Privacy Policy

KARTSEEK operates a multi-service platform in Qatar covering marketplace, grocery, food delivery, pharmacy, and related services. For personal data collected from users in Qatar, KARTSEEK acts as the data controller.

This notice is issued under Law No. (13) of 2016 Concerning Personal Data Privacy Protection. Our processing in Qatar is supervised by the National Cyber Governance and Assurance Affairs (NCGAA), National Cyber Security Agency.

We collect only what a given service needs to work, and we tell you at the point of collection why we need it.

• •Account details — name, mobile number, email address, and password credentials.
• •Delivery details — the building, street and zone numbers you save, and the location you share when you ask us to find nearby stores.
• •Order and payment records — what you bought, when, and the payment method used. Card numbers are handled by our payment providers and are never stored on KARTSEEK systems.
• •Device and usage data — the pages you visit and the device you use, for security and for the analytics you have consented to.
• •Support correspondence — messages you send us and our replies.

Under PDPPL, we process your personal data on the basis of your consent, except where processing is necessary to perform a contract with you (delivering an order you placed), to comply with a legal obligation, or to protect a vital interest.

Consent is requested affirmatively — nothing beyond what the service strictly needs is switched on before you agree. You can withdraw consent at any time from Privacy Settings in your account, and withdrawal does not affect processing already carried out.

PDPPL gives you the following rights over your personal data. You can exercise any of them from Privacy Settings in your account, or by contacting our Data Protection Officer at [email protected]. We respond within 30 days.

• •Withdraw consent at any time
• •Access personal data held about you
• •Request correction of inaccurate data
• •Request erasure of your data
• •Object to processing for direct marketing
• •Be notified of a breach affecting your data

We share personal data only with parties who need it to deliver the service you asked for:

• •The seller or restaurant fulfilling your order — your name, contact number and delivery address.
• •The delivery partner assigned to your order — the same details, for the duration of the delivery.
• •Payment providers licensed in Qatar, to take and settle your payment.
• •Service providers who host and secure our systems, bound by written processing agreements.
• •Public authorities, where we are legally required to disclose.
• •We do not sell personal data.

Personal data collected from users in Qatar is stored and processed in-region by default.

Where a transfer outside Qatar is unavoidable — for example a global service provider — we transfer only under the conditions PDPPL permits, with contractual safeguards that carry the same level of protection, and we do not transfer at all where doing so would prejudice those protections.

We keep your account while it is open. Order, payment and invoice records are retained for 5 years to meet commercial and tax record-keeping obligations in Qatar, after which they are deleted or irreversibly anonymised.

When you delete your account we remove your profile and contact details immediately, and retain only the transaction records we are required to keep.

Data is encrypted in transit and at rest, access is restricted to staff who need it for their role and is logged, and payment card data never touches our systems.

If a breach affects your personal data we notify the National Cyber Governance and Assurance Affairs (NCGAA), National Cyber Security Agency and the individuals concerned within 72 hours of becoming aware of it, as PDPPL requires.

KARTSEEK is not intended for anyone under 18. We do not knowingly collect personal data from children below that age; where we learn that we have, we delete it.

Alongside PDPPL, our operations in Qatar are subject to:

• •Law No. (16) of 2010 on Electronic Commerce and Transactions
• •Qatar Central Bank payment services regulations
• •Ministry of Public Health rules for pharmacy and telemedicine
• •Ministry of Commerce and Industry consumer protection rules

Data Protection Officer — [email protected].

If you are not satisfied with our response you can complain to the National Cyber Governance and Assurance Affairs (NCGAA), National Cyber Security Agency (https://www.ncsa.gov.qa).