Privacy Policy
This policy is provisional and will be finalised before public launch following legal review.
Privacy Policy
Tallatek is committed to protecting your personal data in accordance with the Bahrain Personal Data Protection Law (PDPL).
1. Data Controller
Elaaf Electronic Services — Manama, Kingdom of Bahrain. Contact: hello@tallatek.com
2. Data We Collect
- Account data: name, email, mobile number, addresses
- Payment data: processed by TAP — we do not store card details on our servers
- Browsing data: via cookies and analytics tools
3. Legal Basis for Processing
Contract performance (order processing), legitimate interest (service improvement), and your consent (marketing communications).
4. How We Use Your Data
To process orders and deliveries, provide customer service, improve the platform, send order notifications, and — with your consent — marketing.
5. Data Sharing
We share only what is necessary with: vendors (to fulfil your order), TAP (payments), Parcel (shipping), and analytics providers. We never sell your data.
6. Retention
Account data is kept while your account is active; order data is retained per legal and accounting requirements (minimum 5 years).
7. Your Rights under PDPL
You have the right to access, rectify, erase, and port your data. Contact us to exercise any of these rights — we respond within 30 days.
8. Cookies
We use essential, analytics, and marketing cookies. Manage your preferences via the consent banner.
9. International Transfers
Some data may be processed by providers outside Bahrain under contractual safeguards compatible with PDPL.
10. Breach Notification
In the event of a breach affecting your data, we will notify the authorities and affected users as legally required.