Privacy Policy

1. Who is responsible for your data

BaytCart, operated by Tech Serenity, is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, contact us at [email protected].

2. Information we collect

• Identity and contact details: name, email address, phone number and delivery address.
• Order information: products purchased, order history and communications with us.
• Payment information: processed securely by our payment providers; we do not store full card numbers.
• Account information: login credentials and saved preferences.
• Technical data: device, browser, IP address and usage data collected via cookies and similar technologies.

3. How we use your data

• To process, deliver and manage your orders and returns.
• To create and maintain your account.
• To provide customer support and respond to your enquiries.
• To send order updates and, where you consent, marketing communications.
• To improve our products, website and services.
• To prevent fraud and meet our legal and regulatory obligations.

4. Legal basis for processing

We process your personal data on the basis of your consent, the performance of our contract with you (fulfilling your orders), our legitimate business interests and compliance with legal obligations under the laws of the Sultanate of Oman.

5. Sharing your data

We share your data only where necessary to operate our service, and we require these parties to protect it:

• Sellers and suppliers, to fulfil your orders.
• Delivery and logistics partners, to ship your order.
• Payment providers, to process transactions securely.
• Technology providers who host and support our platform.
• Authorities, where required by law or to protect our rights.

6. International transfers

Some of our service providers may process data outside Oman. Where this happens, we take steps to ensure your data receives an adequate level of protection consistent with Oman's Personal Data Protection Law and applicable GCC requirements.

7. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, measure performance and personalise content. You can control cookies through your browser settings, though some features may not work without them.

8. Data retention

We keep your personal data only for as long as needed to provide our services, comply with legal, tax and accounting obligations, and resolve disputes. When data is no longer required, we securely delete or anonymise it.

9. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data where there is no legal basis to keep it.
• Object to or restrict certain processing.
• Withdraw consent at any time, including for marketing.

10. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls and secure payment processing — to protect your data against unauthorised access, loss or misuse.

11. Children's privacy

Our services are intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so we can remove it.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised “Last updated” date.

13. Contact us

For any privacy questions or to exercise your rights, email us at [email protected].