1. Introduction

WithStand (“we”, “us”, “our”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our mobile application (“App”) and related services in the State of Qatar.

We comply with Qatar’s Personal Data Privacy Law (Law No. 13 of 2016) and the Data Protection Law (Law No. 2 of 2024). By using the App, you agree to the practices described in this policy.

2. Data Controller

WithStand is the data controller responsible for your personal information. Our contact details are:

3. What Information We Collect

• Account data: phone number, name (first & last), email address, profile picture.
• Order data: items, special requests, order history, delivery/pickup details.
• Payment data: we do not store full payment card numbers; they are processed by Skip Cash, Apple Pay, etc.
• Device & usage data: IP address, device model, operating system, app interactions.
• Location data: with your permission, we collect approximate or precise location to show nearby restaurants and branches.
• Communication data: when you contact customer support.

4. How We Use Your Information

• To create and manage your account.
• To process orders and payments.
• To send order confirmations and updates.
• To improve the App and fix issues.
• To send marketing communications (only with your consent).
• To comply with legal obligations in Qatar.

5. Legal Bases for Processing (under Qatari law)

We process your personal data based on:

• Your consent (e.g., for location, marketing).
• Performance of a contract (e.g., processing your orders).
• Legal compliance (e.g., tax record keeping).
• Legitimate interests (e.g., improving the App).

6. Sharing Your Information

We do not sell your personal data. We may share it with:

• Service providers: Firebase (Google), Twilio (SMS), OneSignal (notifications), Skip Cash, Apple Pay. These parties are contractually obliged to protect your data.
• Qatari authorities: if required by law or to protect our rights.
• Business transfers: if we are acquired or merged.

7. Data Retention

We keep your data as long as your account is active or as needed to provide services. Transaction records are kept for 10 years as required by Qatari tax law. You may delete your account; we will then delete or anonymise your data unless legal retention applies.

8. Your Rights (Under Qatari Data Protection Law)

You have the right to:

• Access your personal data.
• Correct inaccurate data.
• Request deletion of your data (subject to legal exceptions).
• Withdraw consent at any time.
• Lodge a complaint with Qatar’s National Cyber Security Agency (NCSA) or the relevant authority.

To exercise these rights, contact us at info@withstand.qa or call 41401456.

9. International Transfers

We use cloud services (e.g., Google Firebase) that may store data on servers outside Qatar. We ensure that such transfers comply with Qatari law and provide adequate safeguards.

10. Children’s Privacy

The App is not intended for children under 13. We do not knowingly collect data from children.

11. Security

We implement technical and organisational measures to protect your data, including encryption (TLS) and access controls. However, no system is 100% secure.

12. Changes to This Policy

We may update this policy. The latest version will be posted on this page with a new “Last updated” date.

13. Contact Us

For privacy questions or requests, please contact us: