Privacy Policy

Data we process

We may process contact details, delivery and saved addresses, account credentials in hashed form, order and cart information, wishlists, payment status, support messages, security records, and technical information needed to operate the storefront.

Our first-party store analytics uses pseudonymous session identifiers and limited interaction events such as catalog, product, cart, checkout-success, and bounded checkout-error milestones. This analytics event stream does not store raw customer search text, delivery addresses, payment credentials, supplier evidence, or provider secrets.

Google Analytics and cookies

We use Google Analytics 4 to measure visits, traffic sources, approximate country, device type, pages viewed and shopping steps (product and list views, searches, cart changes, checkout steps and completed purchases). Purchase events contain the order number, products, prices, currency and total, and are sent only after payment is verified.

We never send your name, email address, phone number, delivery address or payment details to Google. Search text that looks like an email address or phone number is not sent, links containing private tokens are masked, and Google advertising features (ad storage, ad personalization and Google signals) stay off.

In the European Economic Area, the United Kingdom and Switzerland (and whenever your region cannot be determined), Google Analytics is loaded only after you choose Accept in the cookie bar. Elsewhere it runs by default and you can opt out at any time.

To opt out, choose Decline under “Cookie settings” at the bottom of every page; Google Analytics then stops sending data from that browser. If your browser sends a Global Privacy Control signal, we treat it as an opt-out automatically. You can also contact us at [email protected] and we will help you opt out.

Why we process it

We use this information to quote and fulfill orders, take and reconcile payment, provide delivery and tracking, operate optional customer accounts, handle returns or disputes, prevent abuse, comply with legal obligations, measure storefront conversion and checkout reliability, improve store reliability, and provide bounded first-party product recommendations based on account purchases or wishlist activity.

Who receives information

Only information reasonably required for a transaction may be shared with payment providers, suppliers, carriers, fraud or security services, and service providers supporting the store.

International processing

Because OneMkan serves multiple countries, order data may need to be processed by suppliers, carriers, or infrastructure providers outside Bahrain. Cross-border processing remains subject to applicable data protection requirements and our data-minimization controls.

Retention and security

We retain information only for legitimate operational, accounting, fraud-prevention, dispute, or legal purposes. Access is limited and production secrets are not exposed to the browser.

Your rights and questions

Where applicable, you may ask about access, correction, or other rights relating to your personal data under applicable law.

Privacy contact: [email protected]