Definitions

• Personal Data: Any information relating to an identified or identifiable natural person, as defined under Article 2 of the PDPL (e.g., name, email, address, or online identifiers).
• Processing: Any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion.
• Sensitive Personal Data: Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or similar (processed only with explicit consent or as permitted by law).

Information

We collect Personal Data in the following ways:a. Data You Provide Directly

• Account and Order Information: When you create an account, place an Order, or contact us, we collect your name, email address, phone number, shipping/billing address, payment details (e.g., card number, processed securely via third-party gateways without storage by us), and dietary preferences (if provided).
• Communications: Information in emails, support tickets, or surveys (e.g., feedback on Products).

Data Collected Automatically

• Usage Data: IP address, browser type, device information, pages visited, time and date of access, and referral sources via cookies and similar technologies.
• Location Data: Approximate location for delivery optimisation, based on your IP or provided address.

Data from Third Parties

• Payment processors or delivery services may share transaction or delivery confirmation data.

We do not collect Sensitive Personal Data unless explicitly provided (e.g., health-related allergies for customized orders), and only with your explicit consent.3. How We Use Your Personal DataWe process Personal Data for legitimate purposes under the PDPL (Article 6), including:

• Fulfilling Orders and delivering Products (contract performance).
• Processing payments and managing your account.
• Communicating about orders, updates, or promotions (with consent for marketing).
• Improving the Website, analyzing usage, and personalizing experiences (legitimate interests).
• Complying with legal obligations (e.g., tax records under Jordanian law).
• Preventing fraud or abuse.

Marketing communications (e.g. newsletters) require your prior opt-in consent, which you can withdraw at any time. Sharing and Disclosure of Personal Data. We do not sell your Personal Data. We may disclose it to:

• Service Providers: Third parties acting as data processors (e.g., payment gateways like [insert e.g., PayPal], delivery companies like Aramex, hosting providers) bound by data processing agreements compliant with PDPL Article 19.
• Legal Requirements: Authorities if required by law (e.g., under PDPL Article 22 for investigations).
• Business Transfers: In case of merger or acquisition, with notice to you.

No disclosures to third countries without adequate safeguards (e.g., standard contractual clauses under PDPL Article 25).5. Data SecurityWe implement appropriate technical and organizational measures to protect Personal Data against unauthorized access, loss, or breach, as required by PDPL Article 16 (e.g., encryption for payments, secure servers, access controls). However, no system is infallible; we cannot guarantee absolute security. In the event of a data breach, we will notify affected individuals and the Jordanian Data Protection Authority (once established) within 72 hours, per PDPL Article 18.6. Data RetentionWe retain Personal Data only as necessary for the purposes outlined (PDPL Article 12):

• Order data: 5 years for tax/compliance.
• Account data: Until account deletion, plus 1 year for backups.
• Marketing data: Until opt-out.

You may request deletion at any time (see Section 8).7. Cookies and Tracking TechnologiesThe Website uses cookies (small files stored on your device) for functionality, analytics, and advertising:

• Essential Cookies: For cart management and security.
• Analytics Cookies: To track usage (e.g., via Google Analytics; you can opt out).
• Marketing Cookies: For personalised ads (with consent).

Manage preferences via browser settings or our cookie banner. For details, see our Cookie Policy (to be linked on the Website).8. Your Rights Under the PDPLAs a data subject, you have rights under PDPL Chapter 3.

• Access: Request confirmation of processing and a copy of your data.
• Rectification: Correct inaccurate data.
• Erasure (“Right to be Forgotten”): Delete data where no longer needed.
• Restriction: Limit processing in certain cases.
• Portability: Receive data in a structured format.
• Objection: Oppose processing based on legitimate interests or for marketing.
• Withdraw Consent: At any time, without affecting prior processing.

To exercise rights, email cs@powerfulfoods.com with your identity verification. We respond within 30 days (extendable to 60). Complaints may be filed with the Jordanian Data Protection Authority.