Privacy policy

Morabba Platform is operated by a business in Wyoming, United States, which controls the data needed to operate the store, accounts, orders, and support. Submit a privacy request from your account privacy page or contact us through the help center.

• Account and contact details such as name, email, and phone number when entered.
• Order, invoice, product, region, payment-status, and delivery data. We do not store the full card number or CVV.
• Support messages and attachments you choose to send.
• Technical and security data such as network address, device, session, error logs, and fraud-prevention signals.
• Marketing preferences and records of consent or withdrawal.

• To create accounts, perform the contract, process and deliver orders, and provide after-sales service.
• To verify payments, prevent fraud, and protect accounts and the platform.
• To meet accounting, tax, and legal requirements and resolve disputes.
• To improve store performance and reliability using aggregated or minimized data where possible.
• To send marketing only with valid consent and a clear unsubscribe link in every marketing message.

We may provide the minimum necessary data to payment, hosting, email, communication, security analytics, and fulfilment providers, or to an authority when legally required. We do not sell personal data.

A service may require processing in a country or region different from where you live. We use the provider only as necessary and apply relevant legal transfer requirements and safeguards where they apply.

Sensitive card fields are owned by the payment gateway inside a hosted experience. Morabba Platform does not collect or store full card numbers or CVV; we retain only references and states needed for accounting and order service.

We may use necessary cookies for sessions, carts, security, and language. Non-essential measurement or marketing must follow its appropriate settings or consent when enabled.

We retain data for its original purpose and for accounting, security, and legal duties, then delete or anonymize it when no longer needed and no other lawful basis applies.

We use limited access, encryption, audit logs, backups, and operational controls. No technology is risk-free, so incidents are reviewed and handled under applicable requirements.

• Know the purpose and legal basis, access your data, and request a readable copy.
• Request correction, completion, or updating.
• Request deletion when applicable, subject to legal retention periods and others' rights.
• Withdraw consent where consent is the basis, and stop marketing without stopping essential order notifications.
• Submit a request from your account privacy page. We may verify identity to prevent disclosure to someone else.

We may update this policy when services or requirements change. We show the last-updated date and communicate material changes appropriately. Use the account privacy page or help center for questions or rights requests.