Data we collect and purposes
| Data category | Examples | Purpose |
|---|---|---|
| Account and contact | Phone, name and email when provided | Login, communication and account recovery |
| Order and fulfillment | Products, specifications, address and invoices | Sale, delivery and claims |
| Payment | Amount, currency, transfer reference and notice | Collection matching and refund |
| Club and preferences | Governorate, interests, usage and currency | Membership management and service personalization |
| Usage and technical | Search, favorites, pages, device and connection address | Feature operation, security and analytics per your choices |
| Communication and consents | Messages, complaints and channel choices | Customer service and preference respect |
We collect what is appropriate for the required action, distinguishing required from optional. Purchase does not require completing the club profile.
Data sources are what you provide and do on the site, and what payment and shipping providers return to confirm collection and delivery. We may record visit and campaign source per enabled tools and tracking choices.
We do not request passwords, wallet PINs or card security codes in chats. You may hide balances and transactions unrelated to the order from a transfer image while keeping required matching data.
Data use and activity linking to account
We use data for login, ordering, quotations, invoices, shipping, returns, support, service protection, fraud prevention, membership management, enabled benefits and related legal obligations.
Browser-saved choices may be linked to your account on login to resume shopping.
If you consent to optional personalization or analytics, permitted activity may be linked to your profile to understand interests, measure campaigns and recommend. Rejecting optional tracking does not disable basic purchasing.
Interests and purchases are used for content or offers within the stated purpose and your choices. The policy does not grant open authorization for an unexpected purpose.
If automated scoring affects benefit eligibility or stops an action, you may request a review from customer service.
Messaging consent
| Message type | Sending basis |
|---|---|
| Login code, order, invoice, delivery, claim and security | Service necessary for the requested action |
| Campaign or promotional content | Clear choice per channel and purpose |
| Specific alert you requested | Topic and channel stated at request, with cancellation option |
Account creation, purchase and club membership are not marketing consent. We record choice time, source, form and modifications.
You may withdraw consent without closing the account or losing order rights.
Parties we may share data with
We do not sell personal data. Sharing is limited to what is necessary with authorized employees and parties that need it to provide the service, within the agreed purpose and appropriate controls.
| Party | Necessary data to share |
|---|---|
| Representative or carrier | Name, phone, address and shipment data for delivery |
| Bank, exchange or wallet | Matching, settlement and refund information |
| Hosting, support and code sending | Operational or contact data necessary for service |
| Analytics and marketing when enabled | Measurement or audience data permitted per required consents |
| Almazen Care | Device, purchase and claim data when requesting service or necessary referral |
| Competent authorities | What must be provided based on a request grounded in legal jurisdiction |
Referring a claim to Almazen Care does not transfer full browsing and marketing history.
The service provider does not have a general right to use your data for its own marketing.
Hosting, messaging or analytics services may operate outside Yemen. Parties and purposes are disclosed on the site, and contractual and security controls are reviewed before sharing.
Your direct interaction with an independent provider such as WhatsApp or a bank is also subject to its policies.
Chats and data protection
We keep what is necessary of sales and support chats to prove agreements, follow up and resolve disputes. We do not publish your chat as an advertisement or testimonial without appropriate permission.
We take appropriate measures to protect communication and accounts, restrict employee access by role, review activity and handle incidents.
We do not promise absolute security; we commit to handling the incident, procedures and required notifications according to its impact and applicable obligations.
Retention periods
| Record | Period or retention criterion |
|---|---|
| Account | While active and related obligations exist; then deletion or anonymization when need ceases |
| Orders and invoices | 5 years as an operational policy; extended only for a specific legal obligation or ongoing dispute |
| Service chats | Up to two years usually; claim or agreement parts are kept with the record when needed |
| Marketing preferences | During subscription; marketing use stops after withdrawal |
| Consent and do-not-contact proof | As necessary to prove choice, respect it and prevent resending |
| Cookies and technical logs | Per purpose and periods stated in privacy settings, without unjustified open retention |
The five-year period is an operational policy, not a claim that it is a legal retention period for every record. Need and reasons for any extension are reviewed.
Backups may remain during the approved backup cycle with restricted use, then removed per deletion mechanism.
Your data-related requests
| You may request | How it is handled |
|---|---|
| Access, readable copy and error correction | After verification appropriate to data sensitivity |
| Account closure or data deletion | What is no longer necessary is deleted; exceptions and existing obligations are clarified |
| Stop marketing or object to optional personalization | Preferences are implemented and use is restricted accordingly |
| Explanation of order result | We clarify the action, missing verification, reason part of it is delayed and expected duration |
We respond within 7 business days maximum. This is a response deadline, not a promise to delete a record that must be retained.
Withdrawing from the club does not delete purchases, and withdrawing marketing does not delete what is needed to honor do-not-contact.
Data kept for an existing obligation is restricted to what is necessary for that obligation.
Minors and policy updates
Accounts and independent contracting are intended for those who meet the platform eligibility. If a minors data is collected contrary to policy, we verify the guardians role and delete what is unnecessary while protecting existing rights and obligations.
We publish material changes and their effective date. If a new purpose requires consent, we request it separately; continued browsing is not considered new consent.