Privacy Policy
Last updated: 1 October 2026 · Version 2026-10-03-ahmed-web-1
1. Scope
This policy explains how Ahmed Web processes account-holder data and technically processes store-customer data. Each merchant is responsible for its customer-facing privacy notice and lawful basis.
2. Data collected
Account, identity and contact details; store, product and order data; consent, access and security logs; integration settings; device and usage data; and support communications. Account passwords are hashed, while integration keys and SMTP passwords are encrypted.
3. Purposes
Account and store creation, orders and integrations, authentication and security, support and billing, performance improvement, fraud prevention, and compliance with lawful obligations and requests.
4. Data roles
Ahmed Web controls account-holder data under this policy. For store-customer data, the merchant determines purposes and remains responsible, while the platform acts as a technical service processing data to operate the store.
5. Sharing
Data may be processed by hosting, email, payment, analytics, delivery, and support providers chosen by the user or needed for the service. We do not sell personal data. Disclosure may occur when legally required or to protect rights and security.
6. Transfers and retention
Some providers may process data outside Bahrain under their safeguards. Data is kept as needed to provide the service, meet obligations, and resolve disputes, then deleted or de-identified under retention and backup practices.
7. Rights
Individuals may request access, correction, deletion, objection, or restriction where provided by law. Store customers should first contact that merchant; we can assist technically.
8. Security
We use HTTPS, tenant isolation, protected sessions, password hashing, encrypted integration secrets, backups, and access controls. No electronic method guarantees absolute security, and users must protect their accounts and credentials.
9. Cookies
Necessary cookies support login, security, and cart operation. Additional analytics or marketing must be enabled with appropriate notices and consent.
10. Contact and updates
Use the support channel published on the platform for privacy requests and identify the relevant store and email. We may update this policy, show its version date, and seek renewed consent where required for material changes.