Privacy policy

1What we collect

• When you order: your name, phone number, email, delivery address (governorate, area, block, street, house) and any note you leave for the driver.
• When you create an account: your name and email, plus your phone number if you add one. Your password is stored hashed — we can check it, but neither we nor anyone else can read it back.
• When you message us on chat or the contact form: your name, email and what you wrote.
• When you leave a review: your display name, the star rating and the text.
• Your cart: it lives in your own browser. If you are signed in we keep a copy so you can pick it up on another device.

2Why we collect it

• To prepare and deliver your order, and to reach you about it.
• To email you an order confirmation and status updates.
• So you can sign in and see your past orders.
• To answer your questions and sort out anything that goes wrong.
• To see what is selling and what is running out — as totals, not as names.

3The cookies we use

All of them are needed to run the shop. There are no advertising cookies, no Google Analytics, no Facebook Pixel, and nothing that follows you across other sites. We do use Vercel's page-view counter, which counts how often each page is opened without cookies and without knowing who you are.

• Session cookie: keeps you signed in.
• Order cookie: lets your browser open an order you placed as a guest.
• Chat cookie: brings you back to your own conversation.
• Cart cookie: ties your saved cart to your browser.
• Language cookie: remembers whether you read in Arabic or English.

4Who else sees your data

We use outside services to run the shop, and each one sees only what its job needs:

• Vercel — hosts the website, and provides the anonymous page-view counter (no cookies, no identity).
• Turso — the database where orders and accounts are stored.
• Resend — sends our email (order confirmations, verification codes).
• Google — only if you choose to sign in with Google, and then we receive only your email and name.
• Our own automation server — builds reports and reminders, and runs on a server we own.
• The delivery driver — receives your name, number and address so they can deliver.

5How long we keep it

• Orders: kept as the shop's accounting record.
• Your account: until you ask us to delete it.
• Verification codes: expire within 5 minutes and are deleted.
• Abandoned carts: removed when you empty the cart or it becomes an order.
• Conversations: kept so we can refer back if there is ever a dispute about an order.

6Your rights

Email the shop and we will act on it:

• Get a copy of everything we hold about you.
• Correct anything that is wrong.
• Ask us to delete your account and your data (apart from order records we have to keep for accounting).
• Stop any marketing email — and we only ever send things about your own orders anyway.

7Security

• The whole site runs over an encrypted connection (HTTPS).
• Passwords are stored hashed with scrypt, never as readable text.
• Admin access is limited per permission, and every change is logged against the person who made it.
• We never store card details of any kind — payment is currently cash on delivery.