Rosenama

Legal

Privacy Policy

Last updated: August 27, 2026

This Privacy Policy explains how Rosenama (“Rosenama,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use our website, business portal, and related services (the “Service”). By using the Service, you acknowledge this Policy. For questions, contact [email protected].

1. Who we are

The Service is operated by Yazan Zaid, an individual doing business as Rosenama (“Rosenama,” “we,” “us,” or “our”). Rosenama is a marketplace that helps customers discover and book local businesses, shop products from those businesses, and read the Rosenama Journal, and helps businesses manage listings, bookings, store orders, and related content. You can reach us at [email protected].

2. Who this Policy covers

This Policy applies to customers, business applicants and members, and visitors who use the Service. It does not cover websites or services of third parties that we do not control (for example, a business’s own site linked from a listing, or Google’s services when you use Sign in with Google).

3. Information we collect

Account and profile

  • Email address, full name, and optional phone number.
  • Password (stored as a secure hash; we do not store plaintext passwords), when you register with email and password.
  • When you use Sign in with Google: Google subject identifier, email address attested by Google, and optional profile photo URL.
  • Email verification and password-reset related tokens or codes.
  • Role information (for example customer, business member, or platform admin).
  • Language or locale preference (for example English or Arabic) used for the interface and related communications.

Bookings

  • Booking details such as business, services, staff, schedule, notes, status, currency, and timezone.
  • Customer name, email, and phone snapshots associated with a booking so the business can fulfill it. These snapshots may remain with the booking record even if you later change or delete your account.
  • When a business logs a walk-in or manual booking: guest contact details the business enters (such as name, phone, and/or email), which may not be linked to a Rosenama customer account.

Store orders

  • Order details such as business, line items (including product snapshots), quantities, currency, payment method (cash on delivery), status, and optional notes.
  • Delivery contact and location details: phone number, address, optional suburb or city, and map pin coordinates (latitude and longitude).
  • Name and email associated with your account at the time of order. Order records and delivery snapshots may be retained so the business and Rosenama can maintain accurate order history, even if you later change or delete your account.

Reviews

  • Ratings, review text, display name, related service names, and your user identifier.

Rosenama Journal

  • For authors: identity and affiliation (platform or business) associated with articles you create or submit.
  • Article content, tags, and media you submit for review or publication. Readers can browse the Journal without an account; we do not use blog-specific tracking or analytics cookies.

Business onboarding and portal

  • Business identity and contact details (name, address, phone, contact email, website, social links).
  • Location data (coordinates, suburb, country), currency, timezone, hours, services, product catalogs, and media (logo, cover, gallery, product images, application photos, article media).
  • Staff or member details you submit (such as name, email, phone, title, specialties) and membership roles.
  • Audit logs of certain business profile changes (who changed what and when).

Technical and security data

  • Session information via essential cookies used to keep you signed in.
  • IP address used for rate limiting and abuse prevention.
  • Operational logs and error reports used to run, secure, and troubleshoot the Service.
  • In-app notifications related to your account or business activity (typically retained for about 180 days).

4. How we use information

We use personal information to:

  • Provide, operate, and improve the Service (accounts, listings, bookings, store orders, reviews, Journal, and media).
  • Authenticate you, including via Google when you choose Sign in with Google.
  • Communicate with you about verification, password resets, booking or application status, store order status, article review outcomes, and support.
  • Share necessary booking or store-order details with the business involved so they can fulfill the service or delivery.
  • Secure the Service, prevent fraud and abuse, and enforce our Terms.
  • Suppress further transactional email to addresses that bounce or generate delivery complaints, where appropriate.
  • Comply with legal obligations and respond to lawful requests.

5. How we share information

We share information in these situations:

  • With the business involved in your booking, store order, or review, as needed to provide the Service (including delivery contact and location details for orders).
  • With service providers (processors) that help us run the Service, under appropriate controls.
  • With professional advisors or authorities when required by law or to protect rights and safety.
  • In connection with a reorganization, merger, or sale of assets, subject to appropriate safeguards.

Processors we use today

We do not currently use advertising pixels or product analytics SDKs on the Service. If that changes, we will update this Policy.

Site fonts are self-hosted with our application and are not loaded from Google Fonts or other third-party font CDNs in your browser.

  • Resend — transactional email (for example verification, password reset, booking, store order, and article status messages). Delivery feedback such as bounces or complaints may be used to avoid further sends to undeliverable addresses.
  • Cloudflare (including R2) — content delivery and media storage.
  • OpenStreetMap Nominatim and map tile providers — geocoding and map display for business locations and store-order delivery pins.
  • Google — authentication when you use Sign in with Google (subject to Google’s own terms and privacy policy for that sign-in flow).
  • Operations and error-monitoring providers — to host, secure, and troubleshoot the Service.

6. Cookies and local storage

We use essential cookies, including a sealed session cookie, to authenticate you and keep you signed in across Rosenama domains. These cookies are necessary for the Service to function, including placing store orders and managing bookings.

Your store cart may be stored in your browser’s local storage on your device (not as a cookie) until you check out. Clearing site data may empty your cart.

We do not currently set non-essential analytics or advertising cookies. Your browser may still request resources from third parties named above (such as map tiles) when you use those features.

7. Retention and deletion

We retain personal information for as long as needed to provide the Service, comply with law, resolve disputes, and maintain security and business records.

You may request account deletion where the product supports it, or by contacting [email protected]. Deletion may be limited if you have an active business membership. Booking and store-order snapshots and certain records may be retained so businesses and Rosenama can maintain accurate historical information.

Media assets may be soft-deleted and later purged according to our operational retention practices. Notifications are generally retained for about 180 days.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, update, or delete certain personal information, or to object to or restrict certain processing. To make a request, email [email protected]. We may need to verify your identity before fulfilling a request.

You can update some account details in the product. You can also control cookies through your browser settings; blocking essential cookies may prevent sign-in or other core features from working.

9. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from anyone under 16. If you believe we have collected such information, contact [email protected] and we will take appropriate steps to delete it.

10. International transfers

Rosenama and its processors may process information in countries other than where you live. For example, email may be sent via Resend, and media may be stored or delivered via Cloudflare’s global network. Where required, we take steps to protect information transferred internationally.

11. Security

We use technical and organizational measures designed to protect personal information, such as hashed passwords, encrypted session cookies in production, and access controls. No method of transmission or storage is completely secure; please use a strong unique password and protect your devices.

12. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date on this page. Continued use of the Service after an update means you acknowledge the revised Policy.

13. Contact

Privacy questions or requests: [email protected]. Requests may be sent to this address for the operator, Yazan Zaid.