Privacy Policy

1. Who We Are

Zakie Reservation Services L.L.C. ("Zakie", "we", "us", or "our") operates the Zakie mobile application and website (collectively, the "Service"). We are incorporated under the laws of Iraq, with our principal office at 14 Ramada Street, Al-Mansur, Baghdad, Iraq

Zakie acts as the data controller for personal data collected through our Service. If you have questions about this policy, contact our Privacy Team at privacy@zakieapp.com.

2. Data We Collect

2.1 Data You Provide

• Account information: name, email address, phone number, password (stored hashed), city of residence.
• Reservation data: restaurant preferences, booking dates and times, party size, special requests.
• Payment information: card type and last 4 digits only — full card numbers are processed by our PCI-DSS-certified payment partners and are never stored by Zakie.
• Reviews & ratings: text, photos, and ratings you submit for restaurants.
• Communications: messages you send to our support team or restaurants through the app.
• Restaurant partner data: business name, address, contact details, commercial registration number, and menu information provided during onboarding.

2.2 Data We Collect Automatically

• Device information: device type, operating system, app version, unique device identifier.
• Usage data: pages visited, features used, search queries, time spent in-app, crash reports.
• Location data: approximate location (city-level) to show relevant restaurants. We request precise GPS only when you enable the "Near Me" feature, and only while the app is open.
• Log data: IP address, access times, HTTP referrer, browser type (for web users).

3. How We Use Your Data

We use your personal data to:

• Create and manage your Zakie account
• Process and confirm restaurant reservations
• Send reservation confirmations, reminders, and updates via SMS, email, and push notifications
• Calculate and credit ZRewards points to your account
• Process ZKteer subscription payments
• Personalise your restaurant recommendations
• Provide customer support and resolve disputes
• Detect fraud, abuse, and violations of our Terms of Use
• Comply with legal obligations under Iraqi law and applicable regulations
• Improve our Service through anonymised analytics
• Send you marketing communications (with your consent, which you can withdraw at any time)

4. Sharing Your Data

We do not sell your personal data. We share data only with:

• Partner Restaurants: your name, phone number, party size, and reservation details — so they can prepare for your visit.
• Payment Processors: Stripe and local payment partners process payments under their own privacy policies.
• SMS/Email Providers: to send confirmation and reminder messages.
• Analytics Providers: anonymised, aggregated usage data only (no personal identifiers).
• Legal Authorities: when required by Iraqi law or a valid court order.

All third-party partners are bound by data processing agreements that require them to protect your data and use it only for the purposes we specify.

5. Cookies & Tracking

Our website uses cookies to:

• Essential cookies: keep you logged in and remember your preferences. Cannot be disabled.
• Analytics cookies: understand how visitors use our site (Google Analytics, anonymised). You can opt out at any time.
• Marketing cookies: serve relevant ads on third-party platforms. Requires your consent.

You can manage cookie preferences in your browser settings or through our in-app Privacy Centre.

6. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are legally required to retain certain records (e.g., financial transaction records are kept for 7 years under Iraqi accounting law).

7. Your Rights

You have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: ask us to correct inaccurate data
• Deletion: request erasure of your data ("right to be forgotten")
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interests or for direct marketing
• Withdrawal: withdraw consent for marketing at any time (Settings → Notifications)

To exercise any of these rights, email privacy@zakieapp.com. We will respond within 30 days.

8. Security

We protect your data with industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, bcrypt password hashing, regular third-party security audits, and strict internal access controls. However, no system is 100% secure. If you suspect unauthorized access, contact us immediately at security@zakieapp.com.

9. Children's Privacy

Zakie is not directed to children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, contact us and we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will notify you via email and in-app notification at least 14 days before the changes take effect. Continued use of the Service after that date constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related inquiries:
📧 privacy@zakieapp.com
📍 Privacy Officer, Zakie Reservation Services L.L.C., 14 Ramada Street, Al-Mansur, Baghdad, Iraq