1. Introduction
نستله (Nastala) is a mobile application (package name: com.nastala.app) published on Google Play by ABULION, operating under the Tekno brand and based in Doraa, Baghdad, Iraq.
ABULION respects user privacy and is committed to protecting personal information. This Privacy Policy explains what information we collect, why we collect it, how we use it, how long we keep it, and what choices users have regarding their personal data.
2. About the App
Nastala is a single-vendor consumer e-commerce store operated by ABULION, selling food, chocolate, beverages, snacks, chips, and similar grocery items directly to customers. All products sold through the app are supplied and fulfilled by ABULION; the app does not act as a marketplace and does not host third-party sellers.
The app allows customers to register an account, browse the product catalog, add items to a cart, place orders, and track the status of their purchases. The app is delivered as a mobile interface that displays the Nastala storefront inside an in-app browser view (WebView).
3. Scope of This Policy
This Privacy Policy applies to all users of the نستله (Nastala) Android application (com.nastala.app), including:
- Customers who register an account, browse products, place orders, or contact support.
- ABULION administrators and authorized internal staff who manage products, orders, and customer accounts.
This policy applies whether the app is accessed through an Android phone, tablet, or any other supported Android device.
4. Information We Collect
The app collects only the information necessary to operate the store, process orders, and provide customer support. The categories below reflect what is actually collected through the app:
| Category | Examples | Source | Purpose |
|---|---|---|---|
| Account Information | Name, phone number, email address (if provided), password (stored securely), and account preferences. | Provided by the customer when registering an account. | To create, authenticate, and manage the customer’s account. |
| Contact and Delivery Information | Phone number, delivery address, city or area, and delivery notes or instructions. | Provided by the customer when placing an order. | To deliver orders, coordinate with the customer, and provide support. |
| Order Information | Selected products, quantities, prices, totals, order status, and order history. | Generated when the customer places an order in the app. | To process, fulfill, and track the customer’s orders. |
| Payment-Related Metadata | Selected payment method (e.g., cash on delivery), payment status, and invoice references. | Generated when the customer chooses a payment method during checkout. | To manage payment records, accounting, and customer service. |
| Device and Technical Information | IP address, device type, operating system, app version, browser type (WebView), and basic logs. | Collected automatically when the app connects to ABULION’s servers. | To maintain security, troubleshoot errors, prevent misuse, and improve performance. |
The app does not collect: device location, photos, files, contacts, camera input, microphone input, SMS, call logs, calendar data, advertising identifiers for marketing, or any other sensitive personal information.
5. How We Use Information
ABULION uses information collected through نستله (Nastala) only for the following purposes:
- Creating, authenticating, and securing customer accounts.
- Processing customer orders, generating invoices, and arranging delivery.
- Displaying the product catalog, prices, offers, and order history.
- Managing inventory, product availability, and order fulfillment.
- Providing customer support and responding to inquiries about orders or products.
- Sending order updates and important account-related notifications via the app or by phone where needed.
- Maintaining business records, accounting records, and tax records as required by law.
- Detecting, preventing, and investigating fraud, misuse, unauthorized access, or technical problems.
- Improving the stability, security, and performance of the app and the underlying website.
ABULION does not use customer information for advertising, behavioral profiling, or sale to third parties.
6. Legal Bases for Processing
Where applicable under relevant privacy laws, ABULION processes information through نستله (Nastala) based on one or more of the following legal bases:
- Contractual necessity: processing is required to create accounts, accept orders, and deliver purchased products.
- Consent: when the customer voluntarily provides information by registering an account or placing an order.
- Legitimate interests: security, fraud prevention, customer service, and improving the app and its services.
- Legal obligations: retaining or disclosing certain records to comply with applicable accounting, tax, or commercial laws.
7. App Permissions
نستله (Nastala) is intentionally lightweight and requests only the minimum permission needed to function:
- Internet Access: required to connect to ABULION’s servers, load the Nastala storefront inside the app’s WebView, browse products, and place orders.
The app does not request or use location, camera, microphone, photos, storage, contacts, SMS, call logs, calendar, Bluetooth, or any other sensitive permission.
10. Third-Party Services
نستله (Nastala) uses a minimal set of third-party services strictly to host and operate the app:
- Cloud hosting and server infrastructure provider for the Nastala website and database.
The app does not currently include third-party advertising networks, behavioral analytics SDKs, or social-media tracking pixels. If ABULION introduces additional third-party services in the future (such as crash reporting or analytics), this Privacy Policy will be updated accordingly.
11. Payment Information
نستله (Nastala) does not process online card payments inside the app and does not collect or store payment card numbers, CVV codes, or other sensitive payment authentication data.
Payments for orders are arranged outside the app according to ABULION’s standard business practices (for example, cash on delivery or other arrangements offered at checkout). The app may store basic payment-related metadata such as the chosen payment method, payment status, and invoice references purely for order management and accounting purposes.
12. Data Retention
ABULION retains information collected through نستله (Nastala) only for as long as necessary to operate the business, manage customer accounts, fulfill orders, maintain business and tax records, comply with legal obligations, resolve disputes, and protect against fraud.
When information is no longer required, it may be deleted, anonymized, or securely archived.
13. Data Security
ABULION implements reasonable technical, administrative, and organizational measures to protect information against unauthorized access, misuse, loss, disclosure, alteration, or destruction.
These measures include access controls, password protection, secure server configuration, database protection, encrypted connections (HTTPS) where applicable, monitoring, backups, and internal security procedures. However, no method of electronic transmission or storage is completely secure, and ABULION cannot guarantee absolute security.
14. User Rights and Choices
Depending on applicable laws, customers may have the right to:
- Request access to information held about them by ABULION.
- Request correction of inaccurate or incomplete information.
- Request deletion of their account or personal data, subject to legal and business retention requirements.
- Withdraw consent where processing is based on consent.
- Object to certain processing activities where applicable.
To exercise any of these rights, customers may contact ABULION using the contact details provided below. ABULION may need to verify identity before processing a request.
15. Account and Data Deletion
Customers may request deletion of their نستله (Nastala) account and associated personal data by contacting ABULION through the channels below:
After receiving a deletion request, ABULION may ask for information to verify identity and account ownership. Certain records may be retained where required for legal, accounting, fraud-prevention, dispute-resolution, or legitimate business purposes.
16. Children’s Privacy
نستله (Nastala) is not intended for children under the age of 13. ABULION does not knowingly collect personal information from children under 13. The app is designed to be used by adult customers placing grocery orders.
If ABULION becomes aware that personal information has been collected from a child without appropriate consent, reasonable steps will be taken to delete such information.
17. International Data Transfers
ABULION operates نستله (Nastala) primarily from Iraq. Information may be stored or processed on servers located in different countries depending on hosting and cloud infrastructure arrangements.
When information is transferred or processed outside the user’s country, ABULION takes reasonable steps to protect it according to this Privacy Policy and applicable privacy requirements.
18. Changes to This Privacy Policy
ABULION may update this Privacy Policy from time to time to reflect changes in the app, business operations, legal requirements, or security practices.
When this policy is updated, the “Last Updated” date will be revised. Continued use of نستله (Nastala) after any update means the user accepts the revised Privacy Policy.
19. Contact Us
For questions, requests, concerns, or complaints regarding this Privacy Policy or how personal information is handled in نستله (Nastala), please contact ABULION using the details below:
This Privacy Policy is intended to provide clear information about the privacy practices of نستله (Nastala), package com.nastala.app, a single-vendor food and beverage e-commerce app published by ABULION on Google Play, for customers, app stores, and service reviewers.