Etlala · Intalaq

Privacy Policy

Last updated: 9 October 2026

This Privacy Policy explains how INTALAQ (“we”, “us”) processes information when merchants install or use Etlala (إطلالة), our shop-the-look / visual merchandising app for Shopify, Salla, and Zid, and when visitors use our related websites.

This policy covers the Etlala product only. It does not cover Intalaq’s other apps (for example ArabiSEO Pro), unless those apps publish their own privacy policy.

1. Who we are

Etlala helps merchants display interactive looks on their storefronts, add products to cart, and optionally apply full-look discounts. The merchant is the controller of their store and customer relationships; we act as a service provider / processor for data needed to run the app.

2. Personal data we process (minimum necessary)

We process only the minimum data required to provide app value to merchants.

2.1 Merchant / store account data

  • Store identifiers (for example Shopify shop domain, Salla / Zid merchant id)
  • OAuth access tokens and related auth metadata
  • Billing / subscription status for the app
  • Look content merchants create (images, hotspot positions, product references, layout settings)
  • Merchant contact used for support (email you send us)
  • Store owner name and contact email, store time zone, and dashboard language, read from the platform at install

2.2 Storefront / shopper interaction analytics (aggregated for the merchant)

  • Look views, engagement events, and add-to-cart events from our storefront widget (technical beacons; not used to identify a shopper by name)
  • A random visit id kept in the browser tab’s session storage (not a cookie), used only to group one visit’s events; it is not linked to any shopper identity

2.3 Order attribution data (Shopify / platforms that send order webhooks)

For orders the platform sends us through order webhooks, we store the fields below and record whether the order came through a look (an Etlala full-look coupon ETLALA…, cart lines added from a look, or multiple products from the same published look). Orders not linked to a look are kept with the attribution tier “none”.

  • Order id
  • Order total and currency
  • Discount / coupon codes present on the order
  • Product ids on the order (line items)
  • Attribution tier and linked look (gallery) id
  • Order timestamp

We do not request or store shopper name, email, phone, or shipping/billing address for Etlala analytics. Those protected customer fields are not selected in our Shopify Protected Customer Data access.

Shopify may still deliver order webhooks that contain additional fields; we do not use or retain name, email, phone, or address for our product. Our handlers acknowledge customer GDPR webhooks (customers/data_request, customers/redact) with no shopper profiles to export or erase. On shop/redact, we delete the merchant’s Etlala account data (looks, images, tokens, and look analytics).

2.4 Website visitors

  • Technical logs (IP, user agent, timestamps) for security and reliability
  • Essential cookies for site operation; optional analytics if enabled on the marketing site

3. Purposes of processing

We use personal data only for:

  1. App functionality — install, authenticate, sync catalog / metaobjects, render looks, discounts
  2. Analytics for merchants — measure look views, carts, and look-attributed orders / revenue inside the Etlala dashboard
  3. Security, abuse prevention, and support
  4. Account emails to the store owner — welcome and setup help, trial reminders, a note when Etlala brings the first order, and one feedback question after uninstall
  5. Service communications — material changes to the app, security, or this policy

We do not sell personal data. We do not use shopper data for third-party advertising. We do not make automated decisions about shoppers that have legal or similarly significant effects.

4. How we tell merchants what we process

We disclose data use in:

  • This Privacy Policy (linked from our website and app listings)
  • Marketplace listing descriptions (Shopify / Salla / Zid)
  • In-app product copy where relevant (for example Analytics describes attributed look orders)

Merchants remain responsible for their own storefront privacy notices to shoppers under applicable law.

5. Legal bases / merchant agreements

Processing is based on:

  • Performance of our contract with the merchant (Terms of Service)
  • Merchant instructions as the store operator
  • Legitimate interests in securing and improving the service
  • Legal obligations when applicable

Merchants agree to our Terms of Service and this Privacy Policy by installing or using Etlala.

6. Sharing

We may share data only with:

  • Commerce platforms (Shopify, Salla, Zid) as required to operate the integration
  • Infrastructure providers (hosting, database, file storage, email delivery) under confidentiality / DPA-style terms
  • AI provider (Google Gemini) to create look images and text from the product photos and details a merchant chooses; no shopper data is sent
  • Authorities when legally required

We do not sell or rent merchant or customer personal data.

7. Retention

  • Active install: keep merchant and attribution data as needed to provide Analytics and app features
  • After uninstall on Shopify: we stop collecting store data and delete the merchant’s Etlala data (looks, images, coupons, analytics, owner contact details, and email history) when Shopify sends the shop/redact webhook, 48 hours after uninstall
  • After uninstