Privacy Policy

Customers: your name and mobile number (verified by a one-time code over WhatsApp), your city and neighbourhood, the items, times and notes on your orders, and whether you agreed to receive marketing messages from a shop.

Shop owners: name, email, phone, business details and documents (such as a commercial registration or freelance licence), bank account (IBAN) and the certificate that proves it, and the products, orders and messages in your dashboard.

Everyone: support messages you send us, and basic technical data (IP address, browser type) used for security and to stop abuse.

We do not see or store card numbers. Card details are entered on our payment provider’s secure page.

To run orders and payments, send order and account notifications, verify phone numbers, pay shops what they are owed, answer support requests, prevent fraud and spam, meet legal and tax obligations, and improve the service.

Marketing messages from a shop are sent only if you agreed at checkout, and you can opt out at any time.

The shop you order from. Service providers that process data for us: EdfaPay (card payments), SendPulse and Meta (WhatsApp messages), Resend (email), Unifonic (SMS), Cloudflare Turnstile (spam protection), and our hosting provider [hosting provider and data location]. Authorities, when the law requires it.

We do not sell personal data.

We use cookies that are needed for the site to work: sign-in sessions for shop owners and customers, a support-conversation token, and a 14-day cookie that records which marketing message brought you to a shop. Your browser also stores your cart and display preferences (such as dark mode) locally on your device.

Order and financial records are kept as long as the law requires for accounting and tax. Payment-gateway logs and notification logs are deleted after 90 days. Account data is kept while the account is active. When you ask us to close an account, we delete or anonymise its data unless the law requires us to keep it.

Under the PDPL you can ask to know what data we hold about you, get a copy of it, correct it, or have it deleted when we no longer need it, and you can withdraw consent to marketing. Contact us using the details on our Contact page; we answer within the period the law sets.

Data is sent over encrypted connections. Payment credentials of shops are stored encrypted, documents such as licences and bank certificates are kept in private storage visible only to their owner and our administrators, and administrator actions are logged.

We will post any change to this policy on this page and update the date above. Questions or requests: see our Contact page.