Who is responsible
BRILLUNE DIŞ TİCARET LİMİTED ŞİRKETİ, commercial register no. 1069839 (Istanbul Trade Registry, MERSIS 0187172075400001), Demirkapı Mah. 1654. Sk. Metro Konutları Sitesi C No: 17 İç Kapı No: 9, Bağcılar, İstanbul, Türkiye ("JumlaShops", "we") is responsible for the personal data processed through the JumlaShops app and website. Questions about this policy: support@jumlashops.com.
What we collect
- Account: your mobile number, used to sign you in with a one-time code.
- Shop: the shop name, and a shop logo if you add one.
- Delivery: the addresses you save, each with a governorate, city, street, a landmark and a contact phone for the person who receives the shipment.
- Verification, only if you choose it: your commercial register number and a photo of the register, and your national ID number and a photo of the ID.
- Orders: what you ordered, the prices, the delivery address and contact phone on each order, the order status, cancellations and return requests, and photos you attach to a return.
- Support: the messages you send in the support chat and the images or PDF files you attach.
- Favourites: the products you save.
- Notifications: whether you allow push notifications, your notification settings, and the device token that delivers them; whether you agreed to receive order messages on WhatsApp.
- Error reports: when the app fails, a report with the app version, the device model and system version, the screen that failed and your account ID. Phone numbers, addresses, names and documents are removed from these reports before they leave your phone.
We do not collect your location, your contacts, or advertising identifiers, and the app has no analytics or advertising trackers. Your language choice and basket are stored on your phone only.
Our website, jumlashops.com, sets no cookies and runs no analytics, and its fonts and images are served by the site itself. Like any web host, ours keeps a standard access log (IP address, time and the page requested) for a limited time to keep the site secure.
Why we use it
- To create and secure your account, and to sign you in.
- To prepare, deliver and collect payment for your orders, and to handle cancellations and returns.
- To confirm that a shop is a real business, when you ask for verification.
- To answer your support requests.
- To tell you about your orders and support replies, by push notification and, if you agreed, by WhatsApp.
- To send the sign-in code to your number by WhatsApp.
- To find and fix errors in the app.
- To keep the records that Egyptian commercial and tax law require.
We use your data on the basis of the contract between us (your orders), your consent (verification documents, WhatsApp messages, notifications), and our legal duties (keeping the books). We do not sell your data and we do not use it for advertising.
Who we share it with
- Delivery partners receive the shop name, the delivery address and its contact phone, and the amount to collect, for each shipment.
- Bulk sellers never receive your identity. They see only what to prepare.
- Meta Platforms (WhatsApp Business) delivers your sign-in code and, if you agreed, order messages to your number.
- Apple and Google deliver push notifications to your device, through the Expo push service.
- Supabase hosts our database, sign-in service and file storage.
- Sentry receives the error reports described above.
These providers act only on our instructions. Our database and servers are in the European Union (Germany and the Netherlands). Meta, Apple, Google and Expo may process the data they handle for us in other countries, including the United States, under their own data protection terms. We share data with public authorities only when the law requires it.
How long we keep it
- While your account is open: everything above, except that support attachments and return photos may be removed 12 months after the conversation or the return closes.
- Push tokens: until you sign out, switch notifications off, or delete the account.
- Error reports: 90 days.
- After you delete your account: see the next section.
Deleting your account
You can delete your account in the app (Menu, then Profile, then Delete account) or from the account-deletion page on our website. From the request, notifications stop and you are signed out of every device within the hour. We close the account no sooner than 30 days later, once every open order and return is settled; signing in during those 30 days cancels the request.
When the account closes we delete the ID and commercial-register photos, the shop logo, the saved addresses, the favourites, the WhatsApp consent, the notification settings and the support attachment files, and we free your phone number so that it can open a new account.
We keep order records and the identifiers on them (the shop name, the phone, the commercial-register number and the national-ID number), the delivery address and contact phone on each order, the return and delivery photos, the text of support conversations, and the deletion request itself, for five years from the end of the calendar year of your last order, because the Commercial Code and the tax law require us to keep the books. If you have no orders, we clear the phone and the identifiers 90 days after closing.
Your rights
You may ask us to see the data we hold about you, to correct it, to delete it (subject to the retention above), to object to a use, or to receive a copy. Write to support@jumlashops.com from the account's phone number or through the support chat. We answer within 30 days. You may also complain to the Personal Data Protection Centre in Egypt.
Security
Data travels encrypted between your phone and our servers. Documents and attachments are stored in private storage that only you and our operations team can open. Access by staff is limited to what their work needs and is logged.
Children
The app is for businesses and for people aged 18 or over. We do not knowingly collect data from anyone under 18.
Changes
The date at the top shows the current version. When a change is material, we tell you in the app before it takes effect.