Privacy Policy
Effective Date: October 20, 2026 • Compliant with UAE & Saudi PDPL
1. Data Controller and Scope
SastaDealMart operates as both a data controller for merchant accounts and a data processor for customer delivery information received via merchant Shopify stores. We comply with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection and Saudi Arabia's Personal Data Protection Law (PDPL).
2. Information We Collect
We collect merchant registration details (name, email, phone, bank IBAN details for remittance transfers) and end-customer order details (recipient full name, delivery address, phone number, purchased items, and COD collectible amounts).
3. How We Use Customer Data
End-customer personal data is utilized strictly for phone call confirmation, WhatsApp dispatch notifications, and physical courier doorstep delivery. SastaDealMart does not sell, lease, or cross-market to your end-customers under any circumstances.
4. Third-Party Disclosures
Delivery details are transmitted securely via encrypted API to licensed courier partners (SMSA Express, PostEx, TCS, Emirates Post) solely for generating airway bills and completing physical delivery.
5. Data Retention and Security
Customer delivery logs are encrypted and retained for 90 days following successful delivery to resolve any post-delivery customer claims, after which identifiable records are sanitized.
6. Contact Our Data Protection Officer
For data access requests, deletion requests, or compliance inquiries, please email privacy@sastadealmart.com.