GINI is an Iraqi market-automation and digital-commerce company based in Baghdad, connecting merchants, service providers, delivery companies, and payment systems within a single digital ecosystem. We take your privacy seriously, and this policy explains in plain language what data we collect and how we handle it.
This policy applies to gini.iq and its blog, the merchant registration portal, and all GINI platforms and apps: GINI Market, Friday Market, the Loyalty Platform, Fawz, GINI Opportunities, GINI Wholesale, GINI Plus, GINI Bridge, and GINI Merchants. Some products may carry supplementary in-app privacy notices that apply alongside this policy.
The data we collect
We collect only what we need to run and improve our services. What we collect depends on the platform you use and whether you are a customer or a merchant:
- Account data: name, phone number, email, and password (stored as a one-way hash we cannot read). For merchants: business name and address, licensing or registration documents where required, and settlement details.
- Transaction data: orders, products, amounts, delivery status, and the payment method used. We never store full card numbers; payments are processed by licensed partners such as Qi Card.
- Usage and device data: device and browser type, IP address, pages visited, and performance/error logs that help us keep the service stable.
- Location: when you enable features such as “stores near you” or delivery, with your explicit device-level permission, which you can withdraw at any time.
- Content you publish: Friday Market listings, product photos, ratings and reviews, and messages exchanged with sellers or support.
- Cookies and analytics: we use essential cookies for sign-in and security, and aggregated analytics to measure performance and understand usage — without cross-site advertising tracking.
How we use your data
- Running the core service: creating your account, showing products, fulfilling orders, and coordinating delivery.
- Payments and settlements: processing payments through our partners, settling merchant balances, and issuing invoices.
- Loyalty and rewards: calculating Loyalty Platform points, issuing GINI Opportunities coupons, and managing Fawz tickets and draws — including verifying winner eligibility and announcing results.
- Security and fraud prevention: detecting fake accounts, suspicious transactions, and manipulation of reviews, points, or draws.
- Improvement: analysing usage in aggregate to improve the platforms and launch new features.
- Communication: order, account, and security notifications (essential), and marketing messages you can opt out of at any time.
- Legal compliance: keeping financial records and responding to lawful official requests under Iraqi law.
Fawz draw transparency
Fawz draws run on a transparent mechanism, and winners are shown on a public board inside the platform in an abbreviated form that masks part of the name for privacy. By entering a draw you agree to this publication; you may ask us to fully mask your name while keeping your right to the prize.
How we protect your data
- Fully encrypted connections (HTTPS with HSTS) between your device and our servers.
- Passwords stored with modern hashing algorithms, and strict need-to-know access controls inside the company.
- Regular security reviews of our systems, and a published vulnerability-disclosure channel via the site's security.txt file.
- No system is absolutely secure; if an incident affects your data we will notify you and the competent authorities as the law requires.
Data retention
We keep your data for as long as your account is active and as needed to provide the service. After account closure we delete or anonymise personal data, except what the law requires us to keep (such as financial, tax, and transaction records) for the legally prescribed period.
Your rights
You can exercise the following rights from inside the app or by contacting us; we respond within a reasonable time after verifying your identity:
- Access your personal data and obtain a copy of it.
- Correct or update inaccurate data.
- Delete your account and data, subject to the legal exceptions above.
- Opt out of marketing messages at any time.
- Withdraw location or notification permissions from your device settings.
Children
GINI services are intended for people aged 18 or over, or younger users with a guardian's consent and supervision. We do not knowingly collect data from children under 13, and we delete it promptly if we learn we have.
External links and services
The site may include embedded YouTube videos and links to our social media pages and partner services. Those services are governed by their own privacy policies, which we encourage you to review.
Changes to this policy
We may update this policy when we launch new products or when laws change. The updated version will be published here with its revision date, and we will notify you in-app or by email of material changes.
Contact us
For any privacy question or request: email info@gini.iq, call 7721, or write to GINI — Baghdad, Iraq.
The Arabic version of this policy is the authoritative one; the English text is a courtesy translation, and the Arabic text prevails in case of any conflict.