Draft for review. This document is not final and items marked TODO(legal) are still to be confirmed.
Privacy Policy
This policy explains what neardoor stores when you browse a shop, send an order, request a demo or use the merchant workspace, and what you can do about it. neardoor is operated by TODO(legal): registered entity name, TODO(legal): registered address.
Your basket
Shopping does not need an account. To keep your basket, neardoor sets a cookie that only our server can read (an HTTP-only cookie) for that shop. It lasts 7 days and renews each time you use the basket.
Baskets that expire without becoming an order are deleted every night. A basket that became an order is kept with it.
When you send an order
neardoor stores the items and totals, how you want to receive the order (delivery or pickup) and any delivery details you enter: building, flat and a note. Checkout does not ask for your name or phone number; the shop sees your number when your WhatsApp message reaches it. The shop sees the order in its workspace so it can fulfil it.
Your order has a private link. Anyone who has the link can see the items, totals, store and status. The link page does not show your delivery details.
The WhatsApp message is sent by you, from your WhatsApp, to the shop. WhatsApp handles that message under its own terms and privacy policy. neardoor never sees whether it was sent or read.
TODO(legal): retention period for orders and their baskets(both are currently kept with no automatic deletion).
What stays on your device
Some things are kept only in your browser, for that shop, and are not stored by neardoor:
- Buy Again: products from orders placed on this device, kept for up to 180 days. Their product ids are sent to neardoor only to fetch today’s prices. Use “Clear” on the Buy Again row to remove them.
- Saved addresses: only if you tick “Remember this address on this device”. An address is sent only with an order you use it for. You can delete one, or use “Forget all saved addresses” at checkout.
- A copy of your basket, so it appears instantly. The basket itself is kept on our server as described above.
Your language choice is a “lang” cookie that your browser sends with each page request. Clearing your browser’s site data removes all of these.
Demo requests
If you ask for a demo, we store your name, shop name, phone number, optional email and message, the page language and the time you gave consent. We use them only to contact you about neardoor.
The form is protected by Google reCAPTCHA, which loads when you reach the form. Google receives information about your device and use of the page under the Google Privacy Policy and Terms of Service, and we store the score it returns. Your IP address is used to limit how many requests can be sent and is passed to Google with the reCAPTCHA check; it is not stored with your request.
TODO(legal): retention period for demo requests.
Shop staff accounts
Staff sign in with an email and password. Passwords are stored only as a secure hash. Sign-in uses HTTP-only cookies; you stay signed in until you sign out or 7 days pass without using the workspace.
Sign-ins and changes made in the workspace, such as catalogue edits, imports and order status changes, are recorded in an audit log with the staff member, the time and what changed. New orders and demo requests are also logged, without contact details. The log is used for support and security.
TODO(legal): retention period for audit logs.
Your choices and rights
You can ask us what we hold about you, or ask us to correct or delete it, by writing to TODO(legal): contact email. For an order, you can also contact the shop directly.
TODO(legal): confirm rights and wording under UAE Federal Decree-Law No. 45 of 2021 (PDPL).
Changes
When this policy changes, the version and effective date at the top of this page change too.