Privacy Policy

When you create an account, place an order, or contact us, we collect:

• Phone number — for WhatsApp OTP authentication and order status updates.

• Name — to personalize communications and delivery.

• Delivery address — neighborhood and landmarks, and optionally GPS coordinates if you use the location picker.

• Order history — items purchased, totals, and status of each order.

• Payment confirmation screenshots — images you upload at checkout so we can verify your transfer.

• Push notification tokens — the device identifier we use to send order updates.

• Language preference — so we can display the interface in your chosen language.

We do not collect credit card or bank account numbers. Payment transfers happen directly through the payment apps you choose.

We use your data only for specific purposes:

• Fulfilling orders and delivering them to the correct address.

• Sending order status updates by WhatsApp or push notification.

• Verifying payment screenshots and preventing fraud.

• Responding to customer service inquiries.

• Improving the store and app based on aggregated usage patterns.

We only send marketing communications (such as new-arrival push notifications) if you have opted in.

We do not sell your personal data. We share the minimum necessary with the following service providers:

• Neon (database, hosted in Frankfurt, Germany) — stores your account and order information.

• Cloudinary (image hosting, United States) — stores product images and payment confirmation screenshots.

• WhatsApp — delivers OTP verification codes and order alerts.

• Expo Push Service, Apple APNs, and Google FCM — deliver push notifications to your device.

• Vercel (web hosting) — serves the website.

We do not use any analytics tools, trackers, or advertising networks.

Order records are retained indefinitely to meet accounting and tax obligations.

Payment confirmation screenshots are retained for one year after order completion, then deleted.

Device notification tokens are deactivated automatically on logout or uninstall.

You may request deletion of your account and all personal data at any time by contacting us.

You have the right to:

• Access the personal data we hold about you.

• Correct any inaccurate information.

• Request deletion of your account and data.

• Withdraw consent to marketing communications at any time.

• Receive your data in a portable format.

To exercise any of these rights, contact us at contact@classicmrt.com. We respond within 30 days.

Our store and app are not directed at children under 13. We do not knowingly collect their data.

If we learn that we have collected data from a child without appropriate consent, we will delete it immediately. If you are a parent and believe your child has provided data to us, please contact us.

We protect your data with TLS encryption in transit and at-rest encryption in our Neon database.

Mobile sessions are secured with JWT tokens stored in Secure Store on your device.

Administrative access is limited to authorized staff and protected with strong passwords.

No system is 100% secure. If a breach affects your data, we will notify you in accordance with applicable law.

Your data is processed in Europe (Neon servers in Frankfurt, Germany) and in the United States (Cloudinary for images).

By using our service, you consent to the transfer and processing of your data in those jurisdictions, which may have data-protection laws different from Mauritania's.

We may update this policy from time to time. Material changes will be published on this page with a new "last updated" date at the top.

Your continued use of the store or app after the changes are posted constitutes acceptance of the updated policy.

For questions about this policy or your personal data, reach us at:

Email: contact@classicmrt.com

Address: Nouakchott, Tevreghzeina