Privacy Policy

This policy applies to visitors and customers of Mahsool’s digital services in the United Arab Emirates and elsewhere where our services are available. Some features (for example wholesale auctions or restaurant portals) may collect additional business-related details described at the point of use.

By using our services, you acknowledge this Policy. If you do not agree, please discontinue use of the services.

We may collect: account details (such as name, email, phone number, and role where applicable); delivery and billing addresses; order and subscription history; communications you send us (including contact forms and support messages); technical data such as device type, browser, approximate location derived from IP, and cookies or similar technologies; payment-related references processed by our payment partners (we do not store full card numbers on Mahsool servers); and integration data you or an administrator configure (for example notification preferences).

We use personal information to provide and improve our services: processing orders and deliveries, managing subscriptions and boxes, authenticating accounts, sending transactional messages (such as order updates or verification codes where enabled), customer support, fraud prevention, analytics to understand how the site is used, and complying with legal obligations.

We do not sell your personal information. Marketing communications, if any, will be sent in line with applicable law and your preferences.

Where required by law, we rely on appropriate grounds such as performing a contract with you (for example fulfilling an order), legitimate interests (for example securing our platform and improving usability), or consent (for example optional marketing or certain cookies).

You may withdraw consent where processing is consent-based, subject to limitations necessary to complete transactions or meet legal requirements.

If you create a subscription for recurring box deliveries, we process the data needed to operate your plan—including schedule, delivery preferences, box configuration where applicable, and payment status as reported by our payment provider.

Subscription controls (such as pausing) are offered only as described in your account and in product rules shown in the app or website. For each subscription, you may pause that subscription at most once over the lifetime of that subscription; after a pause has been used, the service does not support additional pauses for the same subscription through the platform.

The practices in this Policy apply whether you access Mahsool through our website or through native mobile applications we publish for production use, to the extent those apps connect to the same services.

We use cookies and similar technologies for essential functions (such as session security and language preferences), and where configured, analytics or preference storage. Some shopping features may store cart or favorites data in your browser so the experience works before you sign in.

You can control cookies through your browser settings; blocking essential cookies may affect checkout, login, or cart behaviour.

We may share personal information with trusted processors who help us run the service—such as hosting, email delivery, payments, analytics, or customer-support tools—under contracts that require them to protect data and use it only for the services they provide to us.

We retain personal information for as long as needed to provide the services, meet legal, tax, or accounting requirements, resolve disputes, and enforce agreements. Retention periods may differ by data category.

We implement appropriate technical and organisational measures designed to protect personal information. No online service can guarantee absolute security.

Depending on applicable law, you may have rights to access, correct, delete, or restrict certain processing of your personal information, or to object to certain uses. To exercise these rights, contact us using the details on our Contact page. We may need to verify your identity before responding.

Our services are not directed at children. If you believe a child has provided personal information to us, please contact us and we will take appropriate steps.

Your information may be processed in the UAE and in other countries where our service providers operate. Where required, we use appropriate safeguards consistent with applicable law.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we publish revisions. Continued use of the services after changes means you accept the updated Policy, except where stricter consent rules apply.

Questions about this Privacy Policy or your personal data may be submitted through our Contact page or the contact channels listed there.

For app-store listings or regulatory disclosures that require a privacy URL, this page may be linked as Mahsool’s privacy notice for the described services.