Privacy Policy
Last updated: 15 September 2026
This Privacy Policy explains how AlfatahOnline (“we”, “us”, “our”) collects, uses, and protects information when you use our website at alfatahonline.com and our Android app (“Alfatahonline”). The app loads this same website inside a native app shell, so anything you do on the website works the same way and is covered by the same policy — the app additionally collects a small amount of information needed to deliver push notifications, described below.
Information we collect
On the website (and inside the app, since it loads the same site)
- Information you provide — such as your name, email, phone number, and shipping address, when you place an order, contact us, or create an account.
- Technical information — such as your IP address, browser or device type, and pages visited, collected automatically by our server and hosting provider for security and to keep the site running properly.
- Cookies — small files used for core site functions like keeping you logged in and remembering your cart. You can control cookies through your browser or device settings, though some site features may not work correctly without them.
In the Android app specifically
If you allow notifications, the app registers a device push token (a random identifier assigned by Google’s Firebase Cloud Messaging service, not your name or phone number) with our server so we can send you real-time updates such as order status changes. We store this token together with your device platform (Android) and the date it was registered or last used. We do not collect your device’s contacts, photos, location, or any other information beyond this token unless you separately submit it through the website itself (e.g. placing an order).
How we use this information
- To process and fulfil your orders
- To respond to enquiries and provide customer support
- To send push notifications about your orders, bookings, or relevant updates (app users who grant notification permission)
- To maintain the security, performance, and reliability of our site and app
- To improve our products, services, and user experience
We do not sell your personal information to third parties.
Third-party services we use
- Google Firebase Cloud Messaging — delivers push notifications to the Android app. Google processes the device token needed to route the notification; see Google’s Privacy Policy.
- Our web hosting provider — stores site data and server logs on our behalf.
- Payment processors — if you complete a purchase, payment details are handled directly by our payment provider(s); we do not store your full card details on our own servers.
Data retention
We keep order and account information for as long as needed to provide our services and to meet legal, accounting, or tax record-keeping requirements. Push notification device tokens are kept until the app is uninstalled or the token becomes invalid, at which point it is automatically removed; you can also ask us to delete it sooner (see Contact us below).
Your choices
- You can turn off push notifications at any time from your device’s app settings.
- You can request access to, correction of, or deletion of your personal information by contacting us using the details below.
- You can control cookies through your browser settings.
Children’s privacy
Our website and app are not directed at children under 13, and we do not knowingly collect personal information from children under 13.
Security
We use HTTPS encryption for data transmitted between your device and our servers, and we take reasonable technical and organisational measures to protect your information. No method of transmission or storage is 100% secure, but we work to protect your information to industry standards.
Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.
Contact us
If you have questions about this Privacy Policy or want to request access to, correction of, or deletion of your data, contact us at privacy@alfatahonline.com.