Privacy Policy

This policy explains how Etebar Market uses personal information for website ordering, Kabul delivery and Special Requests, and what rights and choices are available.

Etebar Market is a trading name of A-Z HEALTH-CONSULTING LLP, a limited liability partnership registered in England and Wales under number OC461450. Its registered office is 7 Cravan Avenue, Feltham, Middlesex, TW13 4EE, United Kingdom.

A-Z HEALTH-CONSULTING LLP is the data controller for the personal information described in this policy. For any privacy question or request, email info@etebar-market.com.

Buyer information: name, email address, any phone number provided, and the messages exchanged with us about an order or request.

Recipient and delivery information: the recipient’s name, one or more recipient phone numbers, an optional relationship or label for an alternative contact, the Kabul delivery address, the area or district, landmark and directions, and any additional delivery instructions.

Location information: if the optional map is used, the coordinates of the point confirmed on the map are stored with the order. The map is optional and an address can always be typed instead.

Order information: the products and quantities ordered, the delivery charge, any optional video-proof choice, the order status, delivery-proof records and related communications.

Special Request information: the requested product, repair or local service, quantities or scope, timing preferences, notes, consent records, status information, and any images or PDF files uploaded within the limits shown on the form. Attachments are stored privately, are not published on the website, and are used only to review and answer the request.

Customers can create an account. An account stores the sign-in details and order history held by WordPress and WooCommerce. Customers who save a recipient for reuse also store that recipient’s name, phone numbers and Kabul delivery details in their account until they change or remove them.

Most orders are placed for a recipient in Kabul who is not the buyer. When you give us a recipient’s name, phone number and delivery details, we use them to arrange and complete that delivery, and we give the delivery partner the details they need so the recipient can be telephoned before arrival and the order handed over. Please make sure you are entitled to give us those details, and let the recipient know that you have.

If you are a recipient and want to know how your details are used, or want them removed once a delivery is complete, email info@etebar-market.com.

To take and fulfil a buyer’s order, run the buyer’s account, and answer the buyer about it: performance of our contract with the buyer, or taking steps at the buyer’s request before entering into one.

To use recipient details supplied by a buyer for the delivery of that order: our legitimate interest, and the buyer’s, in delivering the order that was placed. We limit this to what the delivery actually needs.

To review and answer a Special Request, which is not an order and carries no fixed price: steps taken at the requester’s request before any contract, and our legitimate interest in assessing whether the request is something we can help with.

To record deliveries, handle complaints, refunds and disputes, prevent misuse and protect the business: our legitimate interest in operating and defending the business.

To keep accounting and business records: compliance with our legal obligations.

Where we ask for a separate permission, such as permission to contact a buyer by phone or messaging app about an order, that permission is the basis for that contact and can be withdrawn at any time.

Online card payments are processed by Stripe. Stripe handles payment-card information under its own privacy terms. Etebar receives the information needed to identify the payment and manage the order, and does not need to store full payment-card details.

We give each person and each business the minimum that lets them do their part, and no more.

Inside Etebar, full customer and order information is available only to authorised Etebar personnel who need it to run the business.

Our delivery drivers are part of Etebar. They are our own delivery staff working for A-Z HEALTH-CONSULTING LLP, not an outside courier company, so handing an order to a driver is internal access within the same organisation rather than passing your details to another business. A driver is given only what the delivery itself requires: the order number, the recipient’s name where it is needed, the delivery address or location, and the recipient’s telephone number so they can call before they arrive. A driver is not given the buyer’s account, other orders, order history or any payment information.

Merchants and shops in Afghanistan are separate, independent businesses we buy the goods from. They are not part of Etebar. They receive only the order number and the items and quantities required. They are given no name, no telephone number, no address and no payment information for either the buyer or the recipient, so no personal detail of yours reaches them.

Service providers who support the website, its hosting, its email delivery and, once it is enabled, its payment processing, act on our instructions and use the information only for that service.

We also share information where we must, to meet a legal obligation or to establish, exercise or defend a legal claim.

We do not sell personal information and we do not share it for anyone else’s marketing.

A Kabul delivery cannot happen without the delivery details reaching Kabul, so recipient and delivery information is used by our own delivery staff in Afghanistan. This is our own organisation accessing its own records from another country, not a disclosure to an outside company, and this policy and United Kingdom data protection law continue to apply to it in full. The merchants we buy from are outside our organisation, but they receive none of your personal details at all.

Being outside the United Kingdom still matters, and we do not pretend otherwise. Afghanistan is not covered by United Kingdom adequacy regulations, so the local legal protections around information held there are not ones the United Kingdom has assessed as equivalent, and local authorities may have powers over information in their territory that United Kingdom rules would not permit. We reduce that exposure the only way this delivery model allows: by keeping what travels to the smallest set of details a delivery needs, giving it only to the driver handling that order, keeping access controlled and limited to authorised staff, and not holding it there longer than the order requires.

Standard delivery proof records the package and the handover, and optional video proof can be added to an order. A recognisable recipient appears only with consent, and safety or consent can prevent a photo being taken at all.

Delivery-proof photos and videos are kept for 180 days after delivery and are then deleted. They are kept for longer only where that is reasonably necessary for an unresolved complaint or dispute, a refund investigation, a fraud investigation, or a legal claim or legal obligation. Once that reason ends they are deleted, and they are not kept indefinitely.

Order, request and communication records are kept only for as long as reasonably needed for the service, accounting, dispute handling, safety and applicable legal obligations. Account and saved-recipient details are kept until the customer changes or removes them, or closes the account.

WooCommerce sets cookies that are needed for the cart, the checkout and, where used, the customer account session. These are required for ordering to work. We also store your chosen site language in a cookie so the site opens in that language next time.

We do not currently send website analytics to any external analytics provider, and no analytics provider is configured. The analytics groundwork built into the site is switched off by default and sets no analytics cookie of its own. If this changes, this policy will be updated first.

The optional map on the checkout, account and Special Request forms is Google Maps. When you use the map, Google receives the requests needed to display it and to search for a place, and handles that information under its own terms. The map is optional and addresses can be entered manually instead.

We use reasonable organisational and technical safeguards, including limiting who can see full order information. No online system can be guaranteed completely secure.

You can ask us for a copy of the personal information we hold about you, ask us to correct it or delete it, ask us to restrict how we use it, object to processing we carry out for our legitimate interests, ask for the information you gave us to be provided in a portable form, and withdraw any permission you have given. Some records may need to be kept for legitimate operational, accounting or legal reasons, and we will explain if that applies.

To exercise any of these rights, email info@etebar-market.com.

If you are unhappy with how we have handled your personal information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office, the United Kingdom supervisory authority, at ico.org.uk/make-a-complaint or on 0303 123 1113.

If this policy changes, the updated version is published on this page with a new last-updated date.

For privacy questions or requests, email info@etebar-market.com.