Privacy Policy

1. Who we are

Snack Lab (“we”, “us”, “our”) operates the website snacklab.lol and provides a snack ordering and delivery service in the United Arab Emirates. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data.

2. Data we collect

Account information

When you create an account, we collect your full name and email address. If you sign in with Google, we receive your name and email from your Google account. You may optionally upload a profile picture.

Order information

When you place an order, we collect the recipient name, delivery day, payment method chosen, and items ordered. We retain your order history so you can view past purchases.

Payment information

If you pay online, your payment is processed entirely by our third-party payment provider, Ziina. We do not receive, store, or have access to your card number, CVV, or full card details. We only store a payment reference ID to link the payment to your order.

Automatically collected data

Our hosting providers (Vercel, Supabase) may automatically log standard server data such as your IP address, browser type, and access times. We do not use any analytics, advertising, or tracking scripts on our website.

3. How we use your data

• To create and manage your account
• To process, deliver, and track your orders
• To send you transactional emails about your orders (receipts, status updates such as “ready for delivery” and “delivered”)
• To process payments through our payment provider
• To prevent fraud and abuse of the service

We do not use your data for marketing emails, newsletters, profiling, or advertising. We will never sell, rent, or share your personal data with third parties for their marketing purposes.

4. Third-party services

We use the following third-party services to operate Snack Lab. Each processes data only as necessary to provide their service to us:

• Supabase — database hosting, user authentication, and file storage (profile pictures, product images)
• Vercel — website hosting and deployment
• Resend — transactional email delivery (order receipts and status notifications)
• Ziina — online payment processing (only used when you choose to pay online)
• Google — authentication (only used when you choose to sign in with Google)

We encourage you to review the privacy policies of these providers. We do not control and are not responsible for their data practices beyond what is necessary for our service.

5. Cookies & local storage

We use only essential cookies to keep you signed in (authentication session managed by Supabase). We do not use any tracking, advertising, or third-party cookies.

We also use your browser’s local storage to remember your shopping cart contents and your light/dark theme preference. This data stays on your device and is not sent to our servers.

6. Data retention

We retain your account information for as long as your account is active. Order history is retained to allow you to view past orders and for our business records. If you request account deletion, we will delete your personal data, though we may retain anonymised order records for accounting purposes.

7. Data security

Your account is protected by encrypted authentication. All communication between your browser and our servers is encrypted using HTTPS/TLS. Access to your data within our database is restricted through row-level security policies, meaning users can only access their own data. Payment card details are handled entirely by Ziina and never touch our servers.

8. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data (you can update your name and profile picture from your account settings)
• Request deletion of your account and personal data
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at support@snacklab.lol or on Instagram @snack.lab24.

9. Children’s privacy

Our service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us and we will promptly delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date at the top of this page. Your continued use of Snack Lab after any changes constitutes acceptance of the updated policy.

11. Contact us

If you have any questions or concerns about this Privacy Policy or how we handle your data, contact us at:

• Email: support@snacklab.lol
• Instagram: @snack.lab24