PRIVACY POLICY

Rotana — Sales Order Application

Effective Date: 01/04/2026   |   Last Updated: 01/04/2026

 

1. Introduction

This Privacy Policy describes how Rotana Co ("we," "us," or "our") collects, uses, and protects information when authorized sales representatives ("Salesmen," "you," or "User") use the Rotana mobile application (the "App") available on Google Play and the Apple App Store. The App is an internal business tool used exclusively by authorized sales personnel to place product orders from our main supplier. The App does not process any payments and is not available to the general public.

2. Scope and Eligibility

The App is restricted to authorized employees and contracted sales representatives of Rotana Co . Accounts are created and provisioned only by company administrators. No self-registration or public sign-up is available. By using the App, you confirm that you are an authorized Salesman and that you have received credentials from an authorized administrator.

3. Information We Collect

We collect only the information necessary to operate the App and fulfill orders. Categories include:

a) Account Information

       Full name of the Salesman

       Business email address

       Phone number (business)

       Employee or sales representative ID

       Assigned sales region or territory

       Login credentials (passwords are stored in hashed form; we never store plain-text passwords)

b) Order and Usage Information

       Orders created, including items, quantities, dates, and notes

       Customer/retailer name linked to each order (business contact data only)

       In-app actions such as login events, order submissions, and edits

c) Device and Technical Information

       Device model, operating system, and OS version

       App version and unique app install identifier

       IP address and approximate network information

       Crash logs and diagnostic data for troubleshooting

d) Optional Location Information

       If enabled, approximate or precise location may be collected to associate orders with visits. You may disable location access in your device settings at any time.

We do NOT collect:

       Payment card numbers, bank accounts, or any financial payment data (the App does not process payments)

       Government-issued IDs, passport numbers, or social security numbers

       Health, biometric, or other special-category personal data

4. How We Use Information

We use the information we collect solely for legitimate business purposes, including to:

       Authenticate Salesmen and secure access to the App

       Create, process, track, and fulfill product orders with the supplier

       Communicate with Salesmen about orders, updates, and service notices

       Maintain internal records and generate business reports

       Detect, prevent, and respond to fraud, misuse, or security incidents

       Improve App performance, diagnose crashes, and enhance features

       Comply with legal, tax, and regulatory obligations

5. Legal Basis for Processing

Where applicable law (such as the GDPR) requires a legal basis, we rely on: (a) the performance of our contract with you or your employer; (b) our legitimate business interests in operating the App and our supply chain; (c) compliance with legal obligations; and (d) your consent, where specifically requested (e.g., for optional location access).

6. How We Share Information

We do not sell your personal information. We share information only as follows:

       With our main supplier, solely to process and deliver submitted orders

       With authorized internal staff, managers, and administrators on a need-to-know basis

       With service providers who host, secure, or support the App (e.g., cloud hosting, crash reporting), under contractual confidentiality obligations

       When required by law, court order, or valid governmental request

       In connection with a merger, acquisition, or sale of business assets, subject to confidentiality safeguards

7. Data Storage and Security

Data is stored on secured servers operated by us or our vetted cloud providers. We implement industry-standard administrative, technical, and physical safeguards, including encryption in transit (HTTPS/TLS), encrypted passwords, role-based access control, and activity logging. While no system is completely secure, we work to protect your information from unauthorized access, disclosure, alteration, or destruction.

8. Data Retention

We retain account and order information for as long as your account is active and for a reasonable period thereafter to meet business, accounting, audit, and legal requirements. When data is no longer required, it is securely deleted or anonymized.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

       Access: request a copy of the personal data we hold about you

       Correction: request correction of inaccurate or incomplete data

       Deletion: request deletion of your data, subject to legal retention obligations

       Restriction or objection: restrict or object to certain processing activities

       Data portability: request a copy of your data in a portable format

       Withdraw consent: where processing is based on consent (e.g., location), you may withdraw it at any time

To exercise any right, contact us using the details in Section 14. Because the App is a company tool, some requests may also need to be coordinated with your employer.

10. Children's Privacy

The App is a business tool intended solely for adult, authorized sales representatives. It is not directed to, nor intended for use by, individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that such information has been collected, we will delete it promptly.

11. International Data Transfers

Your information may be processed and stored in countries other than your own, including where our servers or service providers are located. Where required, we use appropriate safeguards (such as standard contractual clauses) to protect personal data transferred across borders.

12. Third-Party Services

The App may use third-party services for hosting, analytics, push notifications, and crash reporting (for example, cloud providers, Firebase, or equivalent). These providers are bound by contractual obligations and may only use data for the purposes we specify. The App does not display third-party advertising and does not share personal information for advertising purposes.

13. Device Permissions

The App may request the following device permissions:

       Internet / Network access: required to submit orders and authenticate

       Storage: to cache order data for offline use

       Camera (optional): to scan product barcodes or QR codes when placing orders

       Location (optional): to associate orders with customer visits, if enabled

       Notifications: to alert you about order status and important updates

You may manage or revoke permissions at any time in your device settings.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we make material changes, we will notify you through the App or by email and update the "Last Updated" date above. Continued use of the App after changes take effect constitutes acceptance of the updated Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Rotana Co

       Email: info@rotanaco

       Address: Hifa

       Phone: +972527703938

        

©