This policy explains what personal information SaltanatMall collects when you use the SaltanatMall mobile app and the saltanat.af website — the online shop, restaurant ordering, the gym and delivery — why we collect it, who we share it with, and the choices you have.
Who we are
SaltanatMall runs the app and the website and is responsible for the information described here. You can reach us using the contact details at the end of this page.
What we collect
We only collect what we need to run the service:
- Account details: your name, username, email address, phone number and password (stored only in scrambled, hashed form). Optionally your date of birth, gender and profile photo.
- Delivery addresses, including the point you pin on the map.
- Orders, returns, payments recorded against them and loyalty points. Payment is cash on delivery; we do not receive or store card numbers.
- Messages you send to support or to a branch, and the photos, videos, voice notes and documents you attach. Reviews and ratings you write.
- Your location, only while you use the app and only if you allow it: to set a delivery address and find the branch near you. If you work for us as a courier, your location during an active delivery is shared with the customer of that order.
- Technical information: your IP address, device and operating system type, app version and language, and records of errors, used to keep the service secure and working.
- On the website, cookies that keep you signed in and remember your language, basket and branch. We do not use advertising or tracking cookies.
How we use it
- To take, prepare and deliver your orders, and to let you follow them.
- To create and secure your account, including sending sign-in and verification codes by email.
- To answer your questions and complaints.
- To award and redeem loyalty points and apply discounts.
- To prevent fraud and abuse and to fix problems.
- To keep the records the law requires.
We do not sell your personal information, and we do not use it for third-party advertising.
Who we share it with
- Our staff at the branch handling your order, and only as far as their job needs.
- The courier delivering your order: your name, phone number and delivery address.
- Service providers who run parts of the service for us: server hosting and file storage, email delivery, and Google Maps, which receives the courier's and the delivery address's coordinates to work out the route and arrival time.
- Authorities, when the law requires it or to protect people's safety.
How long we keep it
- Account details are kept while your account exists.
- Orders and payment records are kept for as long as accounting and tax law requires.
- Photos, videos, voice notes and documents sent in chat are deleted after 30 days; the text of the conversation stays with your account.
- When an account is deleted, its personal details are erased or made anonymous, except records we are legally required to keep.
How we protect it
All traffic between the app, the website and our servers is encrypted (HTTPS). Passwords are never stored in readable form, and your sign-in is kept in your phone's secure storage. Staff can only see the information their role needs.
Your choices
- You can see and correct your details in your profile at any time.
- You can turn off location, camera, photo and microphone access in your phone's settings. The app keeps working; only the feature that needs it stops.
- You can ask us to delete your account and personal information by contacting us. We complete the request within 30 days.
Children
The service is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.
Changes to this policy
If we change this policy we will update this page and the date at the top. For important changes we will also tell you in the app.
Contact us
For any question about your information, or to ask for it to be deleted:
Or message us in the app, under Help & support.