Privacy Policy

This Policy explains how Wafra collects, uses, shares and protects your personal data when you use the Wafra app, its website or its partner tools, together the “Platform”, in accordance with Jordanian Personal Data Protection Law No. (24) of 2023.

The Platform is operated by Al-Faris Al-Aseel for Commercial Brokerage LLC (شركة الفارس الأصيل لأعمال الوساطة التجارية / ذ.م.م), trading as “Wafra Al-Rizq for Commercial Brokerage”, registered with the Companies Control Department at the Ministry of Industry, Trade and Supply under No. (304988), with its registered address at Jabal Al-Weibdeh, Amman — Jordan. It is responsible for your personal data in connection with the Platform. Hereinafter “Wafra”, “we” or “us”.

This Policy is read together with the Terms of Use, and terms defined there have the same meanings here.

1. Account data: your name, phone number, email address and password, which is stored encrypted in a way that cannot be read. If you sign in with Google or Apple, we receive the identifier those services assign to your account, and the name and email address they share with us. We also keep the session records that keep you signed in.

2. Verification codes: the codes we send you on WhatsApp, by text message or by email. They expire within minutes. We keep a record of them, meaning the phone number or email address, the code and the time sent, for no more than seven (7) days to prevent misuse, and then delete it.

3. Your preferences: the app language, your notification settings, and the food categories you prefer.

4. Location: with your permission, we use your device’s location to show Branches near you and how far they are. We store the last location you searched from and the city you choose, to show you relevant Branches and send you relevant notifications, such as bags becoming available near you. You can refuse permission and choose your city instead.

5. Orders: your reservations, the bag type, the Branch, the times, and the status of each Order.

6. Reliability record: the number of Orders you cancelled or did not collect, and any restriction placed on your account as a result, under the Terms of Use.

7. Rewards and referrals: your points, level, streak and rewards, your referral code and the people you referred or who referred you, and any balance recorded on your account.

8. What you give us: reviews, favourite Branches, your messages and complaints to support, your reports of problems with an Order, and any photos you attach to a review, message or report.

9. Device and notification data: your device’s notification token, the device type and operating system, the app version, and the notifications we have sent you in the app.

10. Administrative records: actions Wafra’s team takes on your account, such as viewing it, sending a password-reset link or correcting your details, with who took them and when.

1. Account data: the sign-in email address, phone numbers, the password, stored encrypted, and the notification token of each signed-in device.

2. Business data: trading names, commercial registration number, tax number, Jordan Food and Drug Administration registration number, addresses and locations, Branch details and Pickup Windows, links, descriptions, photos and logos, bags with their prices and daily confirmations, and the legal representative’s name and capacity.

3. Device and security data: the device identifier, the Admin PIN, stored encrypted, and sign-in and session-renewal records.

4. Acceptance records: when the Terms, this Policy or the Partnership Agreement are accepted, we keep the date and time of acceptance, the device identifier, the internet protocol (IP) address, the details of the app or browser used (user agent), the display language, the app version, the versions of the documents accepted, and the Partner’s details as shown at acceptance. These records are kept without alteration or deletion, as evidence of acceptance.

5. Financial records: orders, commissions, settlements and invoices, and the bank or CliQ details used for settlements if the Partner provides them, such as an IBAN or CliQ alias.

6. Account standing and performance: the Partner’s average rating and the number of reviews it has received from Customers, the number of Orders it cancelled, any badge shown on its profile, and warnings, suspensions and notes recorded by Wafra’s team about the partnership.

7. Communications: support requests, notices sent in the app, and notification settings such as the daily confirmation reminder.

8. Change records: such as name changes and administrative actions, with who made them and when.

1. Technical logs: IP address, request times and errors, for security and to operate the Platform.

2. Crash reports: the device type, the operating system and app versions, and the screen or action where the error occurred.

3. Website: aggregate usage statistics, such as the pages visited and clicks on the store links, without advertising cookies. The website uses cookies only to remember the language you choose and to keep authorised Wafra staff signed in to the control centre.

1. We do not collect card or bank account details from Customers, because payment is made in cash on collection.

2. We do not track your location in the background, and we do not access your contacts or photos, other than the photos you choose to attach to a review, message or report, or that a Partner chooses to upload.

