforcement or regulators, only if we are legally compelled to by a valid, binding order — not on request alone.

As stated in our Terms & Guarantees page, no invoice, price tag, or personal information is ever printed on the outside of a physical package.

All traffic to and from Soughat Shop is encrypted over HTTPS. Your account data and order records are stored in a Supabase-managed database protected by row-level security rules, meaning even our own systems can only access the specific data each part of the site actually needs. Passwords are hashed and never stored or visible in readable form, including to our own team.

We use Google Analytics (GA4) to understand, in aggregate, how visitors use the site — which pages are popular, which devices are used, and roughly which country visitors come from. This does not identify you personally. Google Analytics sets its own cookies in your browser; you can block or delete these at any time through your browser settings, or by using a browser extension such as Google's own Analytics Opt-out Add-on, without affecting your ability to place an order.

Order records are kept for as long as needed to honor our money-back guarantee, resolve any support issue, and meet our own accounting and legal obligations. If you delete your account, we remove your personal profile data; anonymized order records (with personal identifiers removed) may be retained for accounting purposes only.

You can, at any time:

• Ask us what personal data we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete your account and personal data, subject to the accounting retention noted above.
• Withdraw consent for marketing messages at any time.

To exercise any of these rights, contact us at info@soughat.shop. We respond to every request personally.

Soughat Shop is not directed at, and is not intended to be used by, anyone under the age of 18. We do not knowingly collect personal information from children.

If we make a meaningful change to how we handle your data, we will update the date below and, for significant changes, notify registered users by email. We encourage you to revisit this page occasionally.