privacy policy

who we are

nummm is a home-based bakery in Cairo, Egypt, selling handcrafted cookies through this website. this page explains what we collect, why, and how long we keep it.

what we collect when you order

your name, phone number, delivery address and any notes you write, along with the order itself and the delivery slot you chose. we need these to bake your order, bring it to you, and talk to you about it.

if you choose pickup, we do not ask for an address.

payment

card details never touch our servers. card and wallet payments happen on a page hosted by Kashier, our payment provider, and our checkout is configured never to store or retrieve a card. we keep only the amount, whether it was paid, and Kashier's reference for the transaction. if you pay by InstaPay we see no banking details at all.

whatsapp

we use WhatsApp to confirm orders and, a day after delivery, to ask how it went. your phone number is passed to WhatsApp (Meta) so those messages can reach you.

if you reply to us on WhatsApp we store your message so we can read it and answer — a business WhatsApp number has no inbox anywhere else. you can stop promotional messages at any time using the “stop promotions” button on any message.

accounts and points

if you create an account we store your name, phone number and a hashed version of your password — never the password itself. the referral programme keys credit to a phone number, which means we create a record holding your name and number after your first delivered order even if you never signed up. to stop referrals and points being misused, we compare the name and address on an order with earlier orders from the same number and from the number that referred it; the result is shown only to us, and decides nothing on its own.

the website and analytics

we record anonymous analytics about how the site is used — which pages are visited and which checkout steps are reached — so we can see where people get stuck. we also use an OpenAI Ads pixel and a meta pixel (facebook and instagram) to measure how our advertising performs.

when you place an order, your name and phone number are turned into a scrambled code in your own browser and that code is sent to meta. the code cannot be turned back into your details, and meta never receives the name or the number itself. it is used only to tell which of our ads led to a real order.

we do not sell your data to anyone.

how long we keep it

we keep order records for as long as we need them for bookkeeping and customer service. you can ask us to delete your account or your data at any time, and we will, except for what we must keep as a record of a sale.

your rights

you can ask for a copy of your data, ask us to correct it, ask us to delete it, or ask us to stop messaging you. get in touch and we will.

contact us

for anything about privacy, reach us through the contact page.