Privacy policy

Last updated: 4 November 2026

This Privacy Policy explains how PRJKT8 collects, uses, shares and protects your personal information when you visit prjkt8.com (the “Site”), shop with us online or in our boutique, or contact us. It also explains your rights and how to use them.

1. Who we are

PRJKT8 is a trading name of Mudara Enterprises Co. W.L.L., a company registered in the Kingdom of Bahrain (commercial registration number 79259) (“PRJKT8”, “we”, “us”, “our”). We are the controller of the personal information we collect and use as described in this policy.

Registered office: Office 176, Platinum Tower, Building 190, Road 2803, Block 428, Seef, Kingdom of Bahrain.

Boutique: PRJKT8, Moda Mall, Bahrain World Trade Center (Gate 5), Manama, Kingdom of Bahrain.

Email: hello@prjkt8.com

Telephone and WhatsApp: +973 6677 7600

2. The information we collect

Information you give us

Contact and account details: your name, email address, telephone number, billing and delivery addresses, and account login details if you create an account.
Order details: the products you buy or reserve, prices, order history, returns and exchanges, and any notes or special requests.
Payment details: payments are processed by our payment service providers. We receive confirmation of payment and limited details such as the card type and the last four digits. Our systems are set up so that we do not receive or store full card numbers; please never send card details by email, chat or WhatsApp. If you pay, or we refund you, by bank transfer, we receive the bank details needed for that payment.
Identity details: where needed to deliver a high-value order, to prevent fraud, or where the law requires it, we may ask to see and keep a copy of an official identity document such as a CPR card or passport.
Enquiries and communications: messages you send us through our forms, email, telephone, WhatsApp, Instagram or Facebook messages, or live chat, including enquiries, wait-list requests, appointment bookings and customer support.
Preferences: your marketing choices, the brands and pieces you are interested in, and your preferred language.

Information we collect automatically

Device and usage information: IP address, browser and device type, operating system, time zone, approximate location derived from your IP address, pages viewed, products viewed, search terms, the website that referred you, and how you interact with the Site.
Cookies and similar technologies: see section 4.

Information we receive from others

Payment service providers (payment status and fraud checks), delivery companies (delivery status), advertising and social-media partners (for example when you contact us through Instagram or respond to one of our adverts), and publicly available sources where the law allows.

You do not have to give us personal information. However, without your name, contact details and delivery address we cannot accept or deliver an order, and without a way to reach you we cannot answer an enquiry. If we ask to check your identity for a high-value order and cannot do so, we may not be able to complete the delivery.

We do not need sensitive personal information (such as information about your health, religion or biometric data), so please do not send it to us. If an identity document we check contains any such information, we use it only to confirm your identity.

3. How we use your information, and our legal grounds

To process and deliver your orders, take payment, arrange delivery or collection, handle returns, exchanges and warranty matters, and send order and delivery updates. Ground: to perform our contract with you.
To answer your enquiries and provide customer service, including reservations, private viewings, appointments and wait lists. Ground: to take steps you ask for before a contract, to perform a contract, or our legitimate interest in serving our clients.
To manage your account and remember your preferences. Ground: contract and legitimate interest.
To prevent fraud and keep the Site secure, including checking orders for risk. Our e-commerce platform and payment providers use automated checks to assess fraud risk, and a payment provider may decline a payment under its own rules. We do not cancel an order only because our platform has flagged it: a member of our team reviews it first, and you can contact us to explain or to ask for a review. Ground: legitimate interest and legal obligation.
To comply with the law, including tax (VAT), accounting, commercial, consumer-protection and, where they apply to us, anti-money-laundering requirements, and requests from competent authorities. Ground: legal obligation.
To improve the Site and our service, through analytics and research on how the Site is used. Ground: legitimate interest, or your consent where the law requires it for cookies.
To send you marketing about new pieces, events and offers, tailored to the brands and pieces you have bought or asked about, and to show you relevant adverts online. Ground: your consent, or where the law allows, our legitimate interest in telling existing clients about similar products. You can opt out at any time (section 5).
To establish, exercise or defend legal claims. Ground: legitimate interest and legal obligation.

Where we rely on your consent, you may withdraw it at any time. This does not affect processing that took place before you withdrew it.

4. Cookies and similar technologies

We and our partners use cookies, pixels, tags and similar technologies to:

make the Site work (for example your cart, checkout, language and currency) — these are strictly necessary;
remember your preferences;
measure and improve how the Site performs (analytics); and
show you relevant advertising and measure its effect (marketing), including through partners such as Meta (Facebook and Instagram) and Google.

Where the law requires your consent to non-essential cookies, we ask for it through a cookie banner. You can block or delete cookies in your browser settings at any time, and where the Site offers cookie settings, you can change your choice there. If you block some cookies, parts of the Site may not work properly.

5. Marketing

We send marketing emails, messages or newsletters only where you have agreed or where the law otherwise allows. You can opt out of marketing at any time, free of charge: use the unsubscribe link in our marketing emails, reply to any marketing message asking us to stop, or contact us (section 15). We will still send you messages about your orders and account.

We do not sell your personal information. We share it only as described in section 6.

