This notice explains what personal data ransor.com collects, why, who else sees it, and what you can do about it. It describes what the site actually does today — not a generic template.
Last updated: 31 July 2026.
Who is responsible for your data
RANSOR Limited W.L.L. (“RANSOR”, “we”, “us”), a Bahraini company, is the data controller for the personal data collected through this website.
You can reach us about anything in this notice at [email protected], on +973 1774 4707, or through our Contact page.
1. What we collect
Things you give us:
- Your name, email address and phone number
- Your billing and delivery address
- What you ordered, and any note you add to an order
- Messages you send us through the contact form or by email
- Your account password, which is stored only as a cryptographic hash and cannot be read back
Things the site records as you use it:
- Your IP address, browser and device type, and the pages you open
- The country your IP address is registered in — used only to preselect a currency for you
- Your language and currency choice
- Your basket and checkout session, so the shop remembers what you put in it
- Your cookie choices
What we never receive: your full card number. Card details are entered with the payment provider, not with us, and never reach our servers.
2. Why we use it, and on what legal basis
- To take, fulfil and deliver your order, and to handle returns, exchanges and warranty claims — because we need your data to perform the contract you entered into with us.
- To answer your questions and support you after a purchase — performance of that contract, or our legitimate interest in running a shop you can talk to.
- To keep the site and your account secure, and to block spam, bots and fraud — our legitimate interest in protecting the site, our customers and ourselves.
- To meet accounting, tax and consumer-protection obligations in Bahrain — a legal obligation.
- To measure how the site is used, and to show you RANSOR products on other websites — only with your consent, which you may withdraw at any time and which we treat as refused until you give it.
3. Cookies and similar technologies
Necessary — always on. These are set without asking, because the shop cannot work without them:
ransor_lang— remembers whether you are reading the site in English or Arabic (1 year)wmc_current_currency,wmc_current_currency_old,wmc_ip_info— remember which currency you are viewing prices in, and the country your IP address is registered in (24 hours)ransor_country,wordpress_ransor_pref— remember the country you chose to shop from, so prices and delivery details match it on every page (1 month)- WooCommerce basket and session cookies, including
woocommerce_cart_hash,woocommerce_items_in_cartandwp_woocommerce_session_*— keep your basket and checkout working - WordPress login and security cookies, if you have an account with us
Your cookie choice itself. wordpress_ransor_consent records which optional categories you granted, and is set only when you grant something — if you reject everything, nothing about you is stored on our server (1 year). Alongside it, your browser keeps a ransor_consent record in local storage and a ransor_consent_seen cookie, so the banner does not ask you the same question twice.
Analytics and Marketing — off unless you switch them on. Both categories default to denied. Nothing in them loads and no cookie in them is set until you grant it, and the block is applied on our server before the page is built — we do not load a tracker and then hide it.
You can change or withdraw your choice at any time using the Cookie preferences link at the bottom of every page, which reopens this dialog. Withdrawing is exactly as easy as granting, and takes effect on your next page view.
4. Analytics and advertising — what is actually running
- There is currently no analytics on this site at all. The Universal Analytics property that used to run here (UA-192085055-1) has been removed, and no Google Analytics 4 property has replaced it. Nothing is measuring your visit.
- The Meta (Facebook) pixel, ID 668456498407033, is installed. It loads only after you grant the Marketing category; until then it is not printed on the page and Meta is never contacted.
- Kliken / SiteWit, a Google-advertising add-on for WooCommerce, is installed and likewise loads only after you grant Marketing. It currently has no advertising account configured, so it sends nothing even when it is allowed to run.
5. Who else processes your data
We do not sell or rent your personal data. We share it only with the providers below, only for the purpose named, and only to the extent each of them needs.
Hosting (Cloudways). The website and the store database run on managed hosting provided by Cloudways, on servers located in Frankfurt, Germany. As our host, Cloudways can technically access everything the site stores.
Payment providers (Tabby). When you choose one of these methods, the provider receives your name, contact details and the order amount directly so that it can take and verify the payment. Your full card details are never sent to, or stored on, our servers.
Email delivery (Twilio SendGrid). Order confirmations, password resets and our replies to you are sent through SendGrid, which therefore receives your email address and the contents of those messages.
Anti-spam (Cloudflare Turnstile). The contact form, the shipping-quote form and the account sign-in, registration and password-reset forms carry a Cloudflare Turnstile challenge. Cloudflare receives your IP address and browser signals in order to judge whether you are a bot. It runs only on those pages.
Security (Wordfence). A firewall inspects incoming requests, including IP addresses and request details, to block attacks and abusive traffic.
Reviews (Trustpilot). We use Trustpilot to collect reviews. Its script is present on every page of this site, and after you order we pass your name, email address and order reference to Trustpilot so that it can invite you to review the purchase.
Delivery. To get your order to you, we pass your name, delivery address and phone number to the courier handling that shipment.
Advertising (Meta, Kliken/SiteWit). Only if you grant the Marketing category, as described in section 4. Meta then receives the fact that you visited, and which pages, so we can show you RANSOR products elsewhere and see whether our advertising achieved anything.
Google. Two separate things, neither of which is analytics. We send our product catalogue — names, prices, images and availability — to Google Merchant Center so that RANSOR products can appear in Google Shopping; that feed contains product data, not customer data. Separately, the map on our Contact page is embedded from Google Maps, so opening that page tells Google that you did.
WooCommerce / Automattic. Our store software is connected to WooCommerce.com for shipping and tax services and sends usage statistics about the store back to Automattic.
Abandoned baskets. If you enter your email address or phone number at checkout but do not complete the order, we keep what you entered together with the contents of that basket, in our own database, so that we can remind you. Ask us and we will delete it.
We may also disclose personal data where a law, a court or a regulator requires it, or to establish or defend a legal claim.
6. Where your data is processed
RANSOR is based in Bahrain, but this site is hosted in Frankfurt, Germany, and several of the providers in section 5 operate from the European Union, the United Kingdom, the United States or the Gulf. Using this site therefore involves transferring your personal data outside Bahrain. We do this on the basis of our contracts with those providers, which oblige them to process the data only on our instructions and to protect it.
7. How long we keep it
We keep personal data only as long as we need it for the purpose it was collected for, and for as long as Bahraini accounting, tax and consumer-protection law requires us to keep commercial records. When a purpose ends and no legal obligation remains, we delete the data or reduce it to a form that no longer identifies you.
8. Your rights
In relation to your personal data you can ask us to:
- tell you what we hold and give you a copy of it;
- correct anything that is wrong or out of date;
- delete it, where we have no continuing reason or legal duty to keep it;
- stop or restrict a particular use, including any use based on our legitimate interest;
- hand your data to you, or to another provider, in a portable form;
- stop sending you marketing — always, and without giving a reason.
Withdrawing consent. For cookies and tracking, use the Cookie preferences link at the bottom of any page. For marketing email, use the unsubscribe link in any message we send you, or just tell us. Withdrawing consent does not affect anything done before you withdrew it.
To exercise any of these rights, write to [email protected] or use our Contact page. We may need to check who you are before we act, so that we do not hand your data to somebody else.
9. Children
This shop is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.
10. Security
The site is served over HTTPS, passwords are stored only as hashes, access to the store administration is restricted, and a firewall and anti-spam challenge sit in front of the forms. No system is perfect; if a breach ever affects your data we will tell you and the relevant authority as the law requires.
11. Changes to this notice
When what we do changes, this notice changes with it, and the date at the top changes too. If a change materially affects how we use your data, we will say so prominently rather than quietly editing the page.