Privacy Policy

HalaOrders is an e-commerce platform that lets merchants create online stores, receive orders and promote their products. This policy explains what data we collect, why we collect it, and the choices you have.

Data we collect

• Merchant account data: name, email address, phone number, store name and business details provided when opening a store.
• Store data: products, prices, images, pages, settings and orders created in the merchant dashboard.
• Customer order data: name, phone number, delivery address and order contents that shoppers submit to a merchant's store. We process this data on behalf of the merchant who owns the store.
• Technical data: IP address, browser type, device information and pages visited, used for security, analytics and performance.

Data from Facebook (Meta)

When a merchant chooses to connect a Facebook Page to their HalaOrders store, we use Facebook Login for Business to request only the permissions needed to publish and schedule product posts on that merchant's behalf:

• pages_show_list — to show the merchant the list of Pages they manage so they can pick which Page to connect.
• pages_manage_posts — to create and schedule posts about the merchant's products on the selected Page, only when the merchant asks us to.
• pages_read_engagement — to read the Page name and basic details and to confirm that published posts went live.
• We store the Page ID, Page name and an access token for the connected Page. We do not read personal messages, we do not post without the merchant's action, and we never sell or share Facebook data with third parties or use it for advertising.

How we use data

• To run the platform: host stores, process orders, send notifications and provide support.
• To publish or schedule the content a merchant explicitly requests on their connected social pages.
• To secure the service, prevent fraud and abuse, and comply with legal obligations.
• To improve HalaOrders through aggregated, non-identifying usage statistics.

Sharing

We do not sell personal data. We share data only with service providers that help us run the platform (such as hosting, payment, shipping and messaging providers) and only to the extent needed for the service the merchant enabled, or when required by law.

Retention and security

We keep data while the merchant's account is active and as needed to meet legal obligations. Social page access tokens are deleted as soon as the merchant disconnects the page or deletes their account. Data is transmitted over HTTPS and access is restricted to authorized staff.

Your rights

You can request access to, correction of, or deletion of your data at any time. See our Data Deletion page for step-by-step instructions, including how to remove data received from Facebook.

Changes

We may update this policy from time to time. The date at the top of this page shows the latest revision.

Contact us

For any question about this document or your data, contact the HalaOrders team: [email protected] — Contact