Privacy Policy

Last updated: 5 October 2026

BACH Wears is a menswear brand based in Lebanon, founded by Bachar Elmir. This policy explains what personal data we collect on bachwears.com and in our stores, why we collect it, and the choices you have. For any question about your data, write to care@bachwears.com or message us on WhatsApp at +961 71 566 296.

What we collect

Orders: your name, phone number, delivery city and address, and — if you give them — your email and delivery notes, together with the pieces you buy and how you pay.
Your account: your email, your password (kept by our sign-in provider in hashed form — we never see it), your name and phone number, and, only if you choose to add them, your birthday and preferred sizes.
Favourites, back-in-stock alerts and the newsletter: the pieces you save and the email or phone number you give us to be notified.
Support: the messages you send through the support page, WhatsApp, email or the on-site assistant, and any order number you share with us.
Wallet and points: your wallet top-ups (the amount and the Whish receipt number you submit) and the history of the loyalty points you earn, convert or lose.
Fit Finder: if you choose to save them, your height, weight and preferred fit, used only to suggest a size.
In store: your purchase and, if you ask us to, the link to your account.

Why we use it

To confirm, prepare, deliver and support your orders, returns and exchanges. We call or message you to confirm every order before it leaves.
To run your account: order history, favourites, saved sizes and wallet.
To send service messages by email or WhatsApp: order confirmations, delivery updates, back-in-stock alerts and account emails.
Only with your consent: offers, the newsletter and your yearly birthday gift. You can withdraw consent at any time from your account or with the unsubscribe link in any email.
To keep the records our accounting and tax obligations require, and to prevent fraud and misuse.

On your device

We do not use advertising or analytics cookies.

To understand how the site is used, we count visits without cookies and without storing anything on your device: when a page is viewed, our server combines your IP address and browser type with a random value that changes every day into an anonymous code, and stores only that code with the page or product viewed. Your IP address and browser details are not stored, and the code cannot be linked across days. If your browser sends a "Do Not Track" or "Global Privacy Control" signal, we do not count your visit. To work, the site keeps a few items in your browser: your bag, your light or dark preference, the grid view you chose, recently viewed pieces, whether you have already seen a pop-up and — when you sign in — a session so you stay logged in. Clearing your browser's site data removes them.

Who we share it with

We do not sell your personal data. We share only what is needed with the services that run BACH:

Hosting and database: Supabase, and our servers at Hostinger.
Email and WhatsApp messages: Resend and Twilio.
The courier who delivers your order: your name, phone number and address.
Payment providers you choose to use: Whish, and card payments through Stripe once available. We never see or store your full card number.
Our on-site assistant uses Google's Gemini service to understand your questions. Please don't share sensitive information in the chat.

Some of these providers process data outside Lebanon. We choose providers that protect it to a high standard.

How long we keep it

We keep order and payment records for as long as Lebanese commercial and tax rules require. Account data stays while your account is open. Marketing consent lasts until you withdraw it. Support messages are kept for as long as we need them to resolve and follow up on your request.

Your rights

You can ask us to show you, correct or delete the personal data we hold about you, or to stop marketing to you, by writing to care@bachwears.com. From your account you can also download a copy of your data or delete your account yourself; orders stay in our records, without your name and contact details, for as long as accounting rules require. Your name, sizes and preferences can be changed in your account at any time. Some records must be kept for legal or accounting reasons even after an account is closed. We handle personal data in line with Lebanese law, including Law No. 81 of 2018 on Electronic Transactions and Personal Data.

Security

Passwords are hashed, two-step sign-in by email is available on every account, access to customer data is limited by staff role, and the site is served over an encrypted connection only. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.

Age

Accounts are intended for adults aged 18 and over.

Changes to this policy

When we update this policy we will change the date at the top of this page. Significant changes will also be announced on the site or by email.