Privacy policy

What we store

• Your phone number. It is required to sign in and it is how a shop can be told an order is yours.
• A display name, an email address and a language preference, if you give them.
• Your orders: the shop, the bag, quantity, price in dollars, the recorded Lebanese pound rate and total, the collection window, and when the order was collected or cancelled.
• Ratings and review comments you write.
• Shops you favourite, and whether you asked to be notified about them.
• Notifications we sent you and whether you opened them.
• Support tickets and the messages in them.
• Referrals you sent or received.
• Consent records: what you agreed to or withdrew, when, and the IP address and browser or device identifier at that moment.
• Data export and deletion requests you made.
• Strikes applied to your account and when they expire.
• Sign-in sessions and push notification tokens for your devices, with the IP address and device identifier of the session.

Why we store it

• To take a reservation and let the shop recognise it at the counter.
• To send you the one-time sign-in code and the notifications about your own orders.
• To keep the financial record of completed orders, which the shop needs as invoice evidence and which Fadel needs to invoice its commission.
• To answer your support tickets.
• To limit abuse: no-shows, duplicate accounts and reservation flooding.

Who else sees it

• The shop you reserved from sees what it needs to hand the order over.
• The SMS provider that delivers your sign-in code receives your phone number.
• Nobody buys this data from us. We do not sell it and we do not share it for advertising.

Your rights, and how to use them

These are controls that exist and work today, not intentions. They are in the Fadel app, under Profile, then Privacy.

Get a copy of your data. Request an export and Fadel builds a JSON document containing your profile, every order with its review, your favourites, the notifications sent to you, your support tickets and their messages, your referrals, your current consent and its full history, your past data requests, and your strikes. You can have one export in progress at a time. When it is ready you get a download link, and that link stops working 14 days later.

Delete your account. Deletion runs immediately when you confirm it. There is no grace period and it cannot be undone. Concretely, at that moment:

• Your phone number, display name and email address are removed from your account.
• Every sign-in session is revoked, and the IP address and device identifier on past sessions are cleared.
• Your registered devices, your favourites and any pending sign-in codes are deleted.
• Your notifications and notification preferences are deleted.
• The text of your review comments is cleared. The numeric rating stays on the shop, no longer linked to you.
• Any export waiting to be downloaded is discarded.
• Your referral code is released.
• The financial line of orders you already collected is kept as invoice evidence, and is no longer linked to you.

Deletion is refused while you hold a reserved order whose collection window has not ended. Collect it or cancel it first, then delete. The refusal message names the order.

Manage consent. You can grant or withdraw consent separately for the terms, this privacy policy, marketing push notifications, marketing messages on WhatsApp, analytics, personalisation and location. Every change is stored with its time, IP address and device identifier, so both sides can see what was agreed and when.

For a signed-in account these run on the Fadel API at:

• POST /api/v1/me/data-export
• GET /api/v1/me/data-requests
• GET /api/v1/me/data-requests/{id}/download
• GET /api/v1/me/consent
• POST /api/v1/me/consent
• POST /api/v1/me/delete

There is no web page yet that runs an export or a deletion from a browser. Today these controls live in the Fadel app. If you cannot use the app, open a support ticket and ask us to run the request for you.

How long we keep it

• Orders you collected are kept as invoice evidence for the shop and for Fadel, in anonymised form after you delete your account.
• Ratings stay published after deletion, without your name and without your comment text.
• A data export stops being downloadable 14 days after it is ready.
• We keep an internal audit record that a privacy request happened, so that we can show a deletion was carried out.

This website

The public pages on fadel.app set no cookies and run no analytics or advertising scripts. The reservation pages keep your sign-in token in your browser session storage, which your browser clears when you close the tab. Shop pages render a static map image; the map is served as an image, so opening a shop page does not tell a mapping provider who you are.

Changes and contact

Changes to this policy are published here with a new date at the top. To ask a question about your data, open Help in the Fadel app and start a support ticket.