Privacy Policy
شفافية وأمان: نحرص على توضيح كافة الشروط والسياسات لضمان أفضل تجربة لك.
Privacy Policy
Last updated : 2026/10/01
The Selaa platform respects the privacy of its users and is committed to protecting their personal data and not collecting, using, or sharing it except to the extent necessary to provide the platform's services, or based on the consent of the data owner, or in cases permitted by the system .
This policy applies to all users of the product, including customers, merchants, delivery service providers, and employees or collaborators of the platform, depending on their relationship to the service .
This policy is part of the terms of use of the Selaa platform, and using the services after reviewing it constitutes acceptance of the applicable provisions, taking into account cases where the system requires explicit or independent consent .
First: What is personal data?
Personal data refers to information that can directly or indirectly identify or be associated with a person. Examples include :
• the name .
• phone number .
• Email when using it .
• Delivery address .
• Account information .
• Order and purchase data .
• Contact information for the merchant or customer service .
• Payment or collection details required to execute the transaction .
• Device data, browser, IP address , and technical logs .
• Images, files, or documents that a user sends to a merchant or business when needed to process a request , complaint, warranty, or refund .
• Any other data provided by the user directly or generated as a result of using the platform's services .
Data is not collected simply because it can be collected, but only to the extent that it serves a legitimate and specific purpose .
Second: Who might collect or process the data?
Depending on the nature of the service, the data may be processed by :
1- Sale platform
To operate the platform, manage accounts and orders, improve service, protect systems, provide customer service, and coordinate between parties .
2- The merchant
To process customer orders, prepare the product, communicate with the customer, execute the sale, and provide after-sales services .
3- Delivery point
To reach the customer's address, carry out the delivery process, and communicate with them when needed .
4- Technical service providers
To the extent necessary for the operation, hosting, maintenance and protection of the systems, and in accordance with regulatory requirements and agreements concluded with them .
5- Official bodies
When data disclosure is required by law, a court order, or a request from a competent authority .
Third: Why use data as a commodity?
Personal data may be used for the following purposes :
1. Creating and managing a user account .
2. Order fulfillment .
3. Send the order to the merchant .
4. Enabling the merchant to process the order and communicate with the customer .
5. Delivery is being carried out .
6. Collection of amounts related to the request when the collection service is available .
7. Handling replacements , returns, warranties, and complaints .
8. Preventing fraud, manipulation, and misuse of the platform .
9. Account and system protection .
10. Investigating violations and disputes .
11. Improving products, services, and user experience .
12. Preparing operational statistics and analyses .
13. Sending communications and marketing advertisements in accordance with regulatory approvals and requirements .
Data processing must be related to a legitimate and specific purpose and must not be used for purposes inconsistent with the purpose for which it was collected, except on a legal basis that permits it .
Fourth: Customer data obtained by the merchant
When a customer orders a product from a store, the merchant may receive the data necessary to fulfill the order, such as :
• Customer name .
• phone number .
• Delivery address .
• Details of the products required .
• Order details required for sale, delivery and after-sales service .
A merchant may not use customer data obtained through a product for independent purposes unrelated to the order or service unless they have an independent legal basis that permits it .
The merchant is prohibited from :
• Selling customer data .
• Delivering it to unauthorized parties .
• Using it to annoy the customer .
• Using it to send illegal marketing .
• Using it to access other customer data without justification .
Fifth: Merchant data obtained for a commodity
A product may collect the merchant data necessary to set up and manage the store, including :
• Name of the shop owner .
• Contact information .
• Store details .
• Store address .
• Business activity data when needed .
• Product data .
• Order data .
• Sales and settlement data .
• Customer service data .
• Performance and interaction data within the platform .
This data is used to manage the relationship with the merchant, operate commodity services, calculate dues and commissions, and provide reports and agreed-upon services .
Sixth: Delivery information
When fulfilling an order that requires delivery, the necessary data may be shared with the party or person responsible for delivery .
The data is limited to what is necessary to complete the delivery process, such as :
• Recipient's name .
• phone number .
• Delivery address .
• Order details required for delivery .
This data may not be used for purposes unrelated to delivery except on a separate legal basis .
Seventh: Approval of data processing
A product is obligated to obtain the consent of the data subject when consent is the legal basis required for processing .
Some data may also be processed without independent consent when processing is necessary to perform or enforce a contract , to fulfill a legal obligation, to claim or defend rights, or in cases where permitted by law .
