Privacy Policy

01Information we collect

• Information you give us. Your name, email address, delivery address and phone number, and your date of birth where it's needed for rewards or age checks. Card payments are handled by our payment provider — we never store your full card number.
• Order information. The items you order, the store, the time, the delivery location, the order value and any notes or preferences you add.
• Allergy and dietary information. We treat this as sensitive data and use it only to pass on to the store preparing your order. We ask for your explicit consent first, and you can withdraw it at any time.
• Information collected automatically. Your IP address, browser type, operating system, device identifiers, the pages you view and how you move through the site, collected through cookies and similar technologies.
• Location. The app may ask for your precise location to find nearby stores and confirm delivery addresses. You can refuse or turn it off in your device settings — you'll then need to enter your address manually.

02How we use your information

• To fulfil your orders. Sharing order and contact details with the store and courier, taking payment and issuing refunds.
• Your account and rewards. Keeping your saved addresses and order history, and running loyalty or promotional programmes you join.
• Customer support. Answering your questions and investigating complaints about orders, payments or deliveries.
• Improving our service. Understanding which pages and menu items are used, fixing problems and testing improvements.
• Marketing — only with your consent. Offers and updates by email, SMS or WhatsApp. Every message includes a way to opt out, and opting out never affects your ability to order.
• Security and the law. Detecting fraud and abuse, protecting our systems and meeting our obligations in the Kingdom of Saudi Arabia, including tax and record-keeping rules.

03Sharing & disclosure

• Service providers. We share only what's necessary with the restaurants and stores, delivery couriers, payment processors, SMS and email providers, and hosting and analytics providers that help us run the service. They may use it only for the task we give them.
• We don't sell your data. We never sell or rent your personal information to third parties for their own marketing.
• Legal and safety. We may disclose information when required by law, a court order or a competent authority, or to protect our rights, our staff or the safety of others.
• Business transfers. If our business is sold, merged or restructured, your information may transfer to the new owner under the same protections.

04Data security & retention

• How we protect it. Encrypted connections (HTTPS), staff access on a need-to-know basis, secured databases, and card handling by a certified payment provider so card details never reach our servers.
• No system is perfect. We can't promise absolute security. If a breach affects your data, we'll notify you and the relevant authority as the law requires.
• How long we keep it. Account and order records are kept while your account is active, and afterwards for as long as tax and commercial regulations require. Marketing consents are kept until you withdraw them.

05Cookies & tracking

• Essential cookies. Keep you signed in, remember your language and cart, and secure checkout. The service can't work without them.
• Analytics cookies. Show us how the site and app are used so we can fix problems and improve them.
• Marketing cookies. Let us show you relevant offers and measure how well our advertising works.
• Your choice. Analytics and marketing cookies are only set if you accept them, and you can change your mind at any time. You can also block or delete cookies in your browser settings, but blocking essential cookies will stop parts of the site from working.

06Your rights & choices

Under the Personal Data Protection Law of the Kingdom of Saudi Arabia (and the GDPR where it applies) you have the right to:

• Access. Find out what personal data we hold about you and get a copy.
• Correction. Fix inaccurate or incomplete data — most of it you can edit yourself in your account.
• Deletion. Ask us to erase your data, except records we must keep for legal or tax reasons.
• Objection or restriction. Opt out of direct marketing at any time, or object to other specific uses of your data.
• Withdraw consent. Withdraw consent for allergy information, location access or marketing at any time. This doesn't affect anything done before you withdrew it.
• Portability. Receive your data in a common, machine-readable format where this right applies.

To use any of these rights, contact us from the email address on your account, or call or WhatsApp us using the details below. We reply within 30 days. If you're not satisfied with our answer, you can complain to the competent data protection authority.

07Children's privacy

Our service is intended for adults. We don't knowingly collect children's personal data without a parent's or guardian's consent. If you believe a child's information was given to us, contact us and we'll delete it.

08Changes to this policy

We may update this policy as our service or the law changes. The date at the top shows the current version. We'll tell you about material changes in the app, by email or with a notice on the website.