Privacy Policy
Last updated: 6 October 2026
This page explains what information the D&D Home online store (danddhome.shop) collects, why, who it is shared with and the choices you have. We only collect what is needed to provide the service.
1. Who is responsible
D&D Home, Kish, Kashani St., Tandis Building, D&D showroom. Phone: +98 76 4449 1222 · Email: info@danddhome.shop. Send privacy requests to that email (or WhatsApp +98 934 769 1222).
2. What we collect and why
| Where | Data | Purpose and basis |
|---|---|---|
| Sign-in / sign-up | Mobile number, one-time code (stored hashed and briefly), first and last name; email (optional) | To identify you and create your account. Basis: providing the service you asked for. |
| Orders | Name, phone, delivery address, order contents, chosen payment method | To process, ship and track the order, after-sales service, and keep sales records as the law requires. |
| Contact form | Name, phone, message; email (optional) | To answer your request. |
| Interior design request | Room size, floor, property address, photos you upload | To provide the design service you requested. Please do not include people or personal documents in photos. |
| AI assistant | Your message text (up to 500 characters), the page you were on, the reply and your IP address | To answer you, prevent abuse and improve quality. Please do not type personal or sensitive data (card numbers, passwords, ID numbers). |
| Visiting the site | IP address, browser type, essential cookies | Security, bot prevention, cart and language to work. |
We do not store your bank card details on this site. We do not use analytics or advertising tools (such as Google Analytics or Meta Pixel) and we do not send you marketing messages unless you explicitly ask.
3. Who we share it with
We do not sell your data. We share it only as needed with:
- SMS provider (Melipayamak): your mobile number and the verification-code text, to send the sign-in SMS.
- AI provider: messages you write to the assistant are sent via the AvalAI gateway to a language model (Google Gemini) to produce a reply. This processing may take place outside Iran.
- Google Fonts: to display fonts, your browser sends its IP address and browser details to Google servers (possibly outside Iran).
- Carriers / freight companies: name, phone and delivery address to deliver your order.
- Payment gateway: if online payment is enabled, payment happens on the bank gateway page and we never receive your card details.
- Authorities: where the law or a competent authority requires it.
4. How long we keep it
- Account data: while you have an account or until you ask us to delete it.
- Order and sales records: for as long as financial and commercial law requires.
- Contact-form messages: until your request is resolved.
- AI assistant conversations: only as long as needed for security and quality, then deleted or anonymised.
5. Your rights
You can ask to access, correct, delete or restrict the use of your data, and you can stop receiving marketing messages at any time. Contact us at the email or WhatsApp above; we may verify your identity to protect your data. Records that the law requires us to keep cannot be deleted.
6. Security
The site is served over HTTPS, sign-in codes are stored hashed and administrative access is restricted. No system is perfectly safe; if a breach affects your data we will notify you as the law requires.
7. Cookies
We use only essential cookies and browser storage. Details are in the Cookie Policy.
8. Changes
Material changes are published on this page with a new date. Purchase terms: Terms & Conditions.