The Syrian Personal Data Protection Law No. 12 of 2024 regulates these principles and establishes for the data subject rights related to knowledge, access, withdrawal, objection, and others .
Eighth: Marketing and Advertising Communications
Do not use the contact information commodity to send direct electronic marketing except in accordance with applicable consent and legal requirements .
Marketing messages must include the information required by law, clearly state their marketing nature, and provide a clear and accessible means of stopping the messages or withdrawing consent .
Law No. 12 of 2024 regulates direct electronic marketing and requires, among other things, the consent of the data subject, the disclosure of the sender’s identity, and the provision of a means to withdraw or refuse communications .
The product does not use customer data to target them with offers related to products or services that are prohibited by Sharia or banned by law .
Ninth: Sharing data with other parties
Do not sell personal data to customers or merchants .
Data may be shared when necessary with specific parties such as the merchant, delivery service provider, or technical service provider, or when required by law or court order .
The minimum amount necessary to achieve the legitimate purpose is disclosed .
No party receiving data from a commodity may use it for a purpose other than that for which it was disclosed .
Tenth: Transferring data outside the Syrian Arab Republic
Some of the technical services used by the product may depend on systems or services that host the data outside the Syrian Arab Republic .
The company does not transfer, store, or share personal data outside of Syria except in accordance with the requirements, licenses, permits, and approvals required by law and the competent authorities, whenever required .
The Syrian Personal Data Protection Law regulates cross-border transport and sets specific conditions and controls for it .
Eleventh: Data Protection
The product implements appropriate technical and organizational procedures to maintain data confidentiality and integrity and prevent :
• Unauthorized access .
• The leak .
• Unlawful disclosure .
• Unauthorized modification .
• Loss .
• Destruction .
• Illegal use .
These measures may include permission controls, authentication, encryption where appropriate, security event logs, backups, and incident detection and handling procedures .
Twelfth: Data breach
Upon discovering a security incident or data breach, Selaa takes the necessary measures to mitigate its impact, investigate and address it, and complies with reporting requirements to the competent authorities or data owners when required by law .
The Personal Data Protection Act requires controllers and processors to take technical and organizational measures to protect data, and regulates their responsibilities in case of violations and breaches .
Thirteenth: Data retention period
A commodity retains data for as long as necessary to achieve the purpose for which it was collected , to satisfy legal or accounting obligations, or to protect rights and claims .
When the need for it ends, the data is deleted or the information that allows its owner to be identified is hidden, unless there is a legitimate reason to retain it .
Fourteenth: Rights of the data subject
The data subject has the right, according to the applicable regulations :
• Knowing the type of data being processed and the purpose of doing so .
• Accessing his data .
• Knowing how long it will be kept or the criteria used to determine the duration .
• Request to correct incorrect data .
• Withdrawing consent when the process is based on it .
• Objection to some processing operations .
• Request to delete data when there is no legitimate reason to keep it .
• To file a complaint regarding the misuse of his data .
The Personal Data Protection Act establishes these rights and sets out procedures to regulate requests for data access .
Fifteenth: Children
Children’s data may only be collected or processed within the limits permitted by the system, and where the consent of the guardian or legal representative is required, it shall be obtained in accordance with legal requirements .
The company pays special attention to data relating to children and only collects what is necessary for the legitimate purpose .
Sixteenth: Account details and password
The user is responsible for maintaining the confidentiality of their account login details and not sharing them with others .
If unauthorized access to the account is suspected, the seller must be notified immediately so that appropriate action can be taken .
The product does not require the user to send their account password via customer service .
Seventeenth: Publicly published data
Some information that the merchant chooses to publish on the platform may be made public, such as :
• The name of the store .
• Photos of the store .
• Products .
• Prices .
• Offers .
• Working hours .
• Store location .
• Ratings and reviews .
This information is different from the specific data that a product collects to fulfill an order or manage an account .
Eighteenth: Ratings and Reviews
When writing a rating or review, a product may display a name or abbreviated data related to the rating, depending on the platform's design .
The assessment must not include personal data of clients or other persons without the necessary right or consent, and sensitive or illegal information may not be published .
Nineteenth: Amendment to the Privacy Policy
The company may update this policy when services, systems, or data processing mechanisms change .
When making material changes, a product seeks to inform users by appropriate means, and requests new consent when legally required .
Twenty: Communicating about privacy
For privacy-related inquiries or to submit a request concerning personal data, please contact Selaa Customer Service :
+963 983 461 245
The application must include the information necessary to verify the identity of the applicant and the nature of the application .
