Privacy policy

What we collect

Account data (name, email, password hash, optional two-factor secret, encrypted), purchase records (products, amounts, dates, payment-provider references), content you post, messages with Stores, device and security data (IP address, browser, sign-in times) and basic analytics (pages viewed, a random visitor identifier).

We do not collect or store full card numbers. Card data goes directly to our payment provider.

Why we use it

To run your account and deliver purchases (contract), to prevent fraud and secure the service (legitimate interests and legal obligations), to keep financial records (legal obligation), and to send service emails such as receipts and security notices.

Who we share it with

The Store you buy from (your name, email, purchases and messages with that Store); our payment provider; infrastructure providers that host data on our behalf under contract; and authorities when the law requires it. We do not sell personal data.

How long we keep it

Financial and audit records are kept for the period required by law. Security logs are kept for up to 30 days after expiry; page-view analytics for up to 13 months. Other data is kept while your account is open.

Your rights

Depending on where you live — including under Bahrain's Personal Data Protection Law (Law No. 30 of 2018) — you may access, correct, delete or object to processing of your data, and complain to the data protection authority. Contact us to exercise these rights.

Cookies

We use strictly necessary cookies for sign-in, security (CSRF protection), short-lived messages and affiliate referral attribution. We do not use advertising cookies. Fonts load from Google Fonts. [Counsel to confirm the consent position for referral and font requests per market.]