Privacy Policy
At Abayty, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. We comply with the Kingdom of Bahrain’s Personal Data Protection Law (PDPL) and relevant data protection regulations in the regions we operate.
1. Information We Collect
a. Personal Information
We may collect personal information that you provide to us, such as:
- Name
- Email address
- Phone number
- Delivery address
- Payment information (e.g., credit card details), which is processed securely through third-party payment providers
- We do not collect any sensitive personal information (such as CPR/national ID numbers, health or medical data, religious beliefs, or biometric identifiers)
b. Usage Data
When you use the App, we automatically collect certain information, including:
- Device information (e.g., device model, operating system version, unique device identifiers)
- IP address and general location data
- App usage statistics and interactions (features used, pages viewed, time spent)
- Crash reports and performance data to help us diagnose issues and improve our services
c. Location Data
With your permission, we may collect precise location information from your device to enable features such as delivery tracking or finding nearby stores. You have control over your location data – you can grant or deny location access via your device settings, and you may disable location services for the App at any time.
2. How We Use Your Information
We use your information for purposes including:
- To provide and deliver the services and products you request (e.g., processing your orders and custom Abaya designs)
- To improve and personalize your experience with the App (such as by remembering your preferences and measuring usage of features)
- To process payments and prevent fraudulent transactions
- To send you updates about your orders and promotional offers (only with your consent where required)
- To communicate with you about new features, services, or policies, and to provide customer support when you contact us
- To analyze App usage and performance to fix bugs and enhance functionality
- To ensure the security of our App, users, and business (for example, by monitoring fraudulent or suspicious activity)
- To comply with applicable laws and regulations (such as financial record-keeping or consumer protection requirements)
Lawful Basis: We process personal data only when we have a valid legal reason to do so. This means we usually process your data because it is necessary to carry out our contract with you (for example, using your information to create and deliver your custom orders), or because you have given us consent (for example, to receive marketing communications or to enable optional features like location services). In some cases, we may process your data to fulfill a legal obligation or for our legitimate interests – such as improving our services or preventing fraud – and we will always ensure that your data protection rights are safeguarded in those situations.
3. Sharing Your Information
We do not sell your personal data. We only share your information in the following circumstances:
- Service Providers: We may share your information with trusted third-party service providers who perform services on our behalf, such as payment processing, order delivery, customer support, or marketing communications. These providers are given only the information necessary to perform their functions, and they are contractually obligated to protect your data and use it only for those purposes.
- Legal Requirements: We may disclose your information if required to do so by law or legal process, for example in response to a court order, law enforcement request, or regulatory obligation. We will also share information as necessary to enforce our Terms or protect the rights, property, or safety of our users, our company, or others.
- Business Transfers: If we undergo a business transaction such as a merger, acquisition, or sale of assets, your information may be transferred as part of that deal. We will ensure the confidentiality of any personal data involved in such transactions and provide notice before your personal information is transferred and becomes subject to a different privacy policy.
- Data Residency and Transfers: We store and process your personal data on servers located in Bahrain. We do not transfer your personal data outside the Kingdom of Bahrain unless it is necessary to provide our services (for example, sharing your delivery address with an overseas courier for delivery) and only in compliance with applicable data protection laws and with appropriate safeguards in place.
4. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. For example, we may keep certain purchase and payment records to comply with financial regulations and tax laws. When your personal data is no longer needed for these purposes, we will delete it or anonymize it in accordance with our data retention policies.
5. Your Rights and Choices
Under Bahrain’s PDPL and other applicable data protection laws, you have certain rights regarding your personal data. Subject to any conditions or exceptions in the law, these rights may include the right to:
- Access your personal data and request a copy of the information we hold about you
- Request correction or updating of your personal data if it is inaccurate or incomplete
- Request deletion of your personal data when it is no longer needed for the purposes for which it was collected, or if processing it is unlawful
- Object to or request restriction of processing of your data in certain circumstances (for example, you can opt out of receiving marketing messages at any time)
- Withdraw any consent you have given us for processing (such as opting out of location tracking or marketing communications)
- Lodge a complaint with the Bahrain data protection authority if you believe your data has been processed in violation of the PDPL or your privacy rights
To exercise any of these rights, you can contact us using the contact details provided below. We may need to verify your identity before fulfilling certain requests. We will respond to your request within the timeframe required by law and will let you know if any exemptions apply.
6. Security
We take the security of your personal data seriously. We implement reasonable technical and organizational measures to protect your information from unauthorized access, loss, misuse, or alteration. These measures include encryption of sensitive information, access controls, and regular review of our security practices. However, please be aware that no method of transmitting or storing data is completely secure, and while we strive to protect your information, we cannot guarantee absolute security.
7. Children’s Privacy
Our App is not intended for use by children under the age of 18. We do not knowingly collect personal data from anyone under 18 years old. If we become aware that we have collected personal information from a child under 18 without parental consent, we will promptly delete that information from our records.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make significant changes, we will notify you through the App or by other means (such as email) so you can review the updates. Your continued use of the App after we post any modifications to this Policy will signify your acceptance of those changes.
9. Contact Us
If you have any questions or concerns about this Privacy Policy, or if you wish to exercise your data protection rights, please contact us:
- Email: support@abayty.shop
- Phone: +973 38777388
- Address: Manama, Kingdom of Bahrain
