1. Introduction

La Tabdhir is a brand and online platform owned and operated by Souhib TRABELSI FZE, a Free Zone Establishment registered with Sharjah Publishing City Free Zone, United Arab Emirates (trade licence no. 4429733.01). This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

2. Data controller

Souhib TRABELSI FZE is the data controller for personal data collected through this Platform.

• Email: privacy@latabdhir.ae
• Registered office: Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates

3. Information we collect

3.1 Information you provide

• Account information: name, email address, phone number, password
• Store information: business name, UAE trade licence number, address, operating hours
• Transaction information: booking details, pickup times, order history
• Communications: messages sent through the Platform, support enquiries

3.2 Information collected automatically

• Usage data: pages visited, features used, time spent on the Platform
• Device information: IP address, browser type, device identifier
• Location data: approximate location (for store discovery)
• Cookies: session cookies for authentication and preferences

4. Legal basis for processing

Under UAE Personal Data Protection Law, we process your data based on:

• Consent: you explicitly consent when creating an account
• Contractual necessity: to fulfil our Terms of Service
• Legal obligation: to comply with UAE laws and regulations
• Legitimate interests: to improve our services and prevent fraud

5. How we use your information

5.1 Primary purposes

• Facilitate bookings between customers and stores
• Process store subscriptions and payments
• Send transactional notifications (order confirmations, pickup reminders)
• Provide customer support
• Verify store business licences

5.2 Secondary purposes

• Improve Platform functionality and user experience
• Analyse usage patterns and trends
• Prevent fraud and ensure Platform security
• Comply with legal obligations

6. Data sharing

6.1 With stores

When you make a booking, stores receive your name and phone number to fulfil the reservation.

6.2 Service providers

We share data with trusted third-party service providers:

• Stripe: payment processing for store subscriptions
• Tap Payments: customer payment processing (UAE-licensed PSP)
• Resend: email delivery service
• Logfire: performance monitoring and error tracking
• Amazon Web Services: data storage and infrastructure (Mumbai, India region)

6.3 Legal requirements

We may disclose your data if required by UAE law, court order, or government authority.

7. Data security

7.1 Security measures

• Encryption in transit (HTTPS/TLS)
• Encrypted password storage (bcrypt hashing)
• Role-based access controls
• Regular security audits and monitoring
• Secure database backups

7.2 Data retention

• Active accounts: data retained while the account is active
• Deleted accounts: data deleted within 30 days (except where retention is required by law)
• Transaction records: retained for 7 years (UAE tax and accounting laws)
• Notifications: automatically deleted after 30 days

8. Your rights

8.1 Right of access

Request a copy of your personal data we hold. Available in your profile settings or by emailing privacy@latabdhir.ae.

8.2 Right of rectification

Correct inaccurate or incomplete data. Update your profile information at any time.

8.3 Right of erasure

Request deletion of your account and associated data. Note: we may retain data required by law (e.g., transaction records for tax purposes).

8.4 Right of portability

Receive your data in a structured, machine-readable format (JSON export available).

8.5 Exercising your rights

Email privacy@latabdhir.ae with your request. We will respond within 30 days as required by UAE law.

9. Children’s privacy

The Platform is not intended for children under 18. We do not knowingly collect data from minors. If you believe a child has provided us with personal data, contact us immediately.

10. Data breach notification

In the event of a data breach affecting your personal information, we will:

• Notify the UAE Data Office (or successor authority) within 72 hours
• Notify affected users via email as soon as reasonably possible
• Provide details of the breach, data affected, and remedial actions taken

11. Policy changes

We may update this Privacy Policy from time to time. Material changes will be communicated via:

• Email notification to registered users
• Prominent notice on the Platform
• Updated “Last updated” date at the top of this page

12. Contact & complaints

12.1 Privacy questions

Email: privacy@latabdhir.ae

12.2 Regulatory complaints

If you are not satisfied with our response, you have the right to lodge a complaint with the UAE Data Office or the relevant UAE regulator.

13. Operator

This Platform is operated by Souhib TRABELSI FZE, a Free Zone Establishment registered with Sharjah Publishing City Free Zone, UAE (trade licence no. 4429733.01), registered office: Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates. For full company information, see our Legal Notice.