SheJo Logo
🇯🇴 العربية

Privacy Policy and Personal Data Protection

SheJo - The Online Mall

1 Introduction

SheJo respects the privacy of its users and is committed to protecting the personal data collected and processed through the website and application. This policy explains the types of data we collect, the reasons for collecting it, how it is used, protected, and shared, and the rights available to data subjects.

Data processing is subject to the applicable legislation in the Hashemite Kingdom of Jordan, including the Personal Data Protection Law No. (24) of 2023 and related regulations and instructions.

2 The Data Controller

The owning entity is responsible for processing the data collected by the platform, determining the purposes and means of processing according to the nature of the service and applicable legislation.

3 Data We Collect

SheJo may collect the following types of data depending on the service used:

First: Customer Data

  • Name, phone number, and email address.
  • Delivery address and information necessary to fulfill the order.
  • Order details, purchases, favorites, and transaction history.
  • Information necessary to communicate with customer service.

Second: Merchants and Stores Data

  • Merchant's name and contact information.
  • Store name, address, and business activity.
  • Personal identification data when requested to verify the merchant's identity.
  • Commercial register, vocational license, or related licensing documents.
  • Bank account or payment information if required to settle dues.
  • Products, prices, inventory, and orders data.

Third: Technical Data

We may collect technical data necessary to operate and protect the platform, such as device type, login records, usage data, and technical errors, according to applicable permissions and settings.

4 Why Do We Collect Data?

Data is used for the following purposes:

  1. Creating accounts and verifying the identity of users and merchants.
  2. Verifying merchant documents and licensing their activity when necessary.
  3. Managing stores, products, subscriptions, and orders.
  4. Facilitating communication between customers and merchants and organizing delivery operations.
  5. Processing payments and settling dues when providing these services.
  6. Providing technical support, customer service, and handling complaints.
  7. Protecting accounts, and detecting fraud and unauthorized use.
  8. Improving platform performance and developing its services.
  9. Implementing related legal and regulatory obligations.

Data is not used for new purposes incompatible with the declared purposes except in accordance with the legal basis and required procedures.

5 Identity and License Verification

Since SheJo is a platform that brings together multiple stores and merchants, identity and licensing documents may be requested to verify the merchant's identity and the legality of their activity.

These documents are used for verification, compliance, and account management purposes, and are not displayed to the public or customers within the storefront.

Access to documents is restricted to authorized persons and entities whose duties require access, and appropriate technical and organizational measures are taken to protect them.

Documents are kept for the period necessary to achieve the purposes of their collection and fulfill legal obligations, then they are deleted, destroyed, or anonymized when appropriate and legally permissible.

6 Data Sharing with Third Parties

SheJo does not sell users' personal data.

Necessary data may be shared, within the limits of the required purpose, with:

  • The concerned store to fulfill the customer's order.
  • Delivery companies to deliver orders.
  • Payment service providers when used.
  • Hosting, technical services, and support providers.
  • Competent official or judicial authorities when required by law.

Data sharing is subject to appropriate confidentiality and protection requirements, in accordance with relevant legislation. Creating an account on the platform does not mean making all personal data available to any other merchant or user.

7 Data Protection and Information Security

SheJo applies appropriate technical and organizational measures to protect data from unauthorized access, use, modification, disclosure, or destruction. These measures may include access control, account protection, system security measures, backups, and monitoring of security incidents.

Access privileges to identity and licensing data are granted based on functional need. In the event of an incident affecting data security, the platform takes the necessary actions to address it and report it when legally required.

While taking appropriate measures, the absolute security of any electronic system cannot be guaranteed.

8 Data Retention

SheJo retains data for the period necessary for the purposes for which it was collected, to fulfill orders, manage accounts, settle dues, process disputes, and fulfill legal obligations.

The need to retain data is reviewed, and it is deleted, destroyed, or anonymized when its purpose ends, unless there is a legal basis requiring it to be kept longer.

9 Data Subjects' Rights

In accordance with the law and applicable procedures, the data subject may submit requests regarding their rights, including:

  • Knowing and accessing the data being processed.
  • Requesting a copy of their data.
  • Requesting correction or updating of their data.
  • Withdrawing prior consent when processing is based on it, taking into account the resulting legal effects.
  • Objecting to processing or requesting its restriction in cases permitted by law.
  • Requesting the erasure of data or anonymizing it according to legal conditions.
  • Requesting the transfer of a copy of the data when the right is legally applicable.
  • Filing a complaint regarding the processing of their data.

Requests can be submitted via the designated privacy email. We may request reasonable information to verify the applicant's identity before executing the request, and we will respond within the legally prescribed periods and procedures.

10 Cookies and Similar Technologies

The site may use cookies or similar technologies to operate services, improve performance, save preferences, and analyze usage, depending on the enabled tools.

When using technologies that require user consent, consent is requested in accordance with applicable legal requirements. Some preferences can be managed from browser or device settings.

11 Data Transfer Outside Jordan

If operating the platform requires storing or processing data with service providers outside the Kingdom, this will be done in accordance with legal requirements regarding the transfer of personal data outside Jordan, with necessary measures taken to protect the data.

12 Children's Privacy

SheJo does not target children who lack the legal capacity to create an independent account. Children's data must not be collected or processed except in accordance with legal requirements regarding capacity and guardian consent when required.

13 Amendments to the Privacy Policy

This policy may be updated when developing services, changing data processing methods, or when needed to keep pace with legislation and instructions. The updated version is published on the website and application with its effective date, and users are notified when necessary according to the law.

14 Communication and Complaints

For inquiries or requests related to personal data, please contact us via:

Requests and complaints will be reviewed and handled in accordance with applicable legal procedures and deadlines.

15 Inspection and Return Policy

Inspection upon delivery is mandatory. The customer has the right to return the item but must pay the delivery fee.


Disclaimer: This policy is not a substitute for any independent consents or notices required by law, nor for the terms of use, merchant agreement, or the return and refund policy.