Privacy Policy

Expression Computer W.L.L. (trading as “Expression Computers,” “we,” “us,” or “our”)

Last updated: September 25, 2026

Expression Computer W.L.L. (trading as “Expression Computers,” CR No. 11012-3, TRN 220005783400002) operates the website store.expressioncomp.com (the “Site”) and our showroom at Al Hayyat Shopping Center, Showroom No. 8, Manama, Kingdom of Bahrain, P.O. Box 75123. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit the Site, create an account, place an order, or otherwise interact with us, and it is issued in accordance with Bahrain’s Personal Data Protection Law (Law No. 30 of 2018) (“PDPL”).

By using the Site, you acknowledge that you have read and understood this Policy. If you do not agree with it, please do not use the Site.

1. Who We Are (Data Controller)

Expression Computer W.L.L. is the data controller responsible for the personal data described in this Policy.

• Address: Al Hayyat Shopping Center, Showroom No. 8, Manama, Kingdom of Bahrain, P.O. Box 75123
• Phone: +973 1700 3344
• WhatsApp: +973 3800 3322
• Email: eshop@expressioncomp.com

2. Personal Data We Collect

We collect the following categories of personal data:

• Account and identity data: name, username, account password Encrypted, title/gender (if provided)
• Contact data: email address, telephone/mobile number, billing address, shipping address
• Order and transaction data: items purchased, order history, order value, returns/warranty claims, invoices
• Payment data: we do not collect, process, or store any debit/credit card data (card number, expiry, CVV, or any other card details) on our systems at any point. All card transactions are captured and processed entirely by the bank/payment gateway (including BenefitPay), and we only receive a payment status confirmation (e.g., “approved,” “declined,” or a bank transaction reference number) once your bank has processed the payment
• Communications: messages you send us via email, WhatsApp, our contact form, or phone, including any details you choose to share in them
• Technical and usage data: IP address, browser type and version, device type, operating system, pages viewed, referring URL, and similar data collected automatically via cookies and similar technologies (see Section 6)
• Marketing preferences: whether you have subscribed to our newsletter/promotions

We do not knowingly collect special categories of sensitive personal data (e.g., health, religion, biometric data) and ask that you do not submit such data to us unless strictly necessary and requested.

3. How We Collect Personal Data

• Directly from you, when you register an account, place an order, subscribe to our newsletter, contact us, or use “Sign in / Sign up”
• Automatically, through cookies and similar technologies when you browse the Site
• From third parties, such as our payment gateway (transaction confirmation), delivery/courier partners (delivery status), or social platforms if you interact with us there (e.g., Instagram, WhatsApp Business)

4. Purposes and Legal Basis for Processing

We process personal data for the following purposes, relying on the legal bases available under the PDPL (performance of a contract, compliance with a legal obligation, our legitimate business interests, or your consent, as applicable):

5. Sharing and Disclosure of Personal Data

We do not sell or rent your personal data. We may share personal data only with:

• Payment processors and banks (e.g., BenefitPay and card acquiring/gateway providers) to complete your transaction
• Delivery and courier companies to fulfil and deliver your order within Bahrain, or to coordinate GCC shipments arranged by email
• IT and hosting service providers, including our e-commerce platform provider (X-Cart) and any cloud/hosting infrastructure used to operate the Site
• Professional advisers (auditors, lawyers, accountants) where necessary for our legitimate business operations
• Regulators, tax and government authorities, courts, or law enforcement, where required by Bahraini law or to establish, exercise, or defend legal claims
• A successor entity, in the event of a merger, acquisition, or sale of business assets, subject to equivalent protections for your data

Each of these recipients is only given the personal data necessary to perform its function and is required to protect it appropriately.

6. Cookies and Similar Technologies

The Site uses cookies and similar technologies (such as web beacons) to operate core features (e.g., shopping cart, sign-in sessions) and to understand how visitors use the Site. Some cookies may be placed by third parties (for example, analytics or advertising partners) for statistical purposes or to show content that may be relevant to you.

Cookie categories used may include:

• Strictly necessary cookies — required for the Site and cart/checkout to function
• Functional cookies — remember your preferences (e.g., language, sign-in state)
• Analytics/performance cookies — help us understand Site usage
• Marketing cookies (if applicable) — used by third parties to deliver relevant offers

You can control or disable cookies through your browser settings; disabling essential cookies may prevent parts of the Site (such as checkout) from working correctly. The Site does not currently respond automatically to browser “Do Not Track” signals.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including:

• Account data — for as long as your account remains active, plus a reasonable period after closure in case you wish to reactivate it
• Order, invoice, and payment records — for the period required by Bahraini commercial, tax, and VAT record-keeping obligations (generally at least 5 years from the date of the transaction, or longer if required by law)
• Warranty and support records — for the duration of the applicable warranty period plus a reasonable period thereafter
• Marketing data — until you unsubscribe or withdraw consent
• Technical/log data — for a limited period necessary for security and diagnostic purposes

When personal data is no longer needed, we securely delete, anonymize, or archive it in accordance with our internal retention practices and applicable law.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, including access controls and secure account authentication. All debit/credit card transactions are handled entirely by the issuing bank and payment gateway (including BenefitPay) — card details are captured and processed directly by the bank and never pass through, or are stored on, our own servers or systems. While we take reasonable steps to protect your data, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

Please keep your account username and password confidential and do not share them with anyone. Notify us immediately at eshop@expressioncomp.com if you suspect unauthorized use of your account.

9. Your Rights Under the PDPL

Subject to the conditions and exceptions set out in the PDPL, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Request erasure of your personal data, where applicable
• Object to or restrict certain processing, including direct marketing
• Withdraw consent at any time where processing is based on consent (e.g., unsubscribe from our newsletter), without affecting the lawfulness of processing before withdrawal
• Request data portability, where technically feasible
• Lodge a complaint with Bahrain’s Personal Data Protection Authority (PDPA) if you believe your data has been processed unlawfully

To exercise any of these rights, contact us at eshop@expressioncomp.com or +973 1700 3344. We may need to verify your identity before actioning a request, and we will respond within the timeframes required by the PDPL.

10. Children’s Privacy

The Site is not directed at children, and we do not knowingly collect personal data from individuals who do not have legal capacity to contract under Bahraini law without the involvement of a parent or legal guardian. If you believe a child has provided us with personal data without appropriate consent, please contact us so we can remove it.

11. International Data Transfers

Where personal data is transferred outside the Kingdom of Bahrain (for example, to hosting, IT, or payment service providers operating internationally), we take reasonable steps to ensure such transfers are subject to appropriate safeguards consistent with the PDPL.

12. Third-Party Links

The Site may contain links to third-party websites or social media pages (such as Instagram or WhatsApp). We are not responsible for the privacy practices of those third parties, and we encourage you to review their respective privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this Policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Expression Computer W.L.L. (trading as “Expression Computers”) Al Hayyat Shopping Center, Showroom No. 8, Manama, Kingdom of Bahrain, P.O. Box 75123 Phone: +973 1700 3344 | WhatsApp: +973 3800 3322 Email: eshop@expressioncomp.com

You may also contact Bahrain’s Personal Data Protection Authority (PDPA) directly if you believe your rights under the PDPL have not been respected.