Privacy Policy

ABECODS ("we", "us", "our") is a digital agency based in Doha, Qatar, providing e-commerce performance services for Shopify and WooCommerce brands. We respect your privacy and are committed to protecting the personal information you share with us.

This Privacy Policy applies to information we collect through www.abecods.com and in the course of providing our services. It should be read together with our Terms & Conditions.

Controller vs processor. For information collected through our website and business operations, ABECODS is the data controller. When we process personal data contained in a client's store, customer records, or advertising accounts as part of an engagement, we act as a processor on that client's behalf, under the terms of the relevant agreement.

We collect information in three ways: what you give us, what we collect automatically, and what we receive from third parties.

We do not intentionally collect special categories of sensitive personal data through our website, and we ask that you do not send such data to us unless it is necessary for an engagement.

We use personal information to:

• Respond to your enquiries and provide the information or proposal you request.
• Provide, manage, and improve our services under an engagement.
• Operate, secure, and improve our website and understand how it is used.
• Send administrative messages, and, where you have opted in, occasional updates about our work.
• Meet legal, accounting, and regulatory obligations, and protect our rights.

We rely on the following lawful bases, depending on the context:

• Contract. To take steps at your request before entering an agreement and to perform our services.
• Legitimate interests. To run and secure our business and website, provided your rights do not override those interests.
• Consent. For non-essential cookies and marketing communications, which you can withdraw at any time.
• Legal obligation. Where the law requires us to retain or disclose information.

Our website uses cookies and similar technologies to function correctly, remember your preferences, and understand usage. You can control non-essential cookies at any time. For a full description of the cookies we use and how to manage them.

We do not sell your personal information. We share it only in the following circumstances:

• Service providers. Trusted vendors who support our operations (such as hosting, email, analytics, and payment processing) under confidentiality obligations.
• Platforms used for your engagement. Where delivering a service requires configuring analytics or advertising platforms on your behalf.
• Legal and safety. Where required by law, regulation, or legal process, or to protect our rights, users, or the public.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.

We keep personal information only for as long as necessary for the purposes described in this policy, including to satisfy legal, accounting, or reporting requirements. Enquiry data is retained for a reasonable period to follow up. Engagement records are retained for the duration of the relationship and for a period afterwards as required by law and sound business practice. When information is no longer needed, we delete or anonymise it.

We apply appropriate technical and organisational measures to protect personal information against unauthorised access, loss, or misuse. These include access controls, encryption in transit where appropriate, and limiting access to those who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly if an incident occurs.

We are based in Qatar and work with service providers that may store or process data in other countries. Where personal information is transferred outside your country, we take reasonable steps to ensure it remains protected in line with this policy and applicable law, including through appropriate contractual safeguards with our providers.

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your information where there is no overriding reason to keep it.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Request a copy of certain information in a portable format.

To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by applicable law. Where we process data as a processor for a client, we will refer your request to that client.

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

Our website may contain links to third-party sites and services that we do not control. This policy does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policy of any site you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The current version is always published on this page with its effective date. Where changes are significant, we will take reasonable steps to notify you. Your continued use of our website after an update constitutes acceptance of the revised policy.

For any question about this policy or about how we handle your personal information, please reach out: