HalalMap Privacy Policy

This Privacy Policy explains how HalalMap collects, uses, discloses, retains, and protects personal information when people use its marketplace, directory, customer ordering, pickup, delivery, mosque, prayer-information, account, and support services in Canada. The practices described apply according to the features you use and the permissions you grant. Applicable privacy rights remain available.

1. Accountability and scope

HalalMap is responsible for personal information under its control. Merchants, Drivers, mosques, payment providers, and other organizations may also be independently responsible for information they collect for their own purposes. Questions and requests can be directed to the HalalMap privacy contact at privacy@halalmap.ca.

This Policy covers customers and visitors. Role-specific information for Merchant personnel, Drivers, mosque representatives, and Admin operators is also processed where those people use HalalMap workspaces, but separate role agreements may provide additional detail.

2. Information collected

Account and contact information

HalalMap processes name, email address, phone number, language and communication preferences, account role, profile information, and the records needed to verify and secure a sign-in. Customer authentication may use email or phone one-time verification codes or a supported third-party identity. HalalMap records verification and session events but does not need a customer to provide a checkout password when the canonical code flow is used.

Address and location information

HalalMap processes saved addresses, delivery addresses, map selections, approximate location, and precise device location when you grant permission and the feature needs it. Customer location may support nearby discovery, address selection, delivery pricing, route estimation, and active-order tracking. Driver location can be processed while the Driver is online or performing an assigned delivery for dispatch, progress, safety, and support.

Orders, marketplace activity, and preferences

HalalMap processes carts, products, quantities, customizations, substitutions, order notes, Merchant interactions, pickup or delivery choices, promotions, favourites, ratings, support issues, order status, and order history. Order notes may contain information you choose to provide; avoid adding unrelated sensitive information.

Payment and refund information

HalalMap processes order totals, taxes, fees, tips, payment-provider identifiers, payment status, limited card descriptors such as brand or last four digits when supplied by the provider, refunds, wallet or credit activity, disputes, and chargeback information. Stripe or another configured payment provider processes full payment credentials. HalalMap does not require full card numbers to be stored in its application database.

Delivery, tracking, and communications

HalalMap processes delivery assignments, status timestamps, route and location events, estimated arrival information, delivery instructions, proof-of-delivery records where used, and communication metadata needed to connect customers, Merchants, Drivers, and support. The content of an in-platform message or support request is processed when needed to deliver the service, resolve an issue, or investigate safety and abuse.

Device, notification, and security information

HalalMap processes IP address, user agent, device and operating-system information, app version, installation or push notification token, session identifiers, cookie and local or session storage values, request and error logs, security events, rate-limit signals, and fraud indicators. A push token identifies an app installation for notification delivery; it is not used as a checkout identity.

Support, privacy, and account-lifecycle information

HalalMap processes support communications, attachments you choose to submit, refund evidence, privacy access or export requests, correction requests, deletion requests, and records needed to complete, authenticate, and audit those requests. Deletion can be delayed or limited while an order, refund, dispute, security investigation, legal hold, or required financial record remains active.

Business, mosque, and verification information

If you operate a listing or role account, HalalMap may process business or mosque contact information, memberships, locations, hours, menus, certificates, verification status, operational settings, and role-specific identity or payout information. Public listing facts are distinguished from private account and verification records.

3. Sources

Information comes directly from you when you create or verify an account, save an address, place an order, select a preference, communicate, or submit a request. It is also generated through use of the Platform, received from Merchants and Drivers during fulfilment, obtained from your device with permission, and returned by service providers such as payment, mapping, authentication, messaging, storage, and security providers.

Directory and mosque information may come from the organization, authorized representatives, public sources, or permitted third-party sources. HalalMap may derive operational information such as a delivery zone, route estimate, fraud signal, or account-security risk from the information above.

4. Purposes

HalalMap uses personal information to create and secure accounts; authenticate users; show nearby results; maintain carts and preferences; calculate prices and routes; submit and fulfil orders; process payments, tips, refunds, credits, and disputes; coordinate pickup and delivery; provide tracking and notifications; operate mosque and prayer-information features; respond to support and privacy requests; detect fraud and abuse; enforce terms; comply with legal obligations; maintain audit and financial records; diagnose reliability problems; and improve accessibility, performance, safety, and product design.

Operational email, SMS, or push messages are used for authentication, receipts, order progress, delivery, security, support, and account administration. Promotional communications are sent only through enabled channels and subject to the preference and consent controls required for that channel. You can change optional communication preferences, but essential service or security messages may still be sent.

HalalMap seeks consent appropriate to the sensitivity of the information and the reasonable expectations of the interaction. Some processing is evident from a request—for example, using a delivery address to deliver an order. More sensitive optional access, such as precise device location or push notifications, is controlled through device or application permissions where supported.

You can decline optional permissions, although the related feature may not work. You can withdraw consent for optional future processing, subject to reasonable notice and legal or contractual restrictions. HalalMap may process information without consent where applicable law permits or requires it, including certain fraud, security, emergency, investigation, debt, or legal-response circumstances.

6. Disclosure and service providers

HalalMap discloses only the information reasonably needed for the relevant purpose. A Merchant receives order details needed to price, accept, prepare, substitute, and hand off an order. An assigned Driver receives the pickup and delivery information needed to complete that delivery. Customers, Merchants, and Drivers receive only the counterpart information needed for status, communication, proof, and support.

Configured service providers may process information on HalalMap's behalf. Current architecture supports Stripe for payments and related financial operations; Mapbox and configured map services for geocoding, maps, routes, and distance; Supabase-backed database or authentication infrastructure; Amazon Web Services-compatible storage for permitted files; Redis infrastructure for caching, rate, dispatch, or tracking coordination; Apple, Google/Firebase, and Expo-enabled infrastructure for mobile notifications; Vercel for the customer web application; email and SMS delivery providers; and Sentry or other enabled observability tooling for bounded error and reliability information.

Not every provider is used in every request or environment. HalalMap limits provider access through configuration, credentials, contracts, and technical controls appropriate to the service. Providers may process information in Canada, the United States, or another country where they or their subprocessors operate, and information can be available to lawful authorities in that jurisdiction.

HalalMap may also disclose information where reasonably necessary to comply with law or legal process; protect a person, the Platform, or property; investigate fraud or a security incident; establish or defend a legal claim; collect an amount owing; or complete a corporate transaction subject to appropriate handling of the information.

7. Cookies and browser or device storage

The web application uses cookies and local or session storage to maintain authentication and security state, preserve a cart, remember preferences, complete a safe return after sign-in, and support reliable operation. Cart notes and customer instructions are kept out of page URLs and browser identifiers by the canonical checkout flow. Analytics or measurement storage is used only where the related feature is enabled.

Browser settings can remove or block storage, but doing so may sign you out, clear local cart state, or prevent a feature from working. Mobile operating-system settings control location, notification, camera, and other device permissions.

8. Location and delivery visibility

Precise location is used only where supported by the relevant customer or Driver feature and permission. During an active delivery, location and status can be shared among the assigned Driver, affected customer, Merchant, and authorized operations personnel to the extent needed for fulfilment, safety, and support. Location is not intended for emergency monitoring.

Map results and route estimates can be inaccurate. Correct your address and review the displayed delivery point before ordering. HalalMap restricts access to live and historical delivery location through authentication, assignment, business scope, and Admin authorization controls.

9. Retention and deletion

Retention depends on the purpose, sensitivity, active relationship, legal requirements, dispute and fraud risk, and technical backup cycle. Authentication challenges are short-lived. Active session records last until expiry or revocation. Cart and preference information lasts while needed for the feature. Order, payment, refund, tax, ledger, acceptance, security, and audit records may be kept longer to meet financial, dispute, fraud-prevention, and legal obligations.

When information is no longer reasonably required, HalalMap deletes, de-identifies, or restricts it according to the applicable system process. Account deletion does not erase another person's record, an immutable legal acceptance, or a transaction record that HalalMap must retain, but eligible profile and account information is removed or de-identified through the account-lifecycle workflow.

10. Access, correction, export, and complaints

You may request access to personal information under HalalMap's control and ask HalalMap to correct inaccurate or incomplete information, subject to applicable exceptions. Customer account tools may provide a privacy summary and an account snapshot export. Additional access, correction, or deletion requests can be submitted through the supported privacy centre or to privacy@halalmap.ca. HalalMap may verify identity before acting and will respond within the period required by applicable law.

You may raise a privacy complaint with HalalMap first so it can be investigated. Depending on the law that applies, you may also contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada. HalalMap will not retaliate against a good-faith privacy complaint.

11. Safeguards

HalalMap uses safeguards intended to be appropriate to the sensitivity and context of the information, including encrypted transport, access controls, role and business scoping, session revocation, audit records, bounded logs, secret management, provider signature verification, and secure-file controls where supported. No internet or storage system is completely secure. Report a suspected account or privacy incident promptly to support@halalmap.ca or privacy@halalmap.ca.

12. Children

Customer accounts and ordering are intended for people who have reached the age of majority where they live. HalalMap does not knowingly offer customer ordering accounts to children. If you believe a child provided personal information without appropriate authority, contact privacy@halalmap.ca.

13. Changes and contact

HalalMap may revise this Policy as services, providers, practices, or law change. The current version and effective date are displayed with the document, and material changes will be communicated or require renewed acceptance where appropriate. Acceptance records remain bound to the exact version and content hash accepted.

Privacy questions and requests: privacy@halalmap.ca. General customer support: support@halalmap.ca. HalalMap operates the Platform for its Edmonton, Alberta launch market; the exact operating legal entity and registered address are maintained as controlled publication metadata in the Admin Legal Center.