Privacy Policy

This policy explains how Band Center collects, uses, shares and protects personal information when you browse this website, create an account, place an order, subscribe to our newsletter or contact our support team.

It covers this website and the customer-service channels we operate. It does not cover other websites we link to - manufacturer pages, social networks, courier tracking - each of which publishes its own policy.

We decide why and how your personal data is processed, which makes us its controller. Our identity, postal address and contact details are set out in the final section.

NoteThis policy is written to be specific rather than defensive. Where a common practice does not apply to our store - third-party advertising, profiling, data brokers - we say so plainly instead of reserving the right to start.

We collect three kinds of information: what you give us deliberately, what your browser records automatically, and what our payment and delivery partners send back to us about an order.

• Information you give usYour name, email address, phone number, billing and delivery address, city and postcode, the contents of your order, and anything you write in a support message, a group-order request or a product review.
• Account informationYour username, a securely hashed form of your password - never the password itself - your saved addresses, and your order history.
• Payment informationThe payment method you chose, the order total, and the payment reference or transaction identifier our provider returns. Card numbers, CVV codes and online banking credentials never reach our servers.
• Technical informationYour IP address, browser and device type, operating system, the page that referred you, the pages you viewed, and the approximate country your IP address resolves to.
• Preferences held in your browserYour chosen language, your light or dark theme, your wishlist, your comparison list and your recently viewed products.

NoteThe wishlist, comparison list, recently viewed products, theme choice and first-visit flag are stored in your browser's own local storage. They stay on your device, they are not sent to us, and clearing your browser data removes them completely.

We do not ask for, and do not want, special-category data - information about your ethnic origin, religious, political or moral beliefs, health, or private life. Please do not include such details in support messages. Article 58 of the Iranian Electronic Commerce Act prohibits storing or distributing that data without explicit consent, and we do not seek consent because we have no use for it.

We do not buy personal data, and we do not enrich what you give us with data bought from anyone else.

Every use of your personal data needs a lawful ground. This table sets out ours, purpose by purpose.

Where we rely on a legitimate interest, we have weighed it against your privacy and use the least intrusive means available. You can object to any such processing - see your rights below.

Article 59 of the Iranian Electronic Commerce Act requires that personal data be collected only to the extent needed for goals described to you at the time of collection, and used for nothing else. That is the standard this table is written to.

A cookie is a small file a website asks your browser to keep between requests. We use as few as we can, and we group them like this.

• Strictly necessarySet by WordPress and WooCommerce to keep your shopping cart and session alive, to keep you logged in, and to protect forms against cross-site request forgery. The store cannot work without them, so they are not optional and we do not ask for consent to set them.
• FunctionalRemember your language and your light or dark theme so you do not have to choose again on every visit. These are stored in your browser, not on our servers.
• Analytics and advertisingNone. This site currently loads no third-party analytics, advertising or social tracking script. If that ever changes we will update this policy before the script goes live, and ask for your consent where the law requires it.

You can delete or block cookies in your browser settings, and browse the catalogue perfectly well with them blocked. Blocking the strictly necessary ones will stop the cart and checkout from working.

NoteWe use no tracking pixels, no advertising cookies, no cross-site fingerprinting and no data brokers. Nothing on this site follows you to another website.

We disclose personal data only where it is genuinely needed to run the store, only the fields needed for that purpose, and only to recipients bound to keep it confidential and to use it for nothing else.

• Banks and payment providersFor a direct bank transfer we match the reference you quote against our bank statement. If you pay through an online gateway, you enter your card details on the provider's own secure page and we receive only the outcome and a transaction reference.
• Delivery companiesThe recipient's name, delivery address and phone number, so the parcel can be delivered and you can be contacted about it.
• Hosting and IT providersThe companies that host this website, our database and our email, strictly so the service can run, be maintained and be backed up.
• Professional advisersAccountants and auditors, limited to what our statutory accounts and tax filings require.
• Public authoritiesWhere we are legally obliged to disclose data, or where disclosure is necessary to establish, exercise or defend a legal claim. We disclose the minimum required and, where we are permitted to, we tell you.
• A buyer of the businessIf the business is sold or reorganised, customer records may pass to the new owner, who would remain bound by this policy or one at least as protective.

NoteWe never sell, rent or trade your personal data, and we never share it so that someone else can advertise to you.

This website, its database and its backups are hosted on servers operated for us, and our support and fulfilment teams work from Iran.

If you order from outside Iran, the billing and delivery details you give us are necessarily transferred to Iran so that we can fulfil the order - that transfer is required to perform the contract you asked us to enter.

