Privacy Policy

Last updated: 8 September 2026

Asma Al Zaabi (“we”, “us”, “our”) operates the website asmaalzaabi.com and the Asma Al Zaabi mobile application for Android and iOS (together, the “Service”). This policy explains what personal information we collect through the Service, why we collect it, who we share it with, and the choices you have.

By using the Service you agree to this policy.

Who we are

Asma Al Zaabi
Dubai, United Arab Emirates
Phone: +971 52 711 3469
Email: [email protected]
Website: https://asmaalzaabi.com

Information we collect

Information you give us

Account details — your first and last name, email address and phone number when you register.
Delivery details — the postal address, emirate, city and any delivery notes you enter at checkout.
Order information — the products you buy, quantities, prices, coupons applied, and the delivery address for each order.
Support messages — anything you send us by email, phone or WhatsApp.

Information collected automatically

Device notification token — an identifier issued by Google Firebase Cloud Messaging and the Expo push service so we can send you notifications about your orders. It identifies your app installation, not you personally.
App activity — products you view, your search terms and your wishlist. Your recently-viewed list, search history and wishlist are stored on your own device and are cleared when you sign out.
Language preference — whether you use the app in English or Arabic.

Payment information

We do not collect or store your card number. When you pay by card, the card details are captured by Stripe’s software running inside the app and sent directly to Stripe. We receive only a payment token and the result of the payment. Tabby and Tamara payments are completed on their own websites and we receive only the outcome.

What we do not collect

The app does not request or collect your location, your camera, your photo library, your contacts, or your microphone.

How we use your information

To create and maintain your account
To process, deliver and invoice your orders
To send order confirmations and delivery status notifications
To answer your questions and provide customer support
To detect and prevent fraudulent orders and payment abuse
To meet our tax, accounting and consumer protection obligations under UAE law

We do not sell your personal information, and we do not use it for advertising.

Who we share it with

We share only what each party needs to do its job:

Stripe — card details (sent directly from your device), amount, your name and email, to process card payments.
Tabby — your name, email, phone and order amount, to offer instalment payments.
Tamara — your name, email, phone and order amount, to offer buy-now-pay-later.
Expo and Google Firebase — your device notification token and the message content, to deliver push notifications.
Delivery partners — your name, phone and delivery address, to deliver your order.
Our hosting provider — data stored on our servers, to operate the Service.

Each of these processes your data under its own privacy policy. We may also disclose information where the law requires it, or to protect our rights or the safety of others.

Security

Traffic between the app and our servers travels over HTTPS. Your sign-in tokens are held in the secure keystore your phone provides (Android Keystore or iOS Keychain), not in ordinary app storage. Passwords are stored only as salted hashes and we cannot read them. Card numbers never reach our servers.

No system is perfectly secure, but we take reasonable steps to protect your information.

How long we keep it

Account information — while your account is open, and then deleted as described below.
Order records — retained for as long as UAE tax and commercial law requires, even after an account is deleted, because we are obliged to keep them.
Notification tokens — until you sign out, uninstall the app, or turn notifications off.
On-device data — your wishlist, search history and recently-viewed list live only on your device and are cleared when you sign out.

Your rights

You may:

See the personal information we hold about you
Correct it — from the app under Account → Edit Profile
Delete your account and personal data — see below
Turn off notifications — from the app under Settings, or in your phone’s system settings
Object to a particular use of your data

To exercise any of these, email [email protected].

Deleting your account

You can delete your account and the personal data attached to it in either of these ways:

In the app — Account → Delete Account
On the web — https://asmaalzaabi.com/delete-account

We remove your name, email, phone number, saved addresses, wishlist and notification tokens within 30 days. Completed order records are kept where UAE law requires, with your personal details removed wherever they are not legally required.

Children

The Service is intended for people aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us personal information, email [email protected] and we will delete it.

International transfers

Some of our service providers, including Stripe and the push notification services, operate outside the United Arab Emirates. Where your data is transferred abroad, it is handled under those providers’ own safeguards.

Changes to this policy

We may update this policy. The date at the top will change, and material changes will be announced in the app. Continuing to use the Service after a change means you accept the updated policy.