Privacy

Last updated: 23 October 2026

Who is responsible

LVL s.a.l., Baabdat, El Metn, Lebanon, runs the Keysa shop and is responsible for your data. Questions about your data go to the Keysa team at [email protected].

What we collect when you order

Your order details come from the order form on this website, or from a message you send us, for example on Instagram, when our team places the order for you. We keep:

• your name, phone number, address, city and area
• your email address and delivery notes, if you give them
• what you ordered, the prices, the VAT, the delivery fee, any discount code and the total
• the order’s status, the courier’s name, the tracking number and the dates

We use these details to deliver your order and to contact you about it. We also compare your phone number and email address with earlier orders, so a first-order code such as FETCH10 works only once. Our team can add notes to an order for its own use.

Payment

You pay in cash on delivery. The shop collects and stores no card or bank details.

Emails

If you give an email address, we send you an order confirmation, a message when your order is on its way, and a thank-you when it is complete. Zoho Mail sends our emails. We keep a record of each email we send: the address, the subject, the type of email and whether it was sent.

Newsletter

You join our newsletter when you sign up and click the link in the confirmation email, or when our team adds you by hand. We keep your email address, your name if you give it, how you joined and whether you are subscribed. We delete a sign-up that nobody confirms within 7 days.

Every newsletter has an unsubscribe link. When you unsubscribe, we keep your address marked as unsubscribed, so it is never added again by mistake. We never add customers to the newsletter just because they ordered.

Visits to the site

We count visits ourselves. We use no Google Analytics, no advertising trackers and no tracking cookies.

Your browser keeps a random visitor number in its local storage. It does not hold your name or any contact details. For each page you view, we store the page, the website that sent you (its address only), a campaign tag from our own links, your country, and your type of device, browser and system. The shop does not store your IP address.

Cookies and browser storage

• Your bag is kept in your browser’s local storage.
• After you order, a cookie lets only your browser see your order summary. It lasts about one hour.
• Staff who sign in to the shop’s admin get a sign-in cookie.
• Before the launch, a cookie remembers that a visitor entered the preview password.

Who else sees your data

• Aramex receives your name, phone number, address, the amount to pay and your delivery notes, so it can deliver your order.
• Cloudflare carries all traffic to the site, so it handles every visit, including your IP address, as our network provider.
• Zoho Mail sends our emails, so it handles your email address and the content of each email.
• If you message us on Instagram, that chat runs on Instagram, a Meta service, under Instagram’s own rules.

Nobody else receives your data. We do not sell it.

Server records

Our server keeps a log of each request: the time, the type of request, the page address without its query part, the result and how long it took. The log holds no IP addresses, no cookies and no form contents.

To stop repeated attempts, such as many logins or orders in a row, the server holds IP addresses for a short time in its memory. It never writes them to disk. The one exception is staff: when someone signs in to the admin, or is locked out after wrong passwords, the admin record keeps a shortened address with its last part removed.

How long we keep it

We keep order details for as long as Lebanese tax and accounting law requires. We do not yet delete visit records and email records on a schedule.

Your rights

You can ask to see the data we hold about you, to correct it or to delete it. Write to the Keysa team at [email protected]. When you ask us to delete your data, we do it within 30 days, except the order details the law requires us to keep.

You can leave the newsletter at any time with the unsubscribe link in every newsletter.

Security

Only the Keysa team can see customer details, each person with their own sign-in. Only the owner can export customer details, and each export is recorded. The site uses an encrypted connection.

Changes to this policy

We update this page when what we collect changes. The date at the top shows the last change.

Contact

The Keysa team at [email protected], or a direct message on Instagram to @keysa_treats.