1. Who we are
TATA E-Commerce (operating tatakw.com) is committed to protecting the privacy of all its users. This policy explains what personal information we collect, why, with whom we share it, and your rights.
2. Information we collect
Account data (at registration):
- Full name
- Email address
- Mobile number
- Platform role (merchant, customer, driver, influencer)
Additional merchant data:
- Commercial registration, professional licences, owner civil ID
- Bank account (IBAN) for payouts
- Store and branch locations (GPS coordinates for the map)
Customer data at purchase:
- Delivery address
- Optional delivery GPS (helps the driver reach you)
- Order history + contents (for accounting records and disputes)
- Payment information is handled directly by MyFatoorah — TATA does not store your credit card data
Driver data during delivery:
- GPS location during active delivery only (retained until order close, then deleted)
- Vehicle info (type, plate)
3. Purpose
- Fulfil your orders and payments
- Enable communication between parties (merchant, customer, driver)
- Improve the Platform (performance analytics, features like product suggestions)
- Meet legal requirements (record retention, taxes, fraud prevention)
- Send essential alerts about your orders and subscription
- Send marketing messages only with your explicit opt-in (unsubscribe anytime)
4. Who we share data with
- Merchants: see data of customers who order from their store (name, phone, address) for order fulfilment only.
- Drivers: see customer address and phone for delivery.
- MyFatoorah: receives payment data to process transactions.
- Technical services (Vercel hosting, Neon database, Clerk auth, WhatsApp Business messaging): receive the technical data necessary for the Platform to operate.
- Kuwaiti authorities: we comply with lawful orders to disclose data.
- We do not sell your data to third parties for advertising or marketing purposes.
5. Retention
- Account data: active period + 90 days after closure.
- Order and financial transaction records: 10 years (Kuwait Commerce Law).
- Influencer and merchant contracts: minimum 5 years (Decree-Law 10/2026).
- Driver live-delivery location: auto-deleted within 24 hours of order close.
- Account login records (IP, device): 1 year for security and fraud prevention.
6. Your rights
You have the right to:
- Access the data we hold about you.
- Correct any inaccurate data.
- Request deletion of your account (with retention of financial transaction records per law).
- Export your data in a readable format.
- Opt out of marketing messages.
To exercise any right, contact us at: privacy@tatakw.com
7. Cookies
We use cookies and localStorage to remember your session, preferences, and cart. We do not use cookies for cross-site advertising or tracking.
8. Data security
We use HTTPS encryption across all pages, encrypted cloud databases, and multi-factor authentication for staff. No system is absolutely secure; any breach is disclosed to affected users within 72 hours of discovery.
9. Children
The Platform is intended for adults (18 and over). We do not knowingly collect data from children under 18. If we discover we have collected a child's data by mistake, we delete it immediately.
10. Policy changes
We may update this policy from time to time. Any material change will be notified by email at least 30 days before taking effect.
11. Contact
For any privacy question or to exercise your rights, contact our Data Protection Officer: privacy@tatakw.com