Privacy Notice
FASSEL For Delivery via Digital Platforms · C.R. 245317 · Version 2026-09-19
1. Who controls your data
The data controller is FASSEL For Delivery via Digital Platforms, a limited liability company registered in the State of Qatar, Commercial Registration number 245317.
Email: Byfassel@gmail.com
Phone / WhatsApp: +974 6659 7125
If you have a question about anything in this notice, or want to exercise any of the rights in section 8, those contacts reach us directly.
2. What we collect, and why
We collect what we need to make and deliver clothes, and nothing beyond that.
·
Identity and contact — your name, mobile number, and email if you give us one — to create your account, sign you in, and reach you about an order.
·
Addresses you save, and approximate location if you use “find my location” — to send a measurer to you and to deliver your garment.
·
Body measurements, yours and anyone you add — to make clothes that fit. This is the reason the service exists.
·
Order history — what you ordered, from whom, when, what it cost — to run your order, show you your history, and keep the accounting records the law requires.
·
Things you write — notes on an order, reviews, messages to us — to do what you asked, and to show reviews to other customers.
·
App and device — push token, app version, basic error diagnostics — to send you order notifications and to fix crashes.
We do not use tracking or advertising technology. There is no analytics platform, no advertising pixel, no third-party tag on our website or in our app. We do not build a profile of you and we do not sell your data to anyone, ever.
3. Our lawful basis
Under the PDPPL we process your data on these bases:
·
Your consent, which you give when you create an account and agree to this notice. You can withdraw it — see section 8.
·
Performance of the contract between us — we cannot deliver a garment without an address, or make one without measurements.
·
Our legal obligations, particularly keeping accounting records of completed orders.
Separate consent for marketing. We will only send you offers or news if you ask for them, separately from agreeing to these terms. Notifications about an order you actually placed are not marketing and you receive those as part of the service.
4. Children, and the Kids section
The Kids section stores a child's first name and body measurements, entered by an adult.
You may only enter a child's details if you are that child's parent or legal guardian. When you create a measurement profile for a child, you are consenting on their behalf, and we record that you did so and when.
As guardian you have, over your child's data, every right listed in section 8 — to see it, correct it, and delete it. You can do all three yourself in the app, in the same place you entered it.
We do not collect a child's date of birth, photograph, phone number or address. The child's measurements are attached to your account, not to an account of their own, and a child cannot hold a Fassel account.
5. Who else sees your data
Tailors. When you place an order, the tailor receives what they need to make and fulfil it: your first name, the measurements for that garment, and your delivery address. They do not receive your other orders, your other measurements, or your account history.
Our staff. Measurers and support staff see orders they are working on.
Service providers. We use these companies to run Fassel. They process data on our instructions only, and none of them may use it for their own purposes:
·
Supabase — our database and sign-in — Germany (Frankfurt)
·
Twilio — sends your one-time sign-in codes by SMS — international
·
Vercel — hosts our website and staff portal — international
·
Expo — delivers app updates and push notifications — international
·
Resend — sends your order receipt by email — international
·
Apple — Wallet passes, if you add one — international
·
SkipCash — card payments, once payments go live — Qatar
Nobody else. We do not share your data with advertisers, data brokers or anyone buying it. We would disclose data if required by a Qatari court or a lawful order from a competent authority, and not otherwise.
6. Your data leaves Qatar
This matters and we would rather say it plainly than bury it.
Our database is hosted in Frankfurt, Germany. Your name, phone number, addresses, measurements and order history are stored there, not in Qatar. Some of the providers in section 5 also operate internationally.
We chose that region for reliability and for the protections that apply to data held in the European Union, which are among the strongest anywhere. But you should know your data is held outside the country, and by using Fassel you consent to that transfer.
7. How long we keep it
·
Your account and measurements — while your account is open. Delete your account and they go.
·
Order records — kept after your account is deleted, stripped of your name, phone number, address and any notes you wrote. What remains is what the order was and what it cost, which we keep as an accounting record.
·
Reviews — deleted with your account.
·
Error diagnostics — a short period, then discarded.
8. Your rights
Under the PDPPL you have the right to:
·
Know what we hold about you and why — this notice, and your account in the app.
·
Access it, and get a copy.
·
Correct anything wrong — editable in the app.
·
Delete your account and the personal data in it, from inside the app, at any time.
·
Withdraw consent, including to marketing, without giving a reason.
·
Object to processing you think is unfair.
·
Complain — see section 11.
Most of these you can do yourself in the app, immediately, without asking us. For anything else, contact us at the addresses in section 1. We will respond as quickly as we can and within any period the law requires.
Deleting your account is in Profile, and it is permanent. It erases your name, phone number, email, addresses, every measurement profile you hold including any for children, your notifications, your Wallet card, and any reviews you wrote. Past orders remain as anonymised accounting records, without your name or address attached.
9. How we protect it
·
Everything travels over an encrypted connection and is encrypted at rest.
·
Access is enforced in the database itself, per person, not just in the app — a tailor cannot read another tailor's orders, and a customer cannot read another customer's anything, even if the app were bypassed.
·
Staff accounts are limited to what that role needs.
·
There are no passwords on customer accounts to be stolen: you sign in with a one-time code sent to your phone.
No system is perfectly secure, and we would rather tell you what we do than promise you something nobody can promise.
10. If there is a breach
If personal data is lost or exposed in a way that could seriously harm you, we will notify you and the competent authority within 72 hours of becoming aware of it, as the PDPPL guidelines require. We will tell you what happened, what data was involved, and what you should do.
11. Complaints
Tell us first — the contacts in section 1 — and we will try to put it right.
If you are not satisfied, you may complain to the National Cyber Governance and Assurance Affairs (NCGAA) in Qatar, which supervises the PDPPL.
12. Changes to this notice
If we change anything that matters, we will tell you in the app before it takes effect, and we will not make a material change to how we use data you already gave us without asking you again.