Privacy Policy

1. What we collect

• Account details: first and last name, email, phone number, and a securely hashed password.
• Booking details: the weight you're dropping off, your chosen slot, and your booking history.
• Address details: if you save one to your account.
• Payment information: handled directly by Stripe, our payment processor — we don't receive or store your full card number.
• Verification codes: one-time codes sent to confirm it's really you, for sign-in and password resets.
• Contact form submissions: whatever name, email, phone, and message you choose to send us — submitting the form doesn't require an account.
• Technical/error data: if something breaks while you're using the site, we log basic technical details (what happened, the page URL, your browser) to help us fix it. See Section 3.
• Cookies: see Section 6.

2. Why we collect it

• To create and secure your account, including verifying sign-ins.
• To take and fulfil your bookings, and let you track and review them.
• To process payment through Stripe.
• To contact you about a booking (e.g. it's ready for pickup) or respond to a message you send us.
• To diagnose and fix bugs when something goes wrong on the site.
• To meet legal and accounting obligations, including retaining booking/payment records as required by UAE law.
• Where you've agreed to it via the cookie banner, to understand how the site is used so we can improve it.

3. Error/technical logs

When something goes wrong on the site, we automatically record technical details — the error message, the page you were on, and basic browser information — so we can find and fix the problem. This is kept separately from your account and isn't used for anything beyond diagnosing issues.

4. Who we share it with

We don't sell your personal data. We share it only where needed to run the service:

• Stripe, to process payments.
• Our SMS/email provider, to deliver verification codes and booking updates.
• Law enforcement or regulators, only where we're legally required to.

5. Where your data is stored

[DESCRIBE YOUR ACTUAL HOSTING/DATABASE REGION HERE.] If any of your data is processed or stored outside the UAE, we take steps required under UAE data protection law to keep it protected to an equivalent standard.

6. How long we keep it

We keep account data for as long as your account is active. If you delete your account, we remove your personal details and saved addresses, but retain booking and payment records in an anonymized form for as long as required for accounting and tax purposes under UAE law. Contact form messages are kept for [X] [DECIDE A RETENTION PERIOD], and technical error logs for [X].

7. Cookies

We use a small number of essential cookies to keep you signed in, remember your cart, and remember your cookie preference itself — these don't require consent since the site can't function properly without them. If we add optional cookies in future (for example, to understand site usage), we'll only set them if you choose "Accept all" on the cookie banner; choosing "Essential only" keeps those off.

8. Your rights

Subject to UAE data protection law, you can:

• Ask what personal data we hold about you, and get a copy of it.
• Ask us to correct inaccurate details — you can update most of these yourself in Account Settings.
• Ask us to delete your account, from the same Account Settings page.
• Object to or ask us to restrict certain uses of your data.

To exercise any of these, contact us at [CONTACT EMAIL] or via the contact form.

9. Children

Kaja's isn't intended for anyone under 18, and we don't knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll post a notice on the site before they take effect.

11. Contact

Questions about this policy or your data? Reach us at [CONTACT EMAIL], write to us at [REGISTERED ADDRESS], or use the contact form.