Privacy Policy
Last updated: [--/--/----]
1. About this Privacy Policy
------------- is a shopping platform offering beauty, skincare, cosmetics, personal care products, accessories, and other products.
This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you use the ---------- mobile application, place an order, contact customer support, participate in promotions, or otherwise interact with our services.
Legal operator: Al Tashkeel International LLC
Commercial Registration (CR) number: 1039523
Registered address: 76, Muttrah High Street, Muttrah, Muscat, Sultanate of Oman
Customer support phone: +968 9321 3208
Privacy and customer support email: [INSERT OFFICIAL EMAIL ADDRESS]
Website: [INSERT PUBLIC PRIVACY POLICY URL]
In this policy, “-----------,” “we,” “us,” and “our” refer to Al Tashkeel International LLC, where it is the entity responsible for operating the ----------- platform and processing personal information.
This policy applies to ----------- services offered in Oman. It should be read together with any applicable terms and conditions, returns policy, and other notices provided to you.
2. Personal Information We Collect
Depending on how you use -----------, we may collect the following categories of information.
A. Account and contact information
Name
Phone number
Email address
Date of birth or age, where provided or required for a particular feature
Account and authentication information associated with phone OTP, email/password, Google sign-in, or Sign in with Apple
We use this information to create and manage accounts, authenticate users, communicate about orders, and provide customer support.
B. Delivery and order information
Delivery address and delivery instructions
Products ordered, order history, and order status
Order identifiers and fulfilment details
Delivery contact information
Payment status and information needed to reconcile an order
We use this information to process orders, arrange delivery, manage returns and refunds, handle customer enquiries, and maintain necessary business records.
C. Payment information
Online payments are processed through Paymob payment gateway. ---------- receives the payment and transaction information needed to manage orders and confirm payment.
----------- does not intend to store full payment-card details directly. The payment provider may process card information under its own privacy and security practices.
For cash-on-delivery orders, relevant delivery partners may receive the payment status or collection information needed to complete the delivery.
D. Reviews, preferences, and promotions
We may process:
Product ratings and reviews
Photos or other content you upload with a review
Wishlist and saved-product information
Loyalty points, referrals, coupon use, and competition entries
We use this information to display reviews, operate loyalty and promotional programmes, administer rewards, and improve the shopping experience.
Please avoid including sensitive personal information in public reviews or uploaded photos.
E. Customer support information
When you contact us through phone, WhatsApp, email, in-app support, or social media, we may process your contact details, messages, order references, and information you choose to provide. We use this information to answer enquiries, investigate complaints, resolve order issues, and improve customer service.
F. Location information
---------------- uses delivery-address information and may request device-location access for location-related features.
If you grant location permission, the app may receive device-location information for the feature you use. The exact location data collected, when it is accessed, and whether it is shared with Google Maps or another provider must be confirmed against the app's actual implementation.
G. Technical and usage information
The app and its infrastructure may process essential technical logs needed to operate, maintain, and secure the service. Depending on the systems and SDKs actually installed, these logs may include IP address, timestamps, device or app information, diagnostic events, and security records.
H. Skin or health-related information
SARAAHA may introduce surveys or features through which users provide information about skin concerns or related preferences. Information about a person's health or skin condition may qualify as sensitive personal data under applicable law.
We will not activate collection of sensitive information through surveys or profiles until the applicable legal requirements, consent or other lawful basis, safeguards, and any required permits have been assessed and implemented.
Please do not provide sensitive health information unless a feature specifically requests it and explains how it will be used.
3. How We Use Personal Information
Subject to applicable law and any permissions or consents required, we use personal information to:
Create and manage accounts and authenticate users.
Display products and manage shopping features, wishlists, and reviews.
Process purchases, payments, deliveries, returns, refunds, and cancellations.
Coordinate fulfilment through our warehouse, fulfilment providers, and delivery partners.
Provide customer support and resolve complaints.
Operate loyalty points, referrals, coupons, competitions, and rewards.
Send service messages about accounts, orders, payments, deliveries, and important changes.
Send promotional communications through push notifications, WhatsApp, SMS, and in-app messages where permitted and where the required permission or consent has been obtained.
