Privacy Policy

Effective date: 12 August 2025

Data Controller: شركة متجر لتصميم و برمجة البرمجيات الخاصه
Commercial Registration: 2024/24633 (UAE)
Unified Address Number: 22194846
Contact (privacy & security): security@trymatjar.com

This Privacy Policy explains how we collect, use, disclose, and protect personal data on Matjar’s website and services, including the waitlist and the marketplace after launch. This Policy follows the UAE PDPL and related executive regulations.

1) Data We Collect

A) You provide

Waitlist / account: name, email, phone, password.
Orders & delivery: delivery address, order details, notes.
Support & feedback: messages, attachments, reviews, ratings.
Identity checks (if required by law): basic identity data and proofs.

B) Collected automatically

Technical & usage: IP address, device/OS, browser, pages viewed, clicks, session timestamps.
Cookies / local storage: session management, preferences, analytics, marketing (see Cookies).

C) From third parties (categories only)

Payment service provider: payment status, limited payment metadata.
Logistics partners: tracking numbers, delivery status.
Auth/identity providers (if enabled): basic profile for sign-in.
Fraud/risk tools: signals to detect abuse and protect accounts.

2) Why We Use Personal Data (PDPL legal bases)

We do not intentionally collect sensitive data (e.g., health, religion). Do not submit such data in free-text fields.

Operate the service: account creation, cart/checkout, order processing, delivery, and support. Basis: Contract; compliance with law where applicable.
Waitlist & service communications: launch notices, feature updates, transactional messages (e.g., order or password reset). Basis: Consent (waitlist) and Contract (transactional).
Personalization & product improvement: recent views, recommendations, performance monitoring, debugging. Basis: Consent (where required for cookies); otherwise Contract/legitimate purposes permitted by PDPL.
Fraud prevention & security: protect users, investigate misuse, and secure systems. Basis: Legal obligation and other grounds permitted under PDPL.
Legal & compliance: tax, accounting, responding to lawful requests, asserting or defending legal claims. Basis: Legal obligation / establishing or defending rights.

You can withdraw consent at any time where processing relies on it.

3) How We Share Data (categories)

We share personal data only as needed to provide the service or comply with law:

Payment service provider (to process payments and refunds).
Merchants (to fulfill the items you purchase).
Logistics & delivery partners (to ship and track orders).
Cloud & IT service providers (hosting, email, storage, analytics).
Fraud/risk and security partners (abuse detection, incident response).
Professional advisers and authorities (legal, regulatory, dispute handling).

We do not sell personal data.

4) International Transfers

Your data may be processed outside the UAE. When we transfer personal data internationally, we use mechanisms recognized by the UAE PDPL (e.g., adequacy decisions by the UAE Data Office, contractual safeguards, or your explicit consent) and apply appropriate technical and organizational protections.

5) Retention

We keep data only as long as needed for the purposes above or as required by UAE law:

Waitlist: until you unsubscribe or 24 months after last interaction (whichever is sooner).
Account & orders: while your account is active and 5 years after the end of the fiscal year of your last transaction (UAE recordkeeping).
Customer support: 3 years after closure.
Security logs: up to 12 months, unless needed longer for investigations.
Cookies: per cookie lifespan (see Cookies).

When no longer needed, data is deleted or irreversibly anonymized.

6) Your Rights (UAE PDPL)

Subject to PDPL and exceptions, you can:

Access your data and request a copy.
Correct inaccurate data.
Delete data that is no longer needed or processed unlawfully.
Restrict or object to certain processing.
Port your data, where technically feasible.
Withdraw consent where processing is based on consent.
Challenge automated decisions that significantly affect you and request human review.
Complain to the UAE Data Office.

To exercise rights, email security@trymatjar.com. We may need to verify your identity.

7) Marketing Communications

Waitlist: we email launch and product updates based on your opt-in.
Unsubscribe: use the link in any email or contact us.
Transactional emails (e.g., receipts, delivery updates) are service-critical.

8) Cookies & Similar Technologies

We use cookies and local storage for:

Essential: authentication, cart, checkout, security.
Preferences: language, currency, saved settings.
Analytics: traffic, performance, error diagnostics.
Marketing (optional): measuring campaigns and retargeting.

Your choices: UAE visitors see a banner to manage non-essential cookies. You can also block cookies via your browser; essential features may stop working if essential cookies are blocked.

9) Children

Matjar is intended for individuals 18+. We do not knowingly collect data from minors. If you believe a minor provided data, contact us and we will remove it.

10) Security

12) Third-Party Links

13) Changes to This Policy

We apply administrative, technical, and physical safeguards appropriate to the nature of the data, including encryption in transit, access controls, and continuous monitoring. No system is perfectly secure—use a strong password and keep it confidential. Report incidents to security@trymatjar.com.

11) Automated Decision-Making

We may use automated checks (e.g., fraud/risk scoring). If a decision has a significant effect on you, you can request human review and contest the outcome.

If you follow links to third-party sites or apps, their policies and terms apply.

We will post updates here and change the “Effective date.” Material changes may be communicated via email or in-app notices.

14) Contact

Data Controller: شركة متجر لتصميم و برمجة البرمجيات الخاصه
Commercial Registration: 2024/24633
Unified Address Number: 22194846
Email: security@trymatjar.com

‍