Privacy Policy
|
Entity responsible for the app |
Company name, a limited liability / joint-stock company registered in the Syrian Arab Republic under commercial register no. |
|
Company address |
Official address, Aleppo |
|
The app |
Zajel Delivery |
|
Complaints and support number |
Phone number — Email |
|
Fax and PO box |
Fax — PO box |
|
Version and effective date |
Version 1.0 — / / 2026 |
We respect your privacy and are committed to protecting your data. This policy explains what data we collect and why, how we protect and share it, and what your rights are. It is shown to you at first sign-up and after every app update; the app cannot be used before you accept it, and your acceptance is stored with its date and the policy version.
1. The app and the responsible entity
The app is an electronic delivery platform in Aleppo city (customers, stores and riders) operated by the entity named at the top of this document, which is responsible for your data and for applying this policy. Database and data protection officer: Name.
2. Who this policy covers
This policy applies to customers, stores, riders and anyone who uses the app or contacts the company through it.
3. Data we collect
|
Category |
Data |
Purpose |
|
Customer |
Name, Syrian mobile number, delivery addresses and coordinates, order history, consents |
Account, fulfilling orders, communication, invoicing, and managing loyalty points and Pro membership |
|
Store |
Store and owner data, address, products and prices, financial data |
Running the store and settling earnings |
|
Rider |
Personal data, ID and vehicle documents, phone, location while working, earnings |
Rider approval, assigning and tracking orders, safety, settlement |
|
Technical data |
Device token for notifications, app version and device system |
Sending notifications and diagnosing faults without personal data |
We collect only the minimum data needed. We do not collect sensitive data that the service does not need, and we do not access your contacts, photos or microphone.
Ratings and comments you post may be visible to other users and we cannot guarantee that they stay private.
3-1. Cookies and technical data
- When you use the web version we use cookies to remember you, keep your settings and run the site; you can block them in your browser settings, knowing that some functions may then not work.
- We automatically record technical data such as IP address, browser type, device system and app version to run the service, analyse performance and detect fraud, and we do not use it to identify you except as the law requires or to protect accounts.
- The web version uses Firebase Analytics from Google for aggregated usage statistics (pages visited, device type); delete this bullet if the service is disabled.
- We do not use cookies for advertising and do not allow third-party advertisers to track you.
4. Device permissions
- Location: to set the delivery address and show nearby stores (customer), and to track and assign orders (rider, during the shift).
- Phone call: for the customer, rider and store to call each other when needed.
- Storage: to save images and files you upload (such as product photos and rider documents).
The app requests no other permission. You can withdraw permissions in your device settings, knowing that some services will then not work.
5. How we use your data
- To fulfil, deliver and track orders and communicate with you about them.
- To verify your identity and phone number, protect accounts and prevent fraud.
- To issue invoices and settle financial accounts.
- To handle complaints and improve the service.
- To comply with applicable laws, the license conditions and requests of competent authorities.
We do not sell your data or use it for purposes other than those stated here, and we send you marketing messages only with your consent, and you can stop them at any time in the app settings or by asking the support channel.
6. Sharing data with third parties
We share your data with no third party except with your consent, given by accepting this policy, and only as far as needed to provide the service:
|
Party |
Data shared |
Purpose |
|
Local SMS gateway name |
Phone number and message text |
Verification code, order code and invoice |
|
Google Maps |
Coordinates and address text without user identity |
Showing the map and calculating distance |
|
Firebase Cloud Messaging (Google) |
Device token and notification text |
Push notifications |
|
The store and the rider |
What your order needs: name, address, phone number and items |
Preparation and delivery |
|
Licensed e-payment providers (later) |
Payment transaction data |
Completing payment |
|
Official authorities |
What the law or the regulator requests in writing |
Legal compliance |
Some of this data may be processed on the servers of the third parties named, and is subject to their policies. The party designated by the regulator has read-only access to the platform database under the license conditions. If the company is transferred or merged, or the license is transferred with the regulator's prior approval, the data may be transferred to the new entity, which must comply with this policy and notify you.
The app may contain links to other sites and we are not responsible for their privacy practices.
7. Retention and archiving
- Your data is stored on servers inside the Syrian Arab Republic with a licensed hosting provider.
- We keep customer and rider data and financial records for at least the license period, and riders' location data (recorded every minute while moving and every five minutes while stopped, only while the rider is working) online for at least one full year.
- If you delete your account or any record about you is deleted, we keep a complete copy of it in a secured archive inside the database for the same period; it is used only to comply with the license and the law.
- We take regular backups inside Syria and do not transfer your data outside it.
- Technical logs contain no personal data.
8. Protecting your data and keeping it confidential
- Encrypted connection between the app and the server (HTTPS), passwords stored hashed, and encrypted backups.
- Access to data is limited to authorised staff and only as needed, their operations are logged, and they are bound by a confidentiality undertaking.
- The rider sees only what is needed to hand over your order, and this ends with the order.
- If a breach affects your data we notify the competent authorities within 72 hours and inform you if you are at risk.
- We continuously monitor the system to detect attacks and intrusion attempts, and if suspicious activity is found we reserve the right to suspend accounts or services to protect data.
- We make every reasonable effort to protect your data, but no system is 100% secure, which is why we handle any incident as described above.
- Protect your account: never share your password, verification code or order code with anyone.
9. Your rights
- To view and correct your personal data in the app or by asking the support channel.
- To know what we collect, why, and with whom we share it.
- To withdraw your consent to sharing or marketing messages.
- To delete your account from the app at any time once your ongoing orders are completed: it is removed from all interfaces and your data is not used for any purpose, while a secured copy is kept as far as the license and the law require (clause 7).
- To file a privacy complaint at complaints number or with the regulator.
10. Minors policy
We do not knowingly collect data from persons under 18 without their guardian's consent. If we learn that an account belongs to a minor without consent, it is disabled, and a guardian may ask to see the minor's data and have the account disabled by contacting us.
11. Breach of this policy and the action taken
Users are prohibited from collecting, publishing or misusing other people's data through the app. In case of breach the company takes the actions listed in clause 11 of the Terms of Use (warning, suspending or closing the account, claiming compensation, reporting the breach to the competent authorities). Any company employee who breaches data confidentiality bears disciplinary and legal responsibility.
12. Changes to this policy
We may amend this policy and obtain the regulator's approval before any change that affects your rights or the sharing of your data. We show the amended version in the app and ask for your acceptance before you continue using it, and we keep a record of versions and your consents.
13. Contact
For any question about this policy or your data: phone number — fax — email — postal address and PO box.