The Selaa platform respects the privacy of its users and is committed to protecting their personal data and not collecting, using, or sharing it except to the extent necessary to provide the platform's services, or based on the consent of the data owner, or in cases permitted by the system .
This policy applies to all users of the product, including customers, merchants, delivery service providers, and employees or collaborators of the platform, depending on their relationship to the service .
This policy is part of the terms of use of the Selaa platform, and using the services after reviewing it constitutes acceptance of the applicable provisions, taking into account cases where the system requires explicit or independent consent .
First: What is personal data?
Personal data refers to information that can directly or indirectly identify or be associated with a person. Examples include :
• the name .
• phone number .
• Email when using it .
• Delivery address .
• Account information .
• Order and purchase data .
• Contact information for the merchant or customer service .
• Payment or collection details required to execute the transaction .
• Device data, browser, IP address , and technical logs .
• Images, files, or documents that a user sends to a merchant or business when needed to process a request , complaint, warranty, or refund .
• Any other data provided by the user directly or generated as a result of using the platform's services .
Data is not collected simply because it can be collected, but only to the extent that it serves a legitimate and specific purpose .
Second: Who might collect or process the data?
Depending on the nature of the service, the data may be processed by :
1- Sale platform
To operate the platform, manage accounts and orders, improve service, protect systems, provide customer service, and coordinate between parties .
2- The merchant
To process customer orders, prepare the product, communicate with the customer, execute the sale, and provide after-sales services .
3- Delivery point
To reach the customer's address, carry out the delivery process, and communicate with them when needed .
4- Technical service providers
To the extent necessary for the operation, hosting, maintenance and protection of the systems, and in accordance with regulatory requirements and agreements concluded with them .
5- Official bodies
When data disclosure is required by law, a court order, or a request from a competent authority .
Third: Why use data as a commodity?
Personal data may be used for the following purposes :
1. Creating and managing a user account .
2. Order fulfillment .
3. Send the order to the merchant .
4. Enabling the merchant to process the order and communicate with the customer .
5. Delivery is being carried out .
6. Collection of amounts related to the request when the collection service is available .
7. Handling replacements , returns, warranties, and complaints .
8. Preventing fraud, manipulation, and misuse of the platform .
9. Account and system protection .
10. Investigating violations and disputes .
11. Improving products, services, and user experience .
12. Preparing operational statistics and analyses .
13. Sending communications and marketing advertisements in accordance with regulatory approvals and requirements .
Data processing must be related to a legitimate and specific purpose and must not be used for purposes inconsistent with the purpose for which it was collected, except on a legal basis that permits it .
Fourth: Customer data obtained by the merchant
When a customer orders a product from a store, the merchant may receive the data necessary to fulfill the order, such as :
• Customer name .
• phone number .
• Delivery address .
• Details of the products required .
• Order details required for sale, delivery and after-sales service .
A merchant may not use customer data obtained through a product for independent purposes unrelated to the order or service unless they have an independent legal basis that permits it .
The merchant is prohibited from :
• Selling customer data .
• Delivering it to unauthorized parties .
• Using it to annoy the customer .
• Using it to send illegal marketing .
• Using it to access other customer data without justification .
Fifth: Merchant data obtained for a commodity
A product may collect the merchant data necessary to set up and manage the store, including :
• Name of the shop owner .
• Contact information .
• Store details .
• Store address .
• Business activity data when needed .
• Product data .
• Order data .
• Sales and settlement data .
• Customer service data .
• Performance and interaction data within the platform .
This data is used to manage the relationship with the merchant, operate commodity services, calculate dues and commissions, and provide reports and agreed-upon services .
Sixth: Delivery information
When fulfilling an order that requires delivery, the necessary data may be shared with the party or person responsible for delivery .
The data is limited to what is necessary to complete the delivery process, such as :
• Recipient's name .
• phone number .
• Delivery address .
• Order details required for delivery .
This data may not be used for purposes unrelated to delivery except on a separate legal basis .
Seventh: Approval of data processing
A product is obligated to obtain the consent of the data subject when consent is the legal basis required for processing .
Some data may also be processed without independent consent when processing is necessary to perform or enforce a contract , to fulfill a legal obligation, to claim or defend rights, or in cases where permitted by law .
The Syrian Personal Data Protection Law No. 12 of 2024 regulates these principles and establishes for the data subject rights related to knowledge, access, withdrawal, objection, and others .