Where a service provider we rely on processes data outside your own country, we use it only where the transfer is necessary for the service you asked for, and only where that provider is contractually bound to protect the data to the standard described here.

We keep each kind of record only as long as it has a purpose, and no longer.

When a retention period ends we delete the record, or irreversibly anonymise it so that it can no longer be connected to you.

• Traffic between your browser and this site is encrypted in transit.
• Passwords are stored only as salted hashes. Nobody at our company can read your password, and a password reset is the only way back into an account.
• Access to customer and order records is limited to the staff who need it, each working from their own named account with the narrowest role that lets them do their job.
• Registration, login and password reset are protected against automated abuse by a challenge computed entirely on our own server - no third-party captcha service sees your data or your IP address.
• The server platform, WordPress, WooCommerce and every plugin are kept up to date, and backups are taken regularly and stored securely.
• Payment card data is out of scope by design: it is entered on the payment provider's systems, never on ours.

No system is perfectly secure. If a breach ever affects your personal data in a way likely to cause you harm, we will notify you and the competent authority without undue delay, and tell you what happened and what to do about it.

Article 59 of the Iranian Electronic Commerce Act requires us to give you access to the data we hold about you and a means to have it corrected or removed. Where the European GDPR applies to your order, the fuller set of rights below applies. We extend all of them to every customer, wherever you are, because operating one standard is simpler and fairer than operating three.

• AccessAsk for confirmation of what we hold about you and a copy of it.
• CorrectionHave inaccurate or incomplete data put right. Most of it you can edit yourself under your account.
• ErasureAsk us to delete your data where we no longer have a reason to hold it. We will explain anything we must keep - typically an order record required for tax - and delete the rest.
• RestrictionAsk us to pause processing while a dispute about accuracy or lawfulness is being resolved.
• ObjectionObject to processing we base on a legitimate interest, and to direct marketing at any time.
• PortabilityReceive the data you gave us in a structured, commonly used, machine-readable file.
• Withdrawing consentUnsubscribe from the newsletter, or withdraw any other consent, at any time. Withdrawal does not affect anything lawfully done before it.
• ComplaintComplain to us, and to the competent data protection or consumer protection authority where you live.

To exercise any of these rights, write to us using the details in the last section. We answer within 30 days, and if we need longer we will tell you before that deadline and explain why. We may first ask you to confirm your identity, so that we never hand someone else's data to the wrong person.

Exercising your rights is free. We would only charge - or decline - where a request is manifestly unfounded or excessive, and we would explain that decision in writing.

NoteWe use WordPress's built-in personal-data export and erasure tools, so a request for a copy or a deletion is fulfilled reliably from the database rather than assembled by hand.

We send the newsletter only to people who asked for it, and we ask for nothing but an email address to do so. Every message carries a working unsubscribe link, and unsubscribing takes effect immediately.

Service messages are different from marketing: order confirmations, payment confirmations, dispatch notices, delivery updates and replies to your support requests are part of performing your order, so they are sent for as long as the order is open whether or not you take the newsletter.

We do not pass your email address to anyone else so that they can market to you, and we do not send marketing on anyone else's behalf.

We take no decision about you by purely automated means that would have a legal or similarly significant effect, and we build no advertising profile of you.

The product suggestions on this site come from the category you are looking at and from the recently viewed list held in your own browser - not from a profile we keep about you. Prices are the same for everyone; we do not vary them by visitor.

This store is intended for adults. We do not knowingly collect personal data from children, and an account may only be opened by someone with the legal capacity to enter a contract.

If you believe a child has given us personal data, contact us and we will delete it promptly.

Our pages link to manufacturer websites, social networks and courier tracking pages. Following one of those links takes you off our site, where the destination's own privacy policy governs what happens to your data. We are not responsible for their content or their practices, and we encourage you to read their policies.

We update this policy when our practices or the law change. The date at the top of the page is when the current version took effect.

Where a change materially affects how we use data we already hold, we will make it prominent on the site rather than change the text quietly - and where we relied on your consent, we will ask again instead of assuming the old consent still covers the new purpose.

For any question about this policy, or to exercise any of your rights, reach us here:

• StoreBand Center
• Emaila.norollah.official@gmail.com
• Phone09126445785
• AddressImam Khomeini Square, Fotovat Passage, No. 1/33, Band Center (Sadati)
• Support hours09:00 to 21:00

Please put "privacy" in the subject line so your message reaches the right person quickly. If our answer does not satisfy you, you are entitled to complain to the competent data protection or consumer protection authority where you live - though we would be grateful for the chance to put it right first.