Privacy Policy

This page explains what data C-NAWAWY collects when you use our website and app, why, and who receives it.

1. Data we collect

• Account: name, mobile number, email, username and password (stored only as a secure hash).
• Google sign-in (optional): your name, email, profile picture and Google account ID. We never receive your Google password or any other data from your Google account.
• Orders: items, invoices, delivery address, payment method, and map location if you choose to share it.
• Loyalty: points, tier, membership card and its usage log.
• Technical: IP address, device type, and essential cookies that keep you signed in.

2. How we use it

• Create your account and verify your phone and email.
• Prepare, deliver and communicate about your orders.
• Calculate points, discounts and membership tier.
• Protect your account and prevent unauthorized use.

We do not sell or rent your data, and we do not send marketing messages without your consent.

3. Who receives your data

• Meta (WhatsApp): to deliver verification codes to your number.
• Brevo: to send emails such as login codes and verification links.
• Google: only if you choose to sign in with Google.
• OpenStreetMap: to approximate an address if you share your location.
• Our hosting provider, which runs the server.

We may disclose data when lawfully required by an authority.

4. Retention

Account data is kept while your account exists. Invoices are kept for the period required by accounting and tax law. Verification codes expire within minutes.

5. Security

The site uses encrypted connections; passwords and codes are stored hashed; customer data is accessible only to authorized staff.

6. Your rights

You can view and edit your data from your account and request deletion — see Data deletion.

7. Children

Our service is intended for adults; we do not knowingly collect data from children under 13.

8. Contact