Privacy Policy

Who we are

Thobz ("we", "us") is a fabric house in Manama, Kingdom of Bahrain. We sell fabric by the metre and menswear products through the Thobz app, and we are responsible for the personal data described in this policy. You can reach us at [email protected].

What we collect

• Account details: your name, email address and password, and your phone number if you add it. Your password is stored only as a one-way hash, so no one at Thobz can read it.
• Delivery addresses you save: area, block, road, building, floor, apartment and any delivery notes.
• Orders: the products, quantities, colours and sizes you choose, the delivery method, the payment method you pick, any promo code, your order notes, the prices, the order's progress, and your rating if you give one.
• Your bag and the items you save for later.
• Notifications: if you allow notifications, your device's notification token, and the notifications we have sent you.
• Technical data: when the app or website contacts our servers, the servers record the time, what was requested and the network (IP) address it came from. We use this to keep Thobz secure and to fix problems.

We do not use advertising or analytics tools, we do not track you across other apps or websites, and the app does not access your contacts, photos, camera or microphone.

Your location

When you add an address, you can choose to fill it in from your current location. This happens only when you tap that option and only if you allow location access. Your phone turns your location into a street address using Apple's or Google's location service, and the app fills in the form for you. Your exact coordinates are not sent to Thobz or stored by us; we keep only the address you save.

How we use your data

• To create your account, keep it secure and keep you signed in.
• To take, prepare, deliver and support your orders, and to contact you about them.
• To send you notifications about your orders and, if notifications are on, occasional news from Thobz. You can turn notifications off at any time in your phone's settings.
• To apply promo codes and stop them being misused.
• To keep the sales records the law requires, and to protect Thobz and our customers from fraud and abuse.

We use your data to carry out our agreement with you (your orders), to meet our legal obligations, and to keep the service secure. Notifications and location are used only with your permission, which you can withdraw at any time. We do not sell your personal data and we do not use it for advertising.

Payments

If you pay cash on delivery, you pay when your order arrives. If you pay online, for example with BenefitPay, a card or Apple Pay, the payment is handled by our payment provider, Tap Payments. We receive only the result of the payment, such as whether it succeeded and the amount, and we never see or store your full card number or banking details.

Who we share it with

We share only what each party needs to do its job:

• Delivery: whoever delivers your order, whether our own staff or a delivery partner, receives your name, phone number and delivery address.
• Cloudflare: traffic to our app and website passes through Cloudflare, which protects our servers and hosts our product images.
• Notifications: Expo, Apple (on iPhone) and Google (on Android) deliver notifications to your device. They receive your device's notification token and the text of the notification.
• Tap Payments, our payment provider, when you pay online.
• Authorities, when the law requires us to.

We never share your data with advertisers or data brokers.

Where your data is kept

Your account and order data are kept in Thobz's own database, on servers we operate in the Kingdom of Bahrain. The services listed above (Cloudflare, Expo, Apple, Google and Tap Payments) may handle the limited data they receive on servers outside Bahrain.

How we protect it

All connections between the app or website and our servers are encrypted (HTTPS). Passwords are stored only as one-way hashes. On your phone, your sign-in is kept in the iPhone Keychain or the Android Keystore. Only the Thobz staff who handle orders and support can see customer data. No system is perfectly secure, but if a security incident affects your data, we will tell you as the law requires.

How long we keep it

• Your account, addresses, bag, saved items and notifications: until you delete your account.
• Orders: we keep order records (products, amounts, delivery address and notes) for as long as Bahrain's laws require us to keep sales records. When you delete your account, your name, email address and phone number are removed from them.
• Sign-in sessions: deleted shortly after they expire.
• Technical data: kept only as long as we need it for security and fixing problems.

Deleting your account

Open Profile in the app and tap Delete account. Your account, profile, saved addresses, bag, saved items, notifications and notification token are deleted straight away. Your past orders stay in our sales records, no longer linked to you, without your name, email address or phone number.

Your rights

You can ask us to give you a copy of the personal data we hold about you, to correct it, or to delete it. You can also object to how we use it, and withdraw your permission for notifications or location at any time.

You can do most of this yourself: edit your name, phone number and addresses in Profile, turn notifications and location off in your phone's settings, and delete your account from Profile. For anything else, email [email protected]. We will reply as soon as we can, and always within the time the law requires. If you are not happy with our answer, you can complain to Bahrain's Personal Data Protection Authority.

Children

Anyone under 18 should use Thobz with a parent's or guardian's permission. Children under 13 should not create an account themselves, and we do not knowingly collect their data. If you believe a child under 13 has created an account, contact us and we will delete it.

Changes to this policy

When we change this policy, we update the date at the top. If a change is important, we will tell you in the app before it takes effect.

Contact

Questions about your data or this policy: [email protected]. Thobz, Manama, Kingdom of Bahrain.