Measure advertising performance, understand campaign conversions, and conduct retargeting or personalised advertising using Meta technologies, subject to applicable law, platform requirements, and required permissions.
Protect the platform, detect suspicious activity, maintain security, and investigate misuse.
Meet applicable legal, accounting, regulatory, and dispute-resolution obligations.
Improve the service and assess new features, including surveys, where appropriately disclosed and authorised.
We do not treat permission to receive order-related messages as automatic permission to receive marketing messages.
4. Marketing and Advertising
---------- uses Meta advertising technologies for advertising measurement, retargeting and personalised advertising.
Depending on the technologies configured in the app and other services, information about app activity, purchases, or advertising interactions may be transmitted to Meta or its service providers.
The exact data transmitted, including whether advertising identifiers, device information, customer identifiers, or event details are transmitted, must be verified against the live implementation.
We will provide the notices and obtain the permissions or consents required for applicable advertising and tracking activities. Where Apple's App Tracking Transparency framework applies, we will request permission through the required Apple system prompt before tracking.
Promotional messages may be sent through push notifications, WhatsApp, SMS, and in-app messages only in accordance with the applicable consent and marketing requirements. We will provide an effective method to withdraw marketing consent or opt out.
Turning off promotional messages should not prevent necessary service communications, such as order or delivery updates.
5. Cookies, SDKs, and Similar Technologies
The SARAAHA mobile app and its service providers may use software development kits (SDKs), identifiers, APIs, and similar technologies to provide essential functions, deliver notifications, support location features, measure advertising, or maintain app security.
Our confirmed technology stack includes Flutter, Django, PostgreSQL, AWS hosting, Firebase Cloud Messaging, Google Maps or location services, and a payment gateway. Additional analytics, crash-reporting, authentication, messaging, and advertising components remain subject to technical verification.
We will identify the relevant third-party technologies and explain their data practices in our disclosures. Where consent or device-level permission is required, we will request it before the relevant processing takes place.
6. How We Share Personal Information
We may disclose personal information to the following categories of recipients when necessary for the purposes described in this policy and permitted by law.
A. Delivery partners
External delivery partners may receive the customer's name, phone number, delivery address, order identifier, delivery instructions, and the cash-on-delivery payment status needed to complete delivery and collect payment.
B. Hosting and essential service providers
We use AWS for hosting and storage and use other essential providers to operate the platform. The precise providers, their roles, data access, and storage locations must be confirmed before publication.
Providers should be given access only to information needed to perform their contracted services and should be subject to appropriate privacy, security, and confidentiality obligations.
C. Payment providers
Our payment gateway processes online payments and receives the information required to authorise or complete transactions. It may process personal information under its own contractual and privacy arrangements.
D. Meta and advertising service providers
Information may be shared with Meta or associated service providers for the advertising measurement, retargeting, purchase-conversion tracking, and personalised advertising described in this policy, subject to applicable law and required permissions or consents.
E. Customer support and social media platforms
If you contact us through WhatsApp or social media, the relevant platform will process information associated with that interaction under its own terms and privacy policy.
F. Legal and safety disclosures
We may disclose information when required by applicable law, a valid legal process, or a competent authority, or where disclosure is otherwise legally permitted and necessary to protect rights, safety, or prevent fraud.
G. Marketplace sellers
------------- currently indicates that it does not share customer details directly with marketplace sellers. We will maintain this practice unless the actual fulfilment model changes. If a seller must receive personal information to fulfil an order, we will update our disclosures and arrangements before that processing occurs.
We do not describe personal information as being sold unless that accurately reflects the business practice. Our current stated practice is to use Meta advertising tools and essential service providers rather than sell customer personal information.
7. International Data Transfers
---------------- uses AWS and third-party technologies. Depending on the selected hosting region and provider configuration, personal information may be stored or accessed outside Oman.
The exact locations and transfer arrangements have not yet been confirmed. Before publication, we will identify relevant storage and processing locations and assess any transfer conditions, approvals, safeguards, or other requirements under the applicable Omani data-protection framework.
Where a transfer is permitted, we will use appropriate contractual, organisational, and technical safeguards as required by law.
8. Data Retention
We retain personal information only for as long as necessary for the purposes described in this policy, subject to applicable legal obligations.
Different records may need different retention periods, including:
Account and profile information
Orders, invoices, payment references, and accounting records
Delivery and customer-support records
Reviews, photos, loyalty and promotional records
Consent and marketing opt-out records
Security and technical logs
Records needed to investigate complaints, resolve disputes, or comply with legal requirements
We have not yet established a final retention schedule. We will define and implement one before publication, including when information is deleted, anonymised, or securely restricted.
9. Your Privacy Rights and Choices
Subject to applicable law and any lawful exceptions, you may be entitled to request access to your personal information, correction of inaccurate information, deletion, or other available rights relating to its processing.
You may also withdraw consent where processing is based on consent, and opt out of promotional communications.
You can initiate account deletion through the in-app deletion feature. We intend to delete the account and associated personal information, except for records that must lawfully be retained or that may otherwise be retained under an applicable legal exception.
Deleting an account may not immediately remove every legally required transaction record. Where records must be retained, we will restrict their use to the relevant lawful purposes and delete them when retention is no longer required.
To make a privacy request, contact:
Privacy contact: [INSERT OFFICIAL PRIVACY EMAIL OR DESIGNATED CONTACT]
Customer support phone: +968 9321 3208
Address: 76, Muttrah High Street, Muttrah, Muscat, Sultanate of Oman
We will establish a documented process to verify requests, respond within applicable legal time limits, and explain any lawful reason why a request cannot be fully fulfilled.
10. Minimum Age and Children’s Privacy
------------ is intended for individuals aged 13 years and above. Individuals under the age of 13 are not advised to create an account or use the application.
We may process personal data of users aged 13 and above in accordance with applicable laws and regulations, including Oman’s Personal Data Protection Law and its implementing regulations. Where parental or legal guardian consent is required by applicable law, we will obtain the necessary consent before processing the relevant personal data.
We do not knowingly collect personal data from children under the age of 13. If we become aware that personal data has been collected from a child under 13 in violation of applicable requirements, we will take appropriate steps to address the situation, including deleting the data where required by law.
Parents or legal guardians who believe that a child under 13 has provided personal data to __________________ may contact our support team to request its review and appropriate action.
11. Security
We use encryption for stored data where supported. We are assessing and documenting additional safeguards appropriate to the personal information processed by ____________________
These safeguards should include access restrictions, secure authentication, protection of app and API communications, backup controls, appropriate staff access, vendor security requirements, and monitoring for unauthorised access.
No online service can guarantee absolute security. We will take appropriate measures to protect information and respond to suspected security incidents in accordance with applicable law.
12. Personal Data Breaches
If we become aware of a suspected personal-data breach, we will assess and contain the incident, investigate its scope, preserve relevant evidence, take remedial action, and document the response.
Where notification to the competent authority or affected individuals is required under applicable law, we will make the required notifications within the applicable time limits and provide the information required by law.
We will establish a documented incident-response procedure, including responsibilities, escalation contacts, notification assessments, and recordkeeping, before launch.
13. Third-Party Services
Some services accessed through -------------, including payment processing, Google Maps or location services, WhatsApp, social media, Meta advertising technologies, and hosting providers, may be operated by third parties.
Those providers may process information under their own privacy notices and contractual arrangements. Their processing should also be assessed to determine the protections required for information shared by SARAAHA.
We will maintain an accurate list of relevant providers and update this policy when material changes are made to the app or its data practices.
14. Changes to This Policy
We may update this Privacy Policy when our services, technology, legal obligations, or data practices change.
We will publish the updated policy with a revised “Last updated” date and provide any additional notice or obtain any additional consent required by law.
15. Contact Us
For questions about this Privacy Policy, personal-information requests, or privacy complaints, contact:
Al Tashkeel International LLC — -------------------
76, Muttrah High Street, Muttrah, Muscat, Sultanate of Oman
Phone: +968 9321 3208
Email: [INSERT OFFICIAL CUSTOMER SUPPORT / PRIVACY EMAIL]
Privacy contact or Data Protection Officer: [INSERT DESIGNATED CONTACT, IF APPLICABLE]
This Privacy Policy is intended to explain ---------------'s data practices and does not replace any separate notices, permissions, consent mechanisms, or legal procedures required for particular types of processing.