Privacy policy
Effective 1 January 2025 · Version 2.1
1. INFORMATION WE COLLECT
1.1 PERSONAL INFORMATION When you use our Asankary app, we collect: • Full name and contact information • Phone numbers and email addresses • Delivery addresses and billing information • Order and product preferences • Payment information (securely processed) 1.2 AUTOMATICALLY COLLECTED DATA • Device information (model, operating system, version) • Location data (only if you grant permission, and only to set a delivery address) • Network information and IP addresses • A device token, if you enable push notifications, so we can send order updates We do not use any analytics or advertising SDK, and we do not collect usage analytics or crash reports. 1.3 OPTIONAL INFORMATION • Profile photos and preferences • Wishlist and saved items • Product reviews and ratings • Communication preferences • Marketing consent preferences
2. HOW WE USE YOUR INFORMATION
2.1 PRIMARY BUSINESS PURPOSES • Processing and fulfilling your orders • Providing customer support and service • Sending order confirmations and updates • Managing returns, exchanges, and warranties • Improving our products and services 2.2 COMMUNICATION • Sending transactional messages (order status, shipping) • Providing customer support responses • Sending security alerts and important updates • Marketing communications (only with consent) • Surveys and feedback requests (optional) 2.3 BUSINESS OPERATIONS • Fraud prevention and security monitoring • Legal compliance and regulatory requirements • Analytics to improve user experience • Inventory management and supply chain • Quality assurance and service improvement
3. INFORMATION SHARING
3.1 SERVICE PROVIDERS We share information with trusted partners: • Cloud hosting and database providers that store your account and orders • Shipping and delivery staff, who receive the delivery address for your order • Push notification delivery services Orders in this release are paid cash on delivery or through a money exchanger, so no card details are collected by the app or shared with a card processor. 3.2 BUSINESS TRANSFERS • In case of merger, acquisition, or sale • During business restructuring or reorganization • With legal successors and assigns • Always with equivalent privacy protection 3.3 LEGAL REQUIREMENTS We may disclose information when required: • To comply with Iraqi law and regulations • In response to valid legal requests • To protect our rights and property • To ensure user safety and prevent fraud • As required by Kurdistan Regional Government
4. DATA SECURITY
4.1 TECHNICAL SAFEGUARDS • End-to-end encryption for sensitive data • Secure HTTPS connections for all communications • Regular security audits and vulnerability testing • Multi-factor authentication for admin access • Automated backup and disaster recovery 4.2 OPERATIONAL SECURITY • Staff training on data protection practices • Limited access on need-to-know basis • Regular password updates and security protocols • Incident response procedures • Third-party security certifications 4.3 PAYMENT SECURITY • PCI DSS compliance for card processing • Tokenization of payment information • No storage of complete card numbers • Secure payment gateways only • Regular security monitoring and fraud detection
5. YOUR PRIVACY RIGHTS
5.1 ACCESS AND CONTROL You have the right to: • Access your personal information • Update and correct your data • Delete your account and data • Download your information (data portability) • Opt-out of marketing communications 5.2 CONSENT MANAGEMENT • Withdraw consent for data processing • Update communication preferences • Control location data sharing • Manage cookie and tracking preferences • Request information about data usage 5.3 DATA SUBJECT RIGHTS Under applicable privacy laws: • Right to be informed about data processing • Right to rectification of inaccurate data • Right to erasure ("right to be forgotten") • Right to restrict processing • Right to object to processing
6. DATA RETENTION
6.1 RETENTION PERIODS • Account information: While account is active • Order history: 7 years for tax/legal compliance • Payment data: As required by financial regulations • Support communications: 3 years • Marketing data: Until consent is withdrawn 6.2 DELETION PROCEDURES • Automatic deletion after retention periods • Secure deletion using industry standards • Anonymization of data where legally required • Regular purging of unnecessary data • User-initiated deletion requests processed within 30 days 6.3 LEGAL HOLDS Data may be retained longer if: • Subject to legal proceedings • Required for regulatory compliance • Needed for fraud prevention • Part of ongoing investigations
7. INTERNATIONAL TRANSFERS
7.1 DATA LOCATION • Primary servers located in secure facilities • Backup data may be stored internationally • Cloud services may process data globally • All transfers comply with applicable laws • Adequate protection measures in place 7.2 TRANSFER SAFEGUARDS • Standard contractual clauses • Adequacy decisions where available • Binding corporate rules for service providers • Encryption during transit and storage • Regular compliance audits 7.3 YOUR RIGHTS REGARDING TRANSFERS • Right to be informed of transfer locations • Right to object to certain transfers • Right to request transfer restrictions • Access to transfer safeguard documentation
8. COOKIES AND TRACKING
8.1 NO TRACKING AND NO ADVERTISING • The app shows no advertising of any kind • We do not track you across other companies' apps or websites • We never access the device advertising identifier, and the app therefore never shows Apple's App Tracking Transparency prompt • No Google Analytics, no advertising network, no social media tracking plugin 8.2 WHAT IS STORED ON YOUR DEVICE • Your sign-in session, so you are not asked to log in every time • Your language, currency and theme preferences • A cached copy of the catalogue so the app opens quickly offline Signing out or deleting the app removes all of it. There are no cookies — this is a native app, not a website.
9. CHILDREN'S PRIVACY
9.1 AGE RESTRICTIONS • The app is intended for general audiences shopping for consumer electronics • It is not directed at children, and we do not knowingly collect data from a child • The app does not ask for a date of birth and performs no age verification • If you believe a child has given us personal information, contact us and we will delete it 9.2 PROTECTION MEASURES • Enhanced privacy protections for minors • Limited data collection from young users • Parental control and oversight tools • Clear consent mechanisms • Regular compliance reviews 9.3 PARENTAL RIGHTS • Access to child's information • Request deletion of child's data • Control communication preferences • Monitor account activity • Receive notifications of data use
10. UPDATES TO THIS POLICY
10.1 POLICY CHANGES • Regular reviews and updates as needed • Notification of material changes to users • Updated effective dates clearly displayed • Archive of previous policy versions • Clear explanation of changes made 10.2 NOTIFICATION METHODS • In-app notifications for major changes • Email notifications to registered users • SMS notifications for critical updates • App store update descriptions • Website and app banner notifications 10.3 CONTINUED USE • Continued app use constitutes acceptance • Option to review changes before acceptance • Right to object to policy changes • Account closure option if disagreeing with changes
11. CONTACT INFORMATION
For privacy-related questions or concerns: PRIVACY OFFICER Asankary DATA PROTECTION QUERIES Response Time: Within 72 hours Business Hours: Saturday-Thursday 8AM-6PM, Friday 8AM-12PM GENERAL SUPPORT Available: 6 days a week Last Updated: January 2025 Policy Version: 2.1