Privacy Policy

Last updated: [approval date]

This policy explains how the MADAR app, operated by مدار للتجارة الإلكترونية [provisional name — to be confirmed against the trade licence] ("we"), collects, uses and protects your data when you shop from Emirati brands or sell on the app.

1. Data we collect

• Account data: name, email, phone number (optional), password (stored hashed — we cannot read it), and preferred app language.
• Order data: ordered products, quantities, amounts and VAT, order contact details (name and phone), delivery address, payment method (card or cash on delivery) and payment status, and order/delivery status.
• Saved address: if you choose to save your address at checkout, we keep it in your account for future orders.
• Cancellation and return requests: the items, amount and the reason you enter.
• Seller data: shop name and description, trade licence number, emirate, contact email and phone, shop logo, uploaded business documents and the Emirati-ownership declaration, plus product details and photos, sales, commissions and amounts due.
• Photos: the app accesses your photo library only when a seller chooses to upload a logo, product photo or document, and only after granting permission. We do not use the camera or location.
• Technical and security data: IP address to protect sign-in against repeated attempts, and a log of important admin actions (e.g. approving a seller or refunding an amount) with time and actor.
• Shopping cart: saved to your account on our servers so it is there when you come back.
• On your device: your sign-in token is kept in the device's secure storage, along with your chosen app language.

2. Card payments

• Card payment is not enabled yet; cash on delivery is the available method. [When enabled,] card payments are processed by Stripe. Card details are entered with Stripe directly; card numbers never reach MADAR's servers and we do not store them. We keep only the payment reference, status and amount.

3. How we use your data

• To create, sign in to and secure your account.
• To fulfil and deliver orders, and handle cancellations, returns and refunds.
• To review and verify seller applications, and calculate commissions, VAT and amounts due.
• To run offers, coupons and discount campaigns and track their budgets.
• To prevent fraud and abuse, and meet legal and accounting obligations.
• The app contains no advertising, third-party analytics or tracking tools, and we do not sell your data.

4. Who we share data with

• The seller you buy from: receives your name, phone, delivery address and order details as needed to prepare and deliver your order and handle returns.
• Stripe: to process card payments and refunds [once enabled], and to set up sellers' payout accounts (receives the seller details needed for verification).
• Hosting and storage provider (the Emergent platform the app runs on): to run the app and store data, images and documents.
• Shipping companies: [to be updated when a shipping partner is connected — no external shipping partner is connected today].
• Authorities: where required by law or an official request.

5. How long we keep data

• We keep your account data while your account exists.
• Orders, invoices and financial/tax records may need to be kept for a legally required period even after account deletion. [Period to be confirmed according to the legal and tax obligations applicable to the operator].

6. Your rights

• You can view your account details and orders in the app, and request a copy or a correction of your data via privacy@madaruae.ae.
• Account deletion: customers can delete their account in the app via Account → Delete my account, after confirming their password. Deletion is immediate: name, email, phone, saved address and cart are removed, and sign-in is closed on all devices. Seller accounts are closed by contacting privacy@madaruae.ae.
• Past orders, invoices, refunds and financial records are kept because the law may require us to retain them; they include the delivery details recorded on those orders (name, phone, address). [To be decided whether these details are masked after the required retention period].

7. Security

• We use encrypted connections (HTTPS), passwords are stored hashed, and access to data is limited by role (customer, seller, admin).

8. Children

• [Minimum user age to be decided — e.g. the app is not directed to anyone under 18].

9. Changes to this policy

• We may update this policy; the last-updated date is shown at the top of this page.

10. Contact us

• مدار للتجارة الإلكترونية [provisional legal name — to be confirmed]
• Email: privacy@madaruae.ae
• Address: [registered address — optional]