Effective Date: [July, 2025]

1. Introduction

Camelera respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you interact with our [website, mobile application, services, advertisements on Meta platforms, etc.] (collectively, "Services").

This policy is designed to comply with the Personal Data Protection Law No. 24 of 2023 (PDPL) of the Hashemite Kingdom of Jordan and other applicable data protection laws.

2. Who We Are

Camelera – Ghabough for Camel Milk Products  registered in Amman -Jordan. Phone number +962795036310, email address care@camelera.com

3. Definitions (as per Jordanian PDPL)

• Personal Data: Any data or information, from any source or in any form, relating to an identifiable natural person that directly or indirectly identifies them, including data related to their person, marital status, or location.
• Sensitive Personal Data: Any data or information relating to a natural person that directly or indirectly reveals their racial or ethnic origin, political opinions or affiliations, religious beliefs, financial standing, health, physical or mental condition, biometric and genetic data, or trade union membership.
• Data Controller: The natural person or legal entity who determines the purposes and means of processing personal data.
• Data Processor: The natural person or legal entity who processes personal data on behalf of the Data Controller.
• Data Subject: The natural person to whom personal data relates.
• Processing: Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

4. What Personal Data We Collect

We may collect various types of personal data from you, depending on your interaction with our Services:

• Identity Data: Name, username, date of birth, gender, national ID number (if legally required for specific services).
• Contact Data: Email address, phone number, postal address.
• Financial Data: Payment card details (processed securely by third-party payment processors, we do not store full card details), billing address.
• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our Services.
• Usage Data: Information about how you use our website, products, and services, including pages viewed, links clicked, and time spent on pages.
• Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties, and your communication preferences.
• Data from Third-Party Platforms (e.g., Meta/Facebook): If you interact with our ads or content on Meta platforms, we may receive information provided by Meta, such as your public profile information, or information you submit through Lead Forms (e.g., name, email, phone number) if you provide your explicit consent.
• Sensitive Personal Data: We generally do not collect Sensitive Personal Data unless it is necessary for a specific service and we have obtained your explicit consent or are permitted to do so by law. If we do, it will be clearly indicated at the point of collection.

5. How We Collect Your Personal Data

We use different methods to collect data from and about you, including:

• Direct Interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you:
• Create an account on our website/app.
• Subscribe to our newsletters or marketing communications.
• Purchase our products or services.
• Enter a competition, promotion, or survey.
• Give us feedback or contact us.
• Automated Technologies or Interactions: As you interact with our Services, we may automatically collect Technical and Usage Data about your equipment, Browse actions, and patterns. We collect this personal data by using cookies, server logs, Meta Pixel, and other similar technologies.
• Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties, including:
• Technical and Usage Data from analytics providers (e.g., Google Analytics).
• Contact, Financial, and Transaction Data from providers of technical, payment, and delivery services.
• Identity and Contact Data from data brokers or aggregators.
• Information from social media platforms, such as Meta (Facebook, Instagram) when you interact with our ads, pages, or content. This may include data you provide directly through Meta's Lead Forms.

6. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To provide and maintain our Services, including processing your orders and managing your account.
• To personalize your experience and deliver content and product offerings relevant to your interests.
• To improve our Services, marketing, and customer relationships.
• To send you marketing and promotional communications, where you have consented to receive them.
• To communicate with you about your account, orders, or inquiries.
• To detect, prevent, and address technical issues or fraud.
• To comply with legal obligations and regulatory requirements under Jordanian law, including the PDPL.
• For analytics and research purposes to understand user behavior and trends.
• For targeted advertising campaigns on platforms like Meta, based on your interactions with our Services and consent.

7. Legal Basis for Processing Personal Data

Under the Jordanian PDPL, we rely on the following legal bases to process your personal data:

• Your Explicit Consent: Where you have given clear, specific, and documented consent for us to process your personal data for a specific purpose (e.g., signing up for a newsletter, submitting a lead form). You have the right to withdraw your consent at any time.
• Performance of a Contract: Where the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract (e.g., processing an order, providing customer support related to a service you purchased).
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject (e.g., tax compliance, reporting to authorities).
• Legitimate Interests: Where processing is necessary for our legitimate interests (or those of a third party), provided that your fundamental rights and freedoms do not override those interests (e.g., for direct marketing, improving our services, preventing fraud, network security). We ensure a careful balance between our interests and your rights.

8. Disclosure and Sharing of Your Personal Data

We may share your personal data with the following categories of recipients:

• Service Providers: Third-party vendors and service providers who perform services on our behalf, such as payment processing, website hosting, data analysis, email delivery, marketing assistance, customer service, and advertising. These providers are obligated to protect your data and only use it for the purposes for which we engage them.
• Meta (Facebook, Instagram) and Other Advertising Partners: We share data with Meta through the Facebook Pixel and other tools for advertising, analytics, and measurement purposes. This includes information about your interactions with our website and ads. Meta uses this information in accordance with its own privacy policy.
• Professional Advisers: Lawyers, bankers, auditors, and insurers who provide professional services to us.
• Governmental and Regulatory Authorities: When required by law or to comply with a legal process, such as responding to a court order or subpoena, or to protect our rights, property, or safety, or the rights, property, or safety of others.
• Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

Cross-Border Data Transfers: We may transfer your personal data outside of Jordan to countries that may not have the same level of data protection laws as Jordan. In such cases, we will ensure that appropriate safeguards are in place to protect your data, as required by the PDPL. This includes, but is not limited to:

• Obtaining your explicit consent for the transfer.
• Ensuring the recipient country offers an adequate level of protection.
• Implementing standard contractual clauses or other legal mechanisms approved by the Personal Data Protection Directorate (once established and guidelines are issued).

9. Data Security

We have implemented appropriate technical and organizational security measures to protect your personal data from accidental loss, unauthorized access, alteration, disclosure, or destruction. These measures include [mention specific examples if you can, e.g., encryption, firewalls, secure server infrastructure, access controls, regular security audits].

Despite our best efforts, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security. In the event of a data breach, we will notify you and the Personal Data Protection Directorate immediately, as required by the PDPL.

10. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

11. Your Rights Under Jordanian PDPL

As a Data Subject, you have the following rights regarding your personal data under the Personal Data Protection Law of Jordan:

• Right to Be Informed (Article 17): The right to be informed about the collection and processing of your personal data, including the purpose, duration, recipient, and security measures.
• Right of Access (Article 14): The right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and certain information regarding its processing.
• Right to Withdraw Consent (Article 16): The right to withdraw your previously granted consent for processing your personal data at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to Rectification/Correction (Article 18): The right to request the correction, amendment, or updating of inaccurate or incomplete personal data concerning you.
• Right to Object (Article 16, 17): The right to object to the processing of your personal data in certain circumstances, particularly if the processing is based on legitimate interests and you have specific reasons relating to your particular situation.
• Right to Restriction of Processing (Article 14): The right to request the restriction of processing of your personal data in certain circumstances.
• Right to Erasure / "Right to Be Forgotten" (Article 20): The right to request the erasure of your personal data without undue delay in certain circumstances (e.g., when the data is no longer necessary for the purposes for which it was collected, or you withdraw consent and there is no other legal ground for processing).
• Right to Data Portability (Article 21): The right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from us, where technically feasible.
• Right to Notification of Breach (Article 17): The right to be immediately notified by the Data Controller of any violations, abuse, or breaches of the security and safeguarding of your personal data.

To exercise any of these rights, please contact us using the details provided in Section 2 of this Privacy Policy. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).

12. Cookies and Tracking Technologies

Our Services use "cookies" and similar tracking technologies (e.g., Meta Pixel, web beacons) to enhance your experience, analyze usage, and for advertising purposes.

• What are Cookies? Cookies are small text files placed on your device (computer, tablet, mobile) when you visit a website. They are widely used to make websites work more efficiently and to provide information to the website owners.
• How We Use Cookies: We use cookies for various purposes, including:
• Strictly Necessary Cookies: Essential for the operation of our website (e.g., enabling you to log into secure areas).
• Analytical/Performance Cookies: Allow us to recognize and count the number of visitors and see how visitors move around our website. This helps us improve how our website works.
• Functionality Cookies: Used to recognize you when you return to our website, allowing us to personalize content for you and remember your preferences.
• Targeting/Advertising Cookies: Record your visit to our website, the pages you have visited, and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose, including Meta.
• Managing Cookies: You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our Services may become inaccessible or not function properly.
• Meta Pixel: The Meta Pixel is a piece of code that allows us to track conversions from Meta ads, optimize ads, build targeted audiences, and retarget people who have already taken some action on our website. This involves the collection of your IP address, browser information, and other data for Meta's advertising services.

13. Third-Party Links

Our Services may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

14. Children's Privacy

Our Services are not intended for children under the age of 18, and we do not knowingly collect personal data from children under 18 without parental consent. If we become aware that we have collected personal data from a child under 18 without appropriate consent, we will take steps to delete that information promptly.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new technologies. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically for any changes.

16. Contact Us

If you have any questions about this Privacy Policy or our data protection practices, please contact us:

Email: care@camelera.com Phone: +962795036310 Postal Address: Amman -Jordan