1.1 Data Controller Identity

When it comes to applicable data protection laws, we at YALLAH CART TRADING LLC happen to be the primary data controller responsible for determining the means and purposes of how to process your personal data collected through or by this platform. Our entity and contact details are as follows:

• Corporate Entity Name: YALLAH CART TRADING LLC
• Platform Domain: https://yallahcart.com/   
• Registered Business Address: ___________________________
• Operating Hours: Monday to Saturday, 9:00 AM to 6:00 PM GST
• Customer Support Channels: You can talk to our agents via real-time live chat; if you wish to send us an email or call us directly, check out our contact information below:
• Email Support: _______________________
• Call Support: _______________________

1.2 Applicable Governing Law & International Flexibility

We developed this Privacy Policy while ensuring it complies with the federal laws & regulations of the United Arab Emirates (UAE). This policy complies with Federal Decree-Law No. (45) of 2021 regarding the Protection of Personal Data (PDPL) and Federal Decree-Law No. (14) of 2023 on E-Commerce. It complies with the UAE’s consumer protection & electronic transaction frameworks as well.

Your “personal data” or “personal information” actually means any piece of information relating to an identified or identifiable natural person. We collect different categories of personal data & information from this platform’s users and about this platform’s users; this data collection may or can happen directly from your users interacting with us, automatically through the usage of their devices, and from trusted third-party service providers. This section will go over these distinct & unique categories of personal data collection to help you better understand how we make use of this information. We do not sell your personal information.

2.1 Information You Provide to Us Directly

We collect the personal information that you, as a user and consumer, willingly enter, upload, or submit when you interact with our platform, create an account, place an order, subscribe to our marketing updates, or communicate with our customer service. This information can take these shapes:

• Identity/Profile Data: Your full legal name, chosen pronouns, preferred salutation, date of birth, username, account password, user profile preferences, etc.
• Contact Information: Your delivery address, billing address, emirate, city, town, active mobile phone number, primary email address, etc.
• Order & Transaction Data: All relevant details about the products you have viewed, the items you placed in your cart, the purchases you completed, your order history, numbers of your transactions, purchase values, chosen fulfillment speeds (Express vs. Standard), cancellation requests, return submissions, customer service correspondence, etc.
• Financial & Payment Information: All relevant details our platform needs to complete a transaction settlement, e.g., payment method choice (Visa, Mastercard, Apple Pay, etc.); it should be noted that we at YALLAH CART TRADING LLC do not store, process, view, or retain raw credit/debit card security credentials on our internal systems (please read our Terms & Conditions for more information)
• Communication & Support Data: Your messages, chat logs, feedback, ratings, reviews done by you, inquiry submissions sent by you, etc.
• Marketing & Preferences Data: Your preferences about getting our email newsletters, SMS alerts, promotional communications, your response records to our campaigns, etc.

2.2 Information Collected Automatically (Cookies & Tracking Technologies)

When you browse or interact with yallahcart.com, our services and automated tracking systems log standard technical data about your equipment, browsing actions, device patterns, etc. These systems collect information about you like this:

• Technical Device Data: Your IP address, OS type and version, web browser type and version, device hardware specs, screen resolution, language settings, time zone, unique device identifiers, etc.
• Usage & Behavioral Data: The URLs you visited on our platform, clickstream metrics, the pages you viewed on our website, how much time you spent on certain categories of products, the search queries you made, bounce rates, navigation pathways, referral web addresses, etc.
• Location Data: Your approximate geographical location derived from your IP address to help with UAE delivery address verification

2.3 Information Received from Third Parties

Authorized third-party partners and service providers may also help you collect personal data about you. These partners often include logistics & delivery partners (such as Aramex, iMile, Shippa, etc.), payment gateways & fraud prevention partners, analytics & advertising networks (e.g., Google, Meta, TikTok, etc.), and others.

We process your personal data solely for certain, lawful, transparent, and explicitly commercial purposes. We do not sell your personal data.

3.1 Performance of a Contract

We process the personal information collected about you when we have to execute or perform the purchase agreement established between YALLAH CART TRADING LLC and you as you place an order on our platform. This data collection becomes necessary because we have to:

• Process, pack, and eventually dispatch your order
• Manage delivery routing and transmit recipient details to our courier partners
• Send you an automated order confirmation message, shipping alerts, SMS/email order tracking updates, etc.
• Handle order cancellations, manage 14-day return workflows, execute financial refunds, etc.
• Manage your account registration and authentication

3.2 Compliance with Legal & Regulatory Obligations

We process your personal data when we have to satisfy commercial laws, taxation statutes, and administrative rules enforced within the UAE. These tasks & responsibilities include:

• Calculating and documenting VAT
• Keeping corporate transaction logs, commercial records, etc.
• Cooperating with law enforcement, regulatory bodies, legal authorities, etc.
• Preventing, detecting, thwarting, and prosecuting fraudulent orders and other malicious activities

3.3 Legitimate Business Interests

We process your personal information to support and pursue our legitimate commercial interests when it comes to operating, securing, executing, and improving our eCommerce operations (but ensuring that these interests do not override your fundamental privacy rights). We use the data collected about you to:

