Privacy & Personal Data Protection Policy
Last Updated: March 14, 2026
DokkanGo is committed to protecting your personal data in compliance with Jordan's Personal Data Protection Law No. (24) of 2023 (PDPL) and international privacy standards. We take your privacy seriously.
Table of Contents
DokkanGo is the data controller responsible for processing your personal data. We are a Jordanian-registered company operating in the grocery e-commerce sector, headquartered in Amman, the Hashemite Kingdom of Jordan.
2.1 Data You Provide Directly
- Account Data: Full name, phone number, email address
- Delivery Data: Delivery addresses, location coordinates, delivery notes
- Order Data: Purchase history, cart contents, product preferences
- Payment Data: Selected payment method (we do NOT store credit card details)
- Communication Data: Support messages, reviews, feedback
2.2 Automatically Collected Data
- Device Data: IP address, browser type, operating system, device identifier
- Usage Data: Pages visited, products viewed, time spent
- Location Data: GPS coordinates (with your permission) for delivery tracking and nearby stores
2.3 Sensitive Data
We do not collect sensitive data as defined by Jordan's PDPL (such as health, biometric, religious, or political data) unless strictly necessary for service delivery and with your explicit consent.
We process your personal data based on the following legal grounds as stipulated by Jordan's Personal Data Protection Law No. (24) of 2023:
| Legal Basis | Purpose |
|---|---|
| Consent | Marketing, promotional notifications, non-essential cookies |
| Contract Performance | Order processing, delivery, account management |
| Legal Obligation | Tax compliance, financial record keeping, fraud prevention |
| Legitimate Interest | Service improvement, analytics, abuse prevention |
- Processing your orders and coordinating deliveries
- Creating and managing your platform account
- Processing payments securely through authorized payment service providers
- Sending order updates and service notifications
- Personalizing your experience and suggesting relevant products
- Analyzing usage patterns to improve our services
- Complying with legal and regulatory requirements
- Protecting the platform from fraud and abuse
Under Jordan's Personal Data Protection Law No. (24) of 2023, you have the following rights:
Right to Access
Request a copy of your personal data held by us
Right to Correction
Update or correct inaccurate data
Right to Erasure
Request deletion of your personal data
Right to Restrict Processing
Restrict how your data is processed
Right to Object
Object to processing for certain purposes
Right to Data Portability
Receive your data in a structured, readable format
Right to Withdraw Consent
Withdraw consent at any time without affecting prior processing legality
Right to Be Notified
Be notified of data breaches affecting you
To exercise any of these rights, please contact us at: [email protected]. We will respond to your request within 30 days.
We implement technical and organizational security measures to protect your personal data from unauthorized access, loss, or damage:
- SSL/TLS encryption for all data transmissions
- Encryption of sensitive data at rest
- Strict access controls and multi-factor authentication
- Regular security audits and penetration testing
- PCI DSS compliant secure payment processing
- We do NOT store credit card data on our servers
- Regular encrypted backups
| Data Type | Retention Period |
|---|---|
| Account data | Until deletion request |
| Order history | 7 years (accounting requirements) |
| Payment data | 7 years (tax requirements) |
| Location data | 90 days after delivery |
| Analytics logs | 24 months |
| Cookies | 12 months maximum |
We collect location data to provide delivery services and show nearby stores. You can control location permissions through your device settings. Disabling location services may limit features like real-time delivery tracking.
DokkanGo is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we discover that a child has provided us with personal information, we will delete it immediately. If you are a parent and believe your child has provided data to us, please contact us.
Your data may be transferred to and processed in countries other than Jordan for hosting and processing purposes. In accordance with Jordan's PDPL, we ensure that any cross-border data transfer occurs only to countries providing an adequate level of protection or with your explicit consent, with appropriate security safeguards in place.
In the event of a serious security breach that may harm your personal data, we commit to the following in accordance with Jordan's PDPL:
- Notify Affected Users: Within 24 hours of discovering the breach
- Notify the Authority: Within 72 hours of discovering the breach
- Notification Details: Nature of breach, affected data, measures taken
We may update this policy from time to time. We will notify you of significant changes via email or platform notification. The "Last Updated" date at the top indicates the last revision. Your continued use of the platform after changes constitutes acceptance of the updated policy.
If you have questions or concerns about this policy or our privacy practices, please contact us:
You may also file a complaint with the Personal Data Protection Unit at the Ministry of Digital Economy and Entrepreneurship if you believe your rights have been violated.
This policy is prepared in accordance with Jordan's Personal Data Protection Law No. (24) of 2023, the Data Disclosure Regulation, and the Data Subject Rights Regulation. By using DokkanGo, you acknowledge that you have read and understood this policy and agree to the collection and use of your data as described herein.