Privacy Policy

1. Introduction

Kahramana Baghdad ("we," "us," "our") respects your privacy. This policy explains what information we collect when you visit kahramanat.com or place an order, how it's used, and your rights under Bahrain's Personal Data Protection Law (PDPL).

2. Information We Collect

When you place an order or contact us through our website, we ask for:

• Your name (required)
• Your phone number (optional)
• Your delivery address or branch selection (required for delivery orders)
• Any special notes for your order (optional)

We do not collect payment card details, national ID (CPR) numbers, or any sensitive personal data through our website.

3. How Your Order Reaches Us

When you confirm an order, our website prepares a WhatsApp message to the branch you chose. The message contains your order and the details you entered: your name, your delivery address if you typed one, and your map location if you added one, your additional contact number if you added one, and your notes. Our website then opens WhatsApp with this message filled in. The pre-filled text is part of the link that opens WhatsApp, so it is handed to WhatsApp (Meta) before you press "Send"; depending on your device, WhatsApp may receive it as soon as it opens. WhatsApp's own privacy policy applies — see whatsapp.com/legal/privacy-policy. Your order is placed only when you press "Send" in WhatsApp, and it is confirmed only when the branch replies.

At the same moment, our website sends a separate record of the order attempt to our own service, hosted on Cloudflare, which forwards it to an internal staff channel on Discord. This record contains the order reference, the items with their sizes and options, quantities, prices, totals, branch, order type, payment method and language. It does not contain your name, phone number, address, map location or any notes as text. It also contains a short technical code calculated from the order's contents, including your delivery address, notes and map location if you added them; we use it to recognize repeated or changed orders. The code does not show those details, but it is not designed to be anonymous. Because it is sent when WhatsApp opens, this record may exist even if you do not press "Send".

4. Data Storage on Your Device

To save you re-typing, your browser keeps the details you enter — name, contact number, address, branch, payment method, order type and notes — ready for your next visit; they are not deleted automatically when you place an order. It also keeps your current order until you press "Start a new order". If you attach your map location, it can be used for at most 24 hours after you last selected it, as measured by your device's clock, unless you remove it or start a new order first, and it may be included in a new order you place within that time. It is never added to an order after it expires; it then stays on your device until a page of our site loads the order cart again (for example, when you open the menu), when it is deleted. The local order record is kept until you start a new order and is used within 24 hours to recognize resends or changes. We cannot read this stored data from our servers, and you can delete it at any time in your browser settings.

5. Analytics

We use Google Analytics (GA4) with IP anonymization enabled to understand site usage — such as which pages and menu items are popular. This never includes your name, phone number, or address. See policies.google.com/privacy.

6. Third-Party Content

Our Contact page includes embedded Google Maps for our branch locations. Loading this map may allow Google to collect standard technical information (such as your IP address) under its own privacy policy.

7. Your Rights

Under Bahrain's PDPL, you have the right to access, correct, or request deletion of your personal data. Contact us at [email protected] — we will respond within 10 business days.

8. Changes to This Policy

We may update this policy periodically. Changes will be posted here with a revised date.