• Optimize the architecture of our platform, its search functionality, layout design, and user navigation
• Conduct aggregate statistical analysis, market research, catalog planning, and inventory forecasting
• Operate real-time website live chat services to resolve user inquiries right away
• Monitor server infrastructure, maintain our website’s cybersecurity integrity, defend our platform against DDoS attacks or data breach attempts, etc.
• Enforce our Terms & Conditions

3.4 Consent (Marketing & Direct Communication)

When applicable laws ask us to do this, we rely on your explicit, voluntary consent to process your data for different outreach activities, e.g., sending our marketing newsletters, promotional discounts, seasonal sales announcements, new arrival alerts, etc. We also rely on your data to deploy non-essential third-party tracking cookies and behavioral advertising tools on your web browser. You have the legal right to withdraw your consent for marketing communications at any time by clicking the Unsubscribe button at the footer of our promotional emails.

Our website uses cookies, pixel tags, web beacons, SDKs (software development kits), & also script integrations to tell you apart from other users. These cookies allow us to personalize your browsing experience by remembering your shopping cart items, measure the effective results of our marketing campaigns, and deliver customized online ads.

4.1 Overview of Integrated Analytics & Pixel Stack

We integrate different industry-standard third-party analytics and marketing tools on our site, so these tools may set cookies or collect device metrics, browsing actions, and interaction events. This is a breakdown of the parties that we cooperate with in cookie collection:

• Google Analytics: Google Analytics will collect anonymized, aggregate metrics about our website traffic, how many visitors we got, navigation flows, bounce rates, session durations, and other factors. This data helps us understand how users usually interact with our eCommerce website.
• Google Tag Manager: Google Tag Manager is a centralized management framework to deploy and regulate analytics tags & code snippets on our platform.
• Google Ads: Google Ads will lead to search engine marketing. We rely on this service to track ad conversion performance. This service also lets us display targeted ads to a prospect.
• Meta Pixel (Facebook & Instagram): We rely on Meta Pixel to track user engagement, measure ad conversion attribution, create custom audience profiles, and deliver certain personalized social media ads.
• TikTok Pixel: TikTok Pixel measures promotional campaign efficiency. We also rely on this service to attribute short-form video conversions and optimize targeted advertising delivered to our TikTok users.

4.2 Categories of Cookies Employed

The cookies we use have different categories. Some cookies are necessary for our platform to operate; we rely on these essential cookies for security validation, account login, shopping cart persistence, etc. Disabling them is impossible in our systems. The second category of cookies is performance & functional cookies; we rely on these cookies to remember user preferences, display settings, language options, and streamline checkout operations. Analytics cookies are used to gather aggregate data on page visitors and error reports. The final category is that of targeting cookies that are placed by authorized third-party ad networks.

4.3 Managing Cookie Preferences

You can manage or modify your cookie settings whenever you want through your web browser preferences. Most web browsers let you block third-party cookies. You can also clear existing cookies or receive alerts when cookies are sent from your device. But keep in mind that if you disable essential or functional cookies, you may disrupt certain platform features.

We at YALLAH do not sell, rent, trade, or lease your personal data to a third party for any form of commercial exploitation. We share your personal data strictly on a need-to-know basis only with trusted third-party service providers, corporate partners, legal entities, etc. Data recipients fall into different categories that we have outlined in this section.

5.1 Categories of Data Recipients

• Logistics & Courier Delivery Partners: We share the recipient’s name, the address for order delivery, contact phone number, order reference details, etc. We share this crucial information with our shipping partners to ensure your order gets delivered on time.
• Payment Processing Gateways: We transmit financial transaction data to our payment platform providers, Network International, card networks, etc. Sharing this data allows us to validate and settle payment transactions.
• IT, Cloud & Software Infrastructure Providers: We may share your data with our cloud hosting vendors, database management centers, email delivery services, SMS or email notification gateways, cybersecurity platforms, etc.
• Customer Support Platforms: We may share your personal information with real-time, third-party software integrations so our team can easily communicate with you through our online live chat systems.
• Digital Analytics & Advertising Partners: We may share anonymized/pseudonymous behavioral event data with Google, Meta, TikTok, etc., to manage conversion attribution & ad placement.
• Professional Advisors: We may share some of your data with external legal counsel, auditors, tax accountants, insurance carriers, etc.
• Law Enforcement & Regulatory Authorities: Another important party with whom we may share your data includes government bodies, law enforcement agencies, taxation authorities, judicial courts, etc.

6.1 Current Geographic Storage

The collection and storage of your personal data happens on secure server infrastructure within the UAE. It may be hosted in certified cloud data centers operated by multinational cloud service providers as well.

6.2 Future Regional & Global Transfers

We at YALLAH CART TRADING LLC may expand our commercial operations to serve foreign markets in the future; in this case, your personal data may be transferred to, stored at, or even processed in destinations that exist in a country/nation other than the UAE. However, in case of cross-border data transfers, we take all the steps reasonably required to make sure that proper, suitable, contractual, technical, and organizational safeguards are in place to protect your data from misuse.

