Home›Privacy Policy

Privacy Policy

Last updated: October 2026

New Star Seven is a brand of Ovanza Cosmetics. This policy explains how we handle data to operate the site and fulfil orders. For privacy enquiries, contact us by WhatsApp or telephone on 01028282216.

What we collect

  • Order details: your name, mobile number, delivery address, governorate, and any notes you write. This is what we deliver on and what we call you about.
  • Email (required at checkout): we need it to send you the link that opens your order. That link is the only way in — there are no accounts on this site. We also use it for status notices: confirmed, on its way, delivered, cancelled.
  • Marketing consent (entirely optional): if you tick the box at checkout, or sign up to the newsletter, we add your email address to the offers list. Offers are sent by email and only by email — your mobile number is stored alongside it but is not used for marketing. You can unsubscribe from any message, and once you have, you stay unsubscribed.
  • Hair quiz answers: if you use the hair-type or hair-style finder, we keep the answer and what it recommended — with no name or number attached. It tells us what people are looking for.
  • Technical data: your IP address is recorded with an order, with a newsletter signup, with a quiz answer, and in our rate-limiting table — to protect the site from abuse and to be able to investigate an incident.

What we do not do

  • There is no online payment. Payment is cash on delivery, so we never take or see card or bank details at all.
  • We do not sell or rent your data to anyone.
  • There are no customer accounts, so we hold no password of yours.

Cookies and analytics

Only with your permission, we use Vercel Web Analytics and Vercel Speed Insights to measure pages and loading speed. These tools are cookieless, but receive technical browsing data. All optional analytics remain disabled until you accept.

Only after your permission, we use Microsoft Clarity for browsing interaction recordings and click/scroll heatmaps to improve usability. Checkout form details are masked. Clarity may set `_clck` and `_clsk` analytics cookies; we grant analytics storage and deny advertising storage. Microsoft processes data under its privacy statement. Recordings are disabled on admin and order-status pages.

Admin and order-status pages are excluded from optional analytics. Checkout form details are not sent as analytics events, and secret access tokens and order references are removed from measured page addresses.

  • Necessary browser storage: your cart, a checkout retry key and your privacy choice. These support shopping and remember your choice; they do not constitute marketing consent.
  • Your analytics choice: accept or reject with equal ease, and change your choice through Privacy settings in the footer. Rejecting does not prevent purchases. The choice is stored on your device for 180 days, then requested again. Withdrawal stops new tracking and removes analytics cookies accessible to this site; it does not automatically erase previously collected data. Contact us to request deletion.
  • Cookies: analytics cookies described above are used only after consent. Admin login, two-factor and CSRF cookies are necessary for the back office and scoped to /admin.

Where your data is stored

Our database runs on Neon in Frankfurt, Germany. The site is hosted by Vercel, and email is sent through Resend. Your data therefore leaves Egypt and is stored abroad.

How long we keep it

A job runs every night and removes whatever is past its date. These are the actual periods, not intentions:

  • Your order: kept for accounting and tax. After 5 years your name, phone number, address, notes and email are wiped from it, and what remains is an anonymous line in the books.
  • The IP address on an order or a newsletter signup: 90 days.
  • The IP address on a quiz answer: 30 days. The answer itself stays, with nothing attached to it.
  • The checkout retry record, which holds your reference and phone number: 30 days.
  • The email send log: the address is removed after 180 days; that a message of that kind was sent on that day remains.
  • Rate-limiting counters: 7 days.
  • Marketing list: until you unsubscribe.

Your rights

You can request a copy, correction or deletion of your data, or stop offers. Contact us by WhatsApp or telephone on 01028282216; we will respond within 30 days. We may verify your identity and retain records required by law. Analytics consent is separate from optional email marketing at checkout.

Contact

Ovanza Cosmetics / New Star Seven — WhatsApp and telephone 01028282216.