Privacy Policy
A clear view of the information this website collects, why, and what you can do about it.
Who we are
This website is run by Haval Bookstore, Brayati Street, Erbil, Kurdistan Region, Iraq. When this policy says “we” or “us”, it means the bookstore. You can reach us at havalbookstore@gmail.com, +964 750 536 2000 or WhatsApp.
When you place an order
To prepare and deliver your order we store the details you enter at checkout: your name, phone number, city, delivery address and any notes, whether you chose delivery, express delivery or pickup, and the books, quantities and prices in the order. We use them only to confirm the order with you (by phone or WhatsApp), deliver it or have it ready for pickup, and keep a record of the sale.
Payment is made in cash on delivery or at pickup. We never ask for or store card or bank details on this website.
When you request a book
The “Request a book” form stores the title, author and link you give us, together with your name, phone number and notes, so we can try to source the book and contact you with the price and timing.
Abuse prevention
When an order or book request is submitted, we store a one-way hash of your IP address (not the address itself) and use it to limit repeated or automated submissions. It is not used to identify or track you.
Stored in your browser
Your book bag and saved books are kept in your browser’s local storage on your own device — not in a customer account. They are only sent to us when you check out (the books in your bag) or open your saved list or bag (book numbers, so we can show current prices and stock). Clearing your browser’s site data removes them.
There are no customer accounts on this website yet, and we use no analytics, tracking or advertising cookies.
Staff sign-in cookie
The only cookie this website sets is a secure session cookie for bookstore staff who sign in to the order dashboard. Customers never receive it.
Who can see your details
Your order and request details are seen by Haval Bookstore staff who handle orders, and the delivery rider receives the name, phone number and address needed to deliver your books. We do not sell your information or share it for marketing.
The website is hosted on Cloudflare, which stores our database and processes the connection and security data needed to serve the site and protect it from attacks.
How long we keep it
We keep order and request records for as long as we need them to fulfil your order or request, answer questions about it, and keep our ordinary business records. You can ask us to delete your details sooner where we no longer need them.
Your choices
You can ask us what we hold about you, or ask us to correct or delete it, by contacting havalbookstore@gmail.com, +964 750 536 2000 or WhatsApp. Mention your order code if you have one. You can remove your bag and saved books at any time by clearing them in the bag or by clearing this site’s data in your browser.
Other services
Links to WhatsApp, email, phone, Google Maps and social media open services we don’t control; they handle your information under their own privacy policies. Messages you send us through them reach us under those services’ terms.
Changes to this policy
If we change how the website uses your information — for example when customer accounts or online payment are added — we will update this page and the date at the top.