7.1 Security Protocols

• Data Encryption: SSL/TLS encryption protocols secure the web traffic across our site to make sure that the data transmitted between your browser and our servers stays highly confidential.
• PCI-DSS Compliance: All digital payment transactions are handled through PCI-DSS compliant payment gateways. It should be noted that we do not store raw credit or debit numbers or security CVV codes on our systems.
• Access Control: We restrict internal access to personal user data to authorized people, employees, contractors, and logistics personnel only.

7.2 Customer Security Responsibilities

We take extra precautions to protect your data. But no method of transmission over the internet or cloud storage architecture can be 100% secure. You are ultimately responsible for protecting your personal account login credentials by choosing strong, hard-to-guess passwords and also notifying us right away if you suspect any unauthorized access to your account.

We may keep your personal data for as long as we need it to fulfill our operational, legal, tax, accounting, or reporting purposes for which this data was collected in the first place. When it goes past the expiry date of retention periods, your personal data is permanently deleted from our primary systems or rendered fully anonymous so that it can no longer be associated with you. This section will give you detailed retention timeframes.

8.1 Retention Timeframes

• Account Information: We maintain your account information for as long as your user account stays active. If you ask us to close your account or remain inactive for a long period, your account profile will face deactivation. In this case, the data associated with it will either be deleted or anonymized.
• Order & Transaction Records: We maintain these records for 5 to 7 years once your transaction is complete. We keep this data just to satisfy legal obligations, commercial record-keeping laws, VAT audits, and statutory accounting rules under UAE law.
• Customer Support Records: We retain your live chat transcripts, emails, and inquiry logs for up to 2 years for quality assurance and dispute resolution.
• Marketing Preferences: We retain your email and SMS subscriber data until you simply withdraw your consent or unsubscribe. We then maintain your email address purely on a suppression list to honor your eCommerce preferences.
• Cookies & Web Analytics Data: Analytics logs and tracking pixels may expire as per your browser’s storage rules or predefined provider settings (usually up to 24 months).

9.1 Summary of Privacy Rights

• Right of Access: You retain the right to ask us whether we processed your personal data, accessed your personal information, etc. You can also get a copy of the data we hold about you.
• Right to Rectification: You also have the right to request the correction of inaccurate, incomplete, or outdated personal data held in our systems. You may update your profile details within your user account dashboard on your own as well.
• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where processing was based on consent that you have withdrawn.
• Right to Restrict Processing: You may request that we temporarily suspend or restrict the processing of your personal data in certain circumstances (e.g., while the accuracy of your data is being contested).
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to us in an accurate, structured, commonly used, and machine-readable format (only where technically feasible).
• Right to Object: You have the right to object at any time to the processing of your data based on legitimate business interests or for direct marketing purposes.
• Right to Withdraw Consent: In cases where data processing is based on your consent (e.g., marketing updates), you may withdraw your consent whenever you want without it affecting the lawfulness of processing carried out prior to withdrawal.

9.2 Exercising Your Rights

If you wish to exercise your legal privacy rights, you can submit a clear request to our team at YALLAH CART TRADING LLC through our online live chat portal. You can also reach out via our designated customer support channels. We will review and respond to your request within 30 calendar days.

We at YALLAH CART TRADING LLC are an eCommerce platform made for adult consumers and shoppers. Only individuals who are at least 18 years of age (or the legal age of majority in your jurisdiction) have the legal permission to access our platform and/or use our services. We don’t knowingly collect, solicit, process, or retain children’s personal data or the personal data of anyone aged less than 18. If we learn or are told that a minor’s personal information has been collected on our website without verified parental consent, we will take immediate steps to erase & delete said information; we will also deactivate any associated user account.

Our platform may have hyperlinks to external websites, social media channels, third-party apps, partner portals, etc., that we do not own or control. This policy applies strictly to yallahcart.com, so we have no control over and assume no responsibility for the content, privacy policies, data practices, or cybersecurity measures of any third-party websites/services. When you click on a link of this nature or leave our platform, we encourage you to read the privacy policy of the site you visit.

We also have the right to modify, amend, update, or revise this policy at any time simply at our discretion, to reflect evolving changes in our business practices, operational features, couriers, or evolving legal & regulatory obligations. When we publish these updates, we also revise the Last Updated date at the top of this policy page. Any changes made to this document become effective right away after being posted on our platform. If you keep accessing or using our site after we have published these updates, it will constitute your explicit acceptance of the revised Privacy Policy.

If you want to ask us anything or have feedback for us about our Privacy Policy, feel free to get in touch with us. You may reach out to us via these official channels:

• Operating Hours: Monday through Saturday, 9:00 AM to 6:00 PM GST 
• Live Chat Assistance: Accessible via real-time live chat
• Customer Support Email: ___________________________
• Customer Support Hotline: ___________________________
• Corporate Entity Name: YALLAH CART TRADING LLC
• Registered Business Address: ___________________________