Privacy Policy

1. Data we collect

We collect only what is needed to run accounts and orders.

• Account data: full name, email address, phone number, role (pharmacy or warehouse) and a password. Passwords are stored only as a salted hash, never in readable form.
• Business profile: pharmacy or warehouse name, address, area or governorate, map location, pharmacy licence number or warehouse licence number, the areas a warehouse delivers to, and an optional profile picture.
• Platform activity: carts, orders and their status, offers you create or apply, catalogue submissions, notifications, and messages you send to support through the in-app chat.
• Technical data: IP address, browser and device type, and security logs, collected automatically to keep the service running and to detect abuse.

We do not collect card or bank details, we do not use advertising trackers, and we do not use analytics or profiling tools.

2. How we use it

• To review sign-ups and verify that an account belongs to a real, licensed pharmacy or warehouse.
• To let pharmacies discover warehouses, compare prices and offers, place orders and track them.
• To send password-reset emails and in-app notifications (see section 3).
• To provide support, investigate problems and keep the platform secure.
• To meet legal obligations and to enforce our Terms of Service.

3. Email

We send one kind of email: the password-reset link, when you ask to reset your password. Everything else, such as order updates and account approval, appears only as an in-app notification and is never emailed.

We do not send marketing or promotional email, we do not buy, rent or import email lists, and we only email addresses entered by the account holder when registering. Email is sent from an address on the talabiti.com domain through an email delivery provider acting on our behalf.

4. Who we share data with

• Other users, as needed to complete an order: when a pharmacy orders from a warehouse, each side sees the other's business name, contact person, phone number and delivery address. A warehouse's public storefront shows its business name and the areas it serves.
• Service providers that host or deliver the platform on our behalf: cloud and server hosting, content delivery and DNS, and email delivery. They may process data only to provide their service.
• Authorities, when the law requires it or a competent authority makes a valid request.

We do not sell personal data.

5. Where data is stored and how we protect it

Data is stored on servers operated by our hosting providers, which may be located outside Syria. By using the platform you understand that your data can be processed in those locations.

We use encrypted connections (HTTPS), hashed passwords, role-based access so users only see what their role allows, and limited staff access. No system is perfectly secure, and we cannot guarantee absolute security.

6. How long we keep it

We keep account and order data while your account is active and for as long afterwards as needed for order records, disputes, audit and legal obligations. Rejected registrations are kept for audit. Support chat messages and security logs are kept for a limited period and then deleted. When data is no longer needed we delete or anonymise it.

7. Your rights

You may ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is wrong or out of date (most profile details can be edited in the app);
• delete your account and personal data, except what we must keep for legal or order-record reasons;
• stop or limit a particular use of your data.

Email us at the address in section 10 and we will aim to reply within 7 working days. We may need to confirm who you are first.

8. Cookies and browser storage

We use only what the app needs: a session token that keeps you signed in, your language and light or dark preference, and a local copy of recently loaded data so pages open faster. This data stays in your browser and is cleared when you sign out. We do not use advertising or cross-site tracking cookies.

9. Children and changes

Talabiti is for businesses and people aged 18 or over. We do not knowingly collect data from children.

We may update this policy. The date at the top shows the latest version, and for material changes we will notify account holders in the app or by email.

10. Contact

Questions or requests about this policy: support@talabiti.com.