Privacy policy

Al Sadiq Store — الصادق ستور

Al Sadiq Store Privacy Policy For alsadiq.tech and the Al Sadiq Store app Last updated: 27 October 2026 1. Who we are and how to contact us Al Sadiq Store is an electronics and technology retailer in Al-Sadiq, Basra, Iraq. For privacy enquiries, corrections or deletion requests, contact jamal@alwaeli.me or WhatsApp +9647846174779. 2. Information we use You can browse, search and use the cart and favourites without an account. The app stores the cart, favourites, search history and viewing history locally on your device. Search and viewing history can be cleared in the app settings. When you create an account, we use your name, email address and password. Passwords are stored as secure hashes, not readable text. If you choose Google Sign-In, we use the account identifier, name and email provided by Google; we do not receive your Google password. Your customer account is shared between the website and app. The app keeps a session token in secure device storage. The website uses necessary cookies for sessions, sign-in, language and form protection. We do not request a date of birth or age declaration at registration. For a purchase, we use the recipient's name, phone number, governorate, address, delivery notes, products, quantities, prices, order amount and status. Saved addresses are retained to simplify later purchases. We use limited operational information to protect the service and diagnose faults, including security events, sign-in attempts and technical request information. Hosting logs may include an IP address and request time. Do not include passwords or sensitive information in notes or reviews. 3. Purposes and communications We use information to manage accounts, orders, inventory, delivery, collection and warranty, recover passwords, protect the service and resolve faults. Phone, WhatsApp and email communications concern an order or a service request you initiate, such as password recovery or a correction request. We do not use these channels to send marketing offers. Payment is cash on delivery. The current delivery fee is IQD5,000 throughout Iraq. The app does not collect payment-card details. 4. Access and recipients The store's relevant departments, including sales and customer service, access the information necessary for their work according to their responsibilities and permissions. An order includes the recipient's name, phone and address; access to these fields is therefore not described as exclusive to customer service. We work with multiple delivery companies. We provide the company assigned to an order with the recipient's name, phone, governorate, address, order amount and product details to deliver it, collect payment and handle related communications. We use Hostinger for hosting and email, Google for optional sign-in, and Firebase Cloud Messaging for notifications. These providers process information needed for their services under their policies and may use servers outside Iraq. We do not sell customer data or share it with advertising recipients or other parties for independent commercial purposes. We may disclose the necessary minimum when a binding legal requirement applies. 5. Notifications With notification permission, we use Firebase, a device notification token and language to deliver order updates. Promotional notifications require a separate opt-in and can be disabled in the app's notification settings. You can also revoke notification permission in device settings. The app currently embeds no advertising network or marketing analytics service. 6. Product reviews Eligible buyers may rate a delivered purchase and submit a comment for moderation. After approval, the first name, rating and comment are public. Review reports are private to store moderation. You may delete your review in the app; deleting the account removes its reviews and reports. Hidden-reviewer preferences are stored locally on your device. 7. Retention and removal Accounts, profiles and saved addresses remain until the account owner requests deletion. Inactivity does not trigger automatic account deletion. Profile details and saved addresses can also be changed or removed independently. We retain the recipient's name, phone, governorate, address and delivery notes in account-linked orders for two years after delivery or cancellation for warranty and order review. Daily maintenance then removes these fields from the order and retry snapshots. Open orders retain the information needed until closure. If a historical closure date was not recorded, retention starts when that order enters the retention system. Products, quantities, amounts, dates and status remain as purchase records for review and accounting, and remain linked to an active account's history. Removing delivery information does not erase the financial record. Backups are made weekly. Store-managed backups are retained for 90 days, after which older copies are removed. Information removed from the active database may therefore remain in a protected backup until that backup expires. Backups are not used for marketing or ordinary operations. When restoring a backup, deletion and correction requests completed after its date must be reapplied before returning it to service. Store-managed error and security logs are retained for 30 days, after which older entries are removed. Logs maintained directly by a hosting or service provider follow that provider's controls and retention periods; the store does not directly control all such logs. 8. Your choices and account deletion You may correct profile information, delete saved addresses and change notification preferences. In the app, use Account → Profile → Delete account. On the website, use alsadiq.tech/account.php → Delete account. External instructions are available at alsadiq.tech/mobile-delete-account.php. Deletion from either platform removes the shared sign-in identity, name, email, sign-in methods, saved addresses, sessions, device registrations, notification inbox and reviews. Order records and delivery details follow the retention periods above for fulfillment and warranty. Send a correction or deletion request from your registered email to jamal@alwaeli.me. We verify ownership without requesting your password and process requests as soon as possible, within 72 hours after verification. Account deletion does not necessarily erase the local cart, favourites or browsing history; remove them in the app or clear its data in device settings. 9. Security We use HTTPS, password hashing and access restricted to relevant store departments. Private service identities and configuration are kept outside the public website directory. No transmission or storage method is absolutely secure. If you suspect unauthorised account use, change your password and contact us. 10. Ages and external services The service is intended for ages 12 and above. Purchases by users under 18 require a parent or guardian's supervision and permission. We do not collect birth dates at registration and do not claim to technically verify every user's age. A parent or guardian may contact us about a minor's account or data. When opening WhatsApp, email or another external service, that service's policy also applies to its use. Google Sign-In and notifications are subject to Google's relevant policies. 11. Policy updates We may update this policy when services or data practices change, identify the published version date and announce material changes on the website or app.

jamal@alwaeli.me