6. Who we share your information with

We share personal information only as needed for the purposes in section 3, with:

Our e-commerce platform, Shopify, which hosts the Site and processes orders on our behalf. You can read how Shopify handles personal information at shopify.com/legal/privacy.
Payment service providers that process card, Benefit, Apple Pay and other payments. They handle your payment details under their own security standards (such as PCI DSS).
Delivery and logistics companies, such as DHL and FedEx, which need your name, address and telephone number to deliver your order. For deliveries abroad, they and the customs authorities of the destination country also receive the contents and value of your order and, in some countries, may require your identity or tax number.
Service providers that help us run our business, such as email and marketing platforms, customer-relationship and communication tools, website forms, currency conversion, analytics and IT support.
Advertising and social-media partners, such as Meta (Facebook and Instagram) and Google (including YouTube). They receive information about your visits and purchases — which may include your email address or telephone number in coded (hashed) form — so that we can measure our adverts and show them to people likely to be interested. You can limit this through your cookie choices and your ad settings with Meta and Google.
Watchmakers and brands whose pieces we sell, where needed for warranty, servicing, authentication, product registration or allocation of limited pieces.
Professional advisers such as lawyers, auditors and insurers, under a duty of confidentiality.
Authorities, regulators, courts and law enforcement, where the law requires it or to protect our rights, our clients or others.
A buyer or successor if our business, or part of it, is sold, merged or reorganised, in which case your information may pass to the new owner as part of the business.

Where these companies act on our behalf, their terms with us allow them to use your information only to provide their services to us. Others — such as payment providers, delivery companies, Meta (including Instagram and WhatsApp), Google and watchmakers — also use it for their own purposes under their own privacy policies.

7. International transfers

Some of the companies listed above store or process information outside the Kingdom of Bahrain, for example in the United States, Canada or Europe, and in other countries where they or their sub-contractors operate. We transfer personal information abroad only on a ground the applicable law allows — for example where the transfer is needed to perform our contract with you or to take steps you ask for, where you have given your consent, where the destination is recognised as giving adequate protection, or where other safeguards permitted by law are in place. You can ask us for more details of the safeguards that apply (section 15).

8. How long we keep your information

We keep personal information only for as long as we need it for the purposes in section 3, including to meet legal, tax, accounting and reporting requirements. For example, order, invoice and payment records are kept for the period required by Bahrain’s tax (including VAT) and commercial laws and any other law that applies to us; marketing preferences are kept while you are subscribed, and if you unsubscribe, we keep a record of that so that we do not contact you again; and enquiries are kept for as long as needed to deal with them and any follow-up. Copies of identity documents are kept only as long as needed for the check they were taken for, unless the law requires longer. When information is no longer needed, we delete it or make it anonymous within a reasonable time.

9. How we protect your information

We use appropriate technical and organisational measures to protect personal information against loss, misuse and unauthorised access, disclosure, alteration or destruction, including encrypted connections (HTTPS), access controls and reputable service providers. No method of transmission over the internet or of electronic storage is completely secure, so we cannot guarantee absolute security. If we become aware of a personal-data breach, we will act promptly and notify you and the authorities where the law requires.

10. Your rights

Subject to the conditions and exceptions set out in the law that applies to you, you may have the right to:

be informed about how we use your personal information;
access your personal information and receive a copy of it;
have inaccurate or incomplete information corrected;
have your information deleted or blocked;
restrict or object to certain uses of your information, including objecting at any time to direct marketing and to processing based on our legitimate interests;
not be subject to a decision based solely on automated processing that significantly affects you;
receive your information in a portable format, where applicable;
withdraw your consent at any time; and
complain to a data protection authority.

In Bahrain, your rights come from the Personal Data Protection Law (Law No. 30 of 2018), and you may complain to the Personal Data Protection Authority or the body carrying out its functions.

In the European Economic Area and the United Kingdom, where the EU or UK General Data Protection Regulation applies to our use of your information, it gives you most of the rights listed above, and you may complain to the data protection authority where you live or work.

In other countries, including other GCC countries, you may have similar rights under your local law; contact us and we will respond as that law requires.

To use any of these rights, contact us (section 15). We may need to verify your identity before we act on a request. We will respond within the time the applicable law requires. If the law allows us more time and we need it, we will tell you why. We will not treat you less favourably for using your rights.

11. Children

The Site and our services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, please contact us and we will delete it unless the law requires us to keep it.

12. Third-party websites and services

The Site may link to other websites, social-media pages and services, such as watchmakers’ sites, Instagram and WhatsApp. Their own privacy policies apply, and we are not responsible for how they handle your information.

13. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated. If we make significant changes, we will tell you by a notice on the Site or, where appropriate, by email.

14. Language

This policy is available in English and Arabic. If there is any difference between the two versions, the English version prevails, to the extent permitted by law.

15. Contact us

For any question about this policy or to use your rights, contact PRJKT8 (Mudara Enterprises Co. W.L.L.):

Email: hello@prjkt8.com
Telephone and WhatsApp: +973 6677 7600
Post: Unit 176, Building 190, Road 2803, Block 428, Government Avenue, Manama, Kingdom of Bahrain