Privacy Policy

This Privacy Policy document outlines the rules, mechanisms, and technical and legal measures adopted for the collection, processing, storage, and protection of personal and commercial data across the "Recovera" (تعافيها) platform—an electronic marketplace (website available via the official link: https://syria.recovera.net).

The platform is a vital initiative under Pioneers Innovation for Sustainability and Impact. It aims to provide an integrated digital interface that enables customers (especially those in the diaspora) to access and purchase displayed artisanal and handmade products, thereby supporting small and micro-enterprises in the Syrian Arab Republic.

Your use, browsing, or account registration on the platform constitutes an explicit legal acknowledgment of your agreement to the provisions of this policy, which has been drafted to comply with the enforced Syrian laws and regulations, particularly the Electronic Transactions Law and the Law on Regulating Network Communication and Combating Cybercrime.

First: Target User Categories

The platform targets two main categories of users whose data privacy must be protected:

• Partner Project Owners and Artisans (Local Partners): Whose products are displayed and marketed via the platform under official Memorandums of Understanding (MoUs) and managed by the platform's team.

• Customers and Buyers (Domestic and Diaspora Customers): Who browse the website and create personal accounts to complete purchases, communicate, and track orders.

Second: Collected Data and Operational Purposes

The platform is committed to collecting data to the minimum and necessary extent required to secure commercial transactions and facilitate logistical operations. The collected data is divided into the following categories:

• Customer (Buyer) Account Data: When a customer creates a personal account on the website to facilitate purchases and track orders, the platform collects: (Full name, username, email address, and password, which is subject to full cryptographic encryption). The purpose is to manage orders, save shopping carts, and provide the customer with their purchase history.

• Local Partner Data (Project Owners and Artisans): Includes all data necessary for coordination and contracting, including: (Full name, phone number, physical address, and business account/project details). This data is maintained in secure, closed databases and is implicitly confidential, meaning it is not publicly displayed on the platform. Exceptions include the trade name or brand, or any contact information that the project owner explicitly requests in writing to be displayed to customers to facilitate buyer access.

• Technical and Information Data: Includes standard browsing data such as Internet Protocol (IP) address, browser type, operating system, and visit timestamp. This data is collected automatically to analyze performance, ensure website stability, and protect it from cyberattacks or hacking attempts.

Third: Data Retention Period

The platform is committed to retaining customer and partner account data for the duration of the account's activation or the validity of the signed MoU between the parties. Financial records, transactions, and delivery shipments are retained in accordance with the legal and commercial durations imposed by the financial laws and regulations in force in the Syrian Arab Republic.

Fourth: Access Permissions and Device Security

Since the Recovera platform is a website and not an application downloaded onto mobile devices, and since content management, product updates, and the uploading of images and prices are handled entirely internally via a dedicated control panel accessible only to the Recovera team:

• The website does not request, nor does it possess the technology to access, the phone camera, photo gallery, or contacts of either the seller or the customer.

• The platform does not require the activation of precise geographical location (GPS) permissions or push notification systems associated with mobile operating systems.

Fifth: Data Confidentiality and Third-Party Sharing

The platform considers maintaining data confidentiality an absolute commitment. Personal or commercial data is not sold, rented, or shared with any external party, with the exclusive exception of the following cases:

• Logistical Partners: Sharing only essential shipping data (customer's name, clear address, and phone number) with contracted shipping and delivery companies to complete order fulfillment.

• Legal Compliance: Disclosing data in the event of an official request, judicial order, or legal subpoena issued by judicial authorities or competent government entities in the Syrian Arab Republic under applicable laws (such as cybercrime combatting cases).

Sixth: Data Protection and Encryption Mechanisms

To protect data from unauthorized access, modification, or loss, the platform is committed to applying advanced security standards, including:

• Encrypting data traffic between the user's browser and the platform's server using Secure Sockets Layer (SSL) protocol, permanently and continuously across the entire website domain.

• Encrypting customer and administrator passwords in the databases using one-way cryptographic hashing algorithms that cannot be reverse-engineered, even by system engineers.

• Taking periodic, regular, and automated backups of all data and product images, storing them in isolated and secure cloud environments to ensure service continuity and prevent data loss under any emergency technical circumstance.

Seventh: User Rights and Responsibilities

• User Rights: Any customer or local partner has the right to review, correct, or amend their data, or request account suspension and the deletion of all personal information from the platform's servers by contacting technical support. Management is committed to responding immediately, unless there are pending orders or existing obligations that necessitate temporary data retention.

• Intellectual Property of Partners: The platform is committed to respecting intellectual property; the local partner retains ownership of the trademarks and intellectual property related to their work and displayed products.

• User Responsibility: The customer bears full personal responsibility for protecting their account data (password and username) and for any transactions or purchase orders issued through their account.

Eighth: Minor Policy and Minimum Age Limit

The platform is committed to protecting minors and their privacy; therefore, marketing MoUs require project owners to be legally eligible and possess full commercial capacity (above 18 years of age). Similarly, customers and buyers who create personal accounts and conduct financial transactions through the website must have reached the legal age (18 years). In cases of handmade projects managed by minors, or if individuals under the legal age wish to browse and purchase from the website, the account creation, personal data provision, and financial confirmation must be done entirely under the direct supervision and explicit consent of a parent or legal guardian, who shall bear full legal responsibility for any resulting activities.

Ninth: Unsubscription and Account Deletion Mechanism

Customers can request the permanent deletion of their accounts at any time by contacting technical support, whereby the account is immediately deactivated and associated data is deleted. For partner project owners, the termination of their store presence and the withdrawal of their products are subject to the legal duration and prior notice period agreed upon with the platform administration under the MoUs.

Tenth: Policy Amendments and User Notification

The Recovera administration reserves the full right to update and amend this Privacy Policy to align with new technical, operational, or legal developments. Any update will be published directly on this page, and continued use of the website, browsing, or displaying products on it constitutes implicit approval and acceptance of these amendments.