Eighth: Marketing and Advertising Communications
Do not use the contact information commodity to send direct electronic marketing except in accordance with applicable consent and legal requirements .
Marketing messages must include the information required by law, clearly state their marketing nature, and provide a clear and accessible means of stopping the messages or withdrawing consent .
Law No. 12 of 2024 regulates direct electronic marketing and requires, among other things, the consent of the data subject, the disclosure of the sender’s identity, and the provision of a means to withdraw or refuse communications .
The product does not use customer data to target them with offers related to products or services that are prohibited by Sharia or banned by law .
Ninth: Sharing data with other parties
Do not sell personal data to customers or merchants .
Data may be shared when necessary with specific parties such as the merchant, delivery service provider, or technical service provider, or when required by law or court order .
The minimum amount necessary to achieve the legitimate purpose is disclosed .
No party receiving data from a commodity may use it for a purpose other than that for which it was disclosed .
Tenth: Transferring data outside the Syrian Arab Republic
Some of the technical services used by the product may depend on systems or services that host the data outside the Syrian Arab Republic .
The company does not transfer, store, or share personal data outside of Syria except in accordance with the requirements, licenses, permits, and approvals required by law and the competent authorities, whenever required .
The Syrian Personal Data Protection Law regulates cross-border transport and sets specific conditions and controls for it .
Eleventh: Data Protection
The product implements appropriate technical and organizational procedures to maintain data confidentiality and integrity and prevent :
• Unauthorized access .
• The leak .
• Unlawful disclosure .
• Unauthorized modification .
• Loss .
• Destruction .
• Illegal use .
These measures may include permission controls, authentication, encryption where appropriate, security event logs, backups, and incident detection and handling procedures .
Twelfth: Data breach
Upon discovering a security incident or data breach, Selaa takes the necessary measures to mitigate its impact, investigate and address it, and complies with reporting requirements to the competent authorities or data owners when required by law .
The Personal Data Protection Act requires controllers and processors to take technical and organizational measures to protect data, and regulates their responsibilities in case of violations and breaches .
Thirteenth: Data retention period
A commodity retains data for as long as necessary to achieve the purpose for which it was collected , to satisfy legal or accounting obligations, or to protect rights and claims .
When the need for it ends, the data is deleted or the information that allows its owner to be identified is hidden, unless there is a legitimate reason to retain it .
Fourteenth: Rights of the data subject
The data subject has the right, according to the applicable regulations :
• Knowing the type of data being processed and the purpose of doing so .
• Accessing his data .
• Knowing how long it will be kept or the criteria used to determine the duration .
• Request to correct incorrect data .
• Withdrawing consent when the process is based on it .
• Objection to some processing operations .
• Request to delete data when there is no legitimate reason to keep it .
• To file a complaint regarding the misuse of his data .
The Personal Data Protection Act establishes these rights and sets out procedures to regulate requests for data access .
Fifteenth: Children
Children’s data may only be collected or processed within the limits permitted by the system, and where the consent of the guardian or legal representative is required, it shall be obtained in accordance with legal requirements .
The company pays special attention to data relating to children and only collects what is necessary for the legitimate purpose .
Sixteenth: Account details and password
The user is responsible for maintaining the confidentiality of their account login details and not sharing them with others .
If unauthorized access to the account is suspected, the seller must be notified immediately so that appropriate action can be taken .
The product does not require the user to send their account password via customer service .
Seventeenth: Publicly published data
Some information that the merchant chooses to publish on the platform may be made public, such as :
• The name of the store .
• Photos of the store .
• Products .
• Prices .
• Offers .
• Working hours .
• Store location .
• Ratings and reviews .
This information is different from the specific data that a product collects to fulfill an order or manage an account .
Eighteenth: Ratings and Reviews
When writing a rating or review, a product may display a name or abbreviated data related to the rating, depending on the platform's design .
The assessment must not include personal data of clients or other persons without the necessary right or consent, and sensitive or illegal information may not be published .
Nineteenth: Amendment to the Privacy Policy
The company may update this policy when services, systems, or data processing mechanisms change .
When making material changes, a product seeks to inform users by appropriate means, and requests new consent when legally required .
Twenty: Communicating about privacy
For privacy-related inquiries or to submit a request concerning personal data, please contact Selaa Customer Service :
+963 983 461 245
The application must include the information necessary to verify the identity of the applicant and the nature of the application .