1. We use your data to:

a) create and protect your account, and verify your phone or email address;

b) show Branches, bags and distances, carry out reservations, show the Collection Code, and let the Partner verify it and hand over the Order;

c) send notifications about your Orders and, according to your settings, about bags near you, and send operational notifications to Partners;

d) run points, levels, rewards and referrals;

e) calculate commissions and settlements with Partners and issue invoices;

f) handle complaints and support requests;

g) automatically translate business descriptions and bag names;

h) fix faults and improve the Platform;

i) prevent fraud and misuse, and enforce the Terms of Use;

j) meet our legal obligations, such as tax and accounting requirements and requests from competent authorities.

2. We do not sell your personal data, and we do not use it for advertising on behalf of others.

1. We process your data on the grounds permitted by the Personal Data Protection Law, including your consent, what is necessary to provide the service you request, our legitimate interest in protecting the Platform and keeping it secure, and meeting our legal obligations.

2. You may withdraw your consent at any time, for example to location or notifications, from your device settings or in the app, without affecting anything done before the withdrawal.

1. Partners: when you reserve, the Partner receives only what it needs to hand over your Order, such as the order code, the bag type, the pickup time and your name. The Partner may use this data only to fulfil your Order, under the Partnership Agreement.

2. Service providers: organisations that provide us with technical services and process data on our behalf and on our instructions, listed in Section 8.

3. Official authorities: where the law or a court order requires it, or to protect the rights or safety of Wafra or its Users.

4. If Wafra merges or its business is sold, the data passes to the successor with the same protection.

We use the following service providers:

These providers are bound to protect the data and to use it only for the stated purpose.

Some service providers process data outside the Hashemite Kingdom of Jordan, including in the European Union and the United States. We transfer only what is needed to provide the service, and we choose providers that offer appropriate data-protection safeguards, in accordance with the law.

1. We keep your account data for as long as your account exists.

2. When you delete your account, we delete your personal data or make it impossible to link to you within thirty (30) days, except what the law requires us to keep, such as accounting and tax records, or what is needed to resolve an existing dispute. Any copies left in backups are deleted when those backups expire.

3. Verification code records are deleted within seven (7) days of being sent.

4. The notification token is deleted when you sign out or when it becomes invalid.

5. Partners’ acceptance records are kept for the duration of the partnership and afterwards for as long as needed to establish legal rights under the law.

6. Technical logs and crash reports are kept for limited periods, usually no longer than ninety (90) days.

1. We use an encrypted connection between the app and our servers, we store passwords and Admin PINs encrypted in a way that cannot be read, and we limit access to data to those who need it.

2. On every request, the server checks that a Partner can reach only the data of its own business and Branches.

3. No system is completely secure. If a breach of your personal data occurs, we will notify the competent authority and the people affected as the law requires.

1. Under the Personal Data Protection Law, you have the right to:

a) know what data we hold about you and access it;

b) correct or update your data;

c) ask for your data to be deleted, subject to what the law requires us to keep;

d) withdraw your consent at any time;

e) object to the processing of your data or ask for it to be restricted, in the cases the law allows;

f) complain to the competent authority under the Personal Data Protection Law.

2. To exercise these rights, contact us using the details in Section 17. We may ask to verify your identity, and we will respond within the period set by law.

1. Location: you can grant or withdraw location permission in your device settings, and choose your city instead.

2. Notifications: you can turn all notifications off in your device settings, and turn off notifications about new bags near you in the app’s settings. Notifications about your Orders can be turned off only in your device settings.

3. Language: you can change the app language at any time.

4. Account: you can delete your account from the app or by contacting us.

The Platform is intended for adults. Anyone under eighteen (18) may use it only with the consent and under the supervision of a parent or guardian. If we learn that we have collected data from a minor without that consent, we delete it.

Under the Partnership Agreement, Partners undertake to use Customers’ data only to fulfil Orders, not to keep it for more than ninety (90) days after the Order is completed, not to use it for marketing without your consent, and not to share it with anyone else. If you believe a Partner has misused your data, contact us.

We may amend this Policy. Each new version is published on the website with its version number and effective date, and we will inform you of material changes through the Platform before they take effect. Previous versions remain available for reference.

1. For any question or request about your personal data:

a) Email: wafrasupport@gmail.com

b) Phone and WhatsApp: +962 77 510 5403

c) Registered address: Jabal Al-Weibdeh, Amman — Jordan.

Arabic is the official language of this Policy. Any translation is provided for information only, and the Arabic text prevails in the event of any difference.