Last updated: 2026-07-29

1. Who We Are & the Scope of This Policy

The Dukanak platform is responsible for processing the data of merchants who open an account on it (acting as the "data controller" for this data). The data of each store's customers (who buy from a specific merchant) is processed on that merchant's behalf, who remains the primary controller of it; Dukanak acts as a "data processor" with respect to storage and technical infrastructure.

2. Data We Collect

a) Merchant (Account Owner) Data

• Account data: name, email, phone number, password (encrypted).
• Store data: store name, logo, description, contact details, address.
• Payment and subscription data: plan details, billing history. Bank card numbers are not stored directly on our servers when using an external payment gateway.
• Technical data: IP address, device and browser type, login logs, cookies.

b) Store Visitors' and Customers' Data

• Order data: name, phone, shipping address, email (upon completing a purchase).
• Statistically anonymized browsing data: visits, device, approximate country — for the store's analytics for its owner.

3. How We Use Your Data

• Operating your account and store and enabling all dashboard features.
• Processing subscriptions and invoices and communicating about them.
• Sending necessary notifications (account confirmation, security alerts, important service updates).
• Improving platform performance and detecting and preventing faults and fraud.
• Responding to your inquiries via the contact form or support.

We do not sell your personal data to any third party for marketing purposes, and we do not use it for targeted ads within the platform.

4. Legal Basis for Processing

We process your data based on: (a) performance of our contract with you (providing the platform service to you), (b) your explicit consent where required by law, (c) a legal obligation (such as retaining financial records), or (d) our legitimate interest in securing the platform and preventing its misuse, consistent with Jordan's Personal Data Protection Law No. (24) of 2023.

5. Sharing Data With Third Parties

We share limited data with trusted service providers we rely on solely to operate the platform, under agreements that bind them to protect your data, such as:

• The email service provider (to send system notifications and invoices).
• The payment gateways you choose to receive your subscription payments or your customers' payments.
• The hosting and cloud infrastructure provider on which the platform's data is stored.

We may disclose limited data if requested by a competent Jordanian judicial or official authority under the law.

6. Cookies

We use essential cookies to maintain your login session and language preference (Arabic/English), and optional cookies for analytics if enabled by the merchant for their store (such as Google Analytics). You can adjust your browser settings to reject non-essential cookies, noting that this may affect some platform functions.

7. Data Security

• Passwords are encrypted using one-way hashing algorithms (we can never see your password).
• The connection to the platform is encrypted via HTTPS.
• We support optional two-factor authentication (2FA) for extra account protection.
• We monitor suspicious login attempts and automatically rate-limit them.

Despite all these measures, no method of electronic transmission or storage is 100% secure. In the event of any breach affecting your data, we will notify you and the relevant official authorities as required by law.

8. Data Retention Period

We retain your account data for as long as it remains active, and even after cancelling your subscription for a reasonable period for legal and accounting purposes, after which it is deleted or anonymized. You may request early and complete deletion of your account and data by contacting us, subject to any legal obligation requiring certain financial records to be kept longer.

9. Your Rights Over Your Data

Under Jordan's Personal Data Protection Law, you have the right to:

• Access your data held by us and obtain a copy of it.
• Request correction of any inaccurate data.
• Request deletion of your data (subject to legal exceptions).
• Withdraw your consent to a specific processing activity at any time, where that processing was based on consent.
• Object to processing of your data if it is unnecessary or exceeds the purpose for which it was collected.

To exercise any of these rights, contact us using the details at the bottom of this page, and we will respond within a reasonable period.

10. The Merchant's Customer Data

If you are a merchant: you are responsible for obtaining the necessary consent from your customers to collect their data, and for responding to any request from them regarding their data under the law. Dukanak provides you with the technical tools (secure storage, limited access permissions for your team) to help you comply, but the legal obligation toward your customers remains yours as the merchant.

11. Minors' Privacy

The platform is not directed at those under 18 as holders of merchant accounts. If we learn that a merchant account was created by a minor without a guardian's permission, we will suspend it.

12. Changes to This Policy

We may update this privacy policy periodically. We will publish any material change on this page and notify you via email or an in-dashboard notice before it takes effect.

13. Contact Us

For any question or request related to your privacy and data, contact us via:

• Email: noreply@dukanek.com
• WhatsApp: WhatsApp Support
• Contact