Privacy Policy

1. Information we collect

We collect only what we need to run the service:

• Account details: your name, email address and phone number, and your password if you sign in with email. Passwords are stored only in hashed form.
• Phone sign-in: if you sign in with your phone number, we send a one-time code to it by SMS.
• Google sign-in: if you choose to sign in with Google, Google shares your name, email address and profile picture with us. We never see your Google password, and we do not access any other data in your Google account.
• Profile: details you choose to add, such as your date of birth, gender, language, notification preferences, and favourite stores and categories.
• Delivery details: your saved addresses, the map location of each delivery address, and the phone number for deliveries.
• Orders and Try at Home: what you order, try on, keep or return, and the history of each delivery. When an item is returned, the store or driver may photograph it to record its condition. If there is a dispute, we keep the details and evidence provided.
• Wallet and payments: your wallet balance, top-ups, payments and refunds. Card details are entered on our payment provider's page; we never receive or store your card number.
• Reviews: reviews and ratings you write about products and drivers.
• Device location: with your permission, the app uses your location while you are using it, to show stores near you on the map. You can turn this off in your device settings. We do not keep a history of your device's location.
• Notifications: if you allow notifications, we store a token for your device so we can send you order updates.
• Technical data: your IP address, device and browser type, and the time of requests, kept in server and security logs.
• Contact form: if you write to us through labbesni.com, your name, email address and message.

2. Stores, delivery agencies and drivers

If you use the Labbesni dashboard as a store, delivery agency or driver, we also collect the business contact details and addresses you give us. For drivers, this includes vehicle details, driving licence and ID card details and images, and your location while you are on duty or making a delivery, so that orders can be assigned and tracked.

3. How we use your information

We use your personal data to:

• create your account and sign you in;
• take, deliver and track your orders, Try at Home visits and returns;
• run your wallet, payments and refunds;
• send you notifications about your orders and your account;
• prevent fraud and abuse, and keep the service secure;
• answer your questions and support requests;
• fix problems and improve the service;
• meet our legal and accounting obligations.

4. Who we share it with

We do not sell your personal data, and we do not use it for advertising. We share it only as follows:

• Stores you order from receive your name, phone number, delivery address and order details.
• Delivery agencies and drivers receive your name, delivery phone number, delivery address and location, and the order details needed to deliver it.
• Service providers who process data for us: Amazon Web Services (servers and backups), our SMS provider (sign-in codes), Google (Google sign-in, and the maps shown in the app), Expo, Google Firebase and Apple (push notifications), our payment provider (wallet top-ups), and Netlify (hosting labbesni.com and its contact form).
• Authorities, when the law requires it, or to protect the rights and safety of our users and of Labbesni.
• A new owner, if Labbesni is merged, acquired or sold. This policy would continue to apply to your data.

5. Google user data

We use the name, email address and profile picture we receive from Google only to create your Labbesni account, sign you in and show your name in the app. We do not sell this data, use it for advertising, or share it with anyone except the service providers listed above.

6. Where your data is stored

Our servers are run by Amazon Web Services in Frankfurt, Germany, and our database backups are kept on Amazon S3. Your data may therefore be stored and processed outside Lebanon. We protect it as this policy describes wherever it is processed.

7. How long we keep it

We keep your personal data for as long as your account is open. When your account is deleted, we delete or anonymise your personal data, except records we must keep by law, such as financial transaction records, which we keep for up to 7 years for accounting and tax purposes. Database backups are deleted automatically after 14 days.

8. Security

All connections to our services are encrypted with HTTPS, access to our servers is restricted, and passwords are stored only in hashed form. No system is completely secure, but we work to protect your data and will act promptly if we learn of a breach.

9. Your rights

You can ask us for a copy of your personal data, or ask us to correct it, delete it, or stop using it for a particular purpose. You can withdraw your permission for location and notifications at any time in your device settings. To make a request, contact us at the address below. We may need to verify your identity first, and we will reply within 30 days.

10. Children

Labbesni is for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

11. Cookies

labbesni.com does not use analytics or advertising cookies, and does not track you across other sites.

12. Changes to this policy

We may update this policy as our services change. We will publish the new version on this page with a new date, and tell you in the app before significant changes take effect.

13. Governing law

This policy is governed by the laws of Lebanon, including Law No. 81 of 2018 on Electronic Transactions and Personal Data.