Privacy Policy

This policy is provisional and will be finalised before public launch following legal review.

Privacy Policy

Tallatek is committed to protecting your personal data in accordance with the Bahrain Personal Data Protection Law (PDPL).

1. Data Controller

Elaaf Electronic Services — Manama, Kingdom of Bahrain. Contact: hello@tallatek.com

2. Data We Collect

• Account data: name, email, mobile number, addresses
• Payment data: processed by TAP — we do not store card details on our servers
• Browsing data: via cookies and analytics tools

3. Legal Basis for Processing

Contract performance (order processing), legitimate interest (service improvement), and your consent (marketing communications).

4. How We Use Your Data

To process orders and deliveries, provide customer service, improve the platform, send order notifications, and — with your consent — marketing.

5. Data Sharing

We share only what is necessary with: vendors (to fulfil your order), TAP (payments), Parcel (shipping), and analytics providers. We never sell your data.

6. Retention

Account data is kept while your account is active; order data is retained per legal and accounting requirements (minimum 5 years).

7. Your Rights under PDPL

You have the right to access, rectify, erase, and port your data. Contact us to exercise any of these rights — we respond within 30 days.

8. Cookies

We use essential, analytics, and marketing cookies. Manage your preferences via the consent banner.

9. International Transfers

Some data may be processed by providers outside Bahrain under contractual safeguards compatible with PDPL.

10. Breach Notification

In the event of a breach affecting your data, we will notify the authorities and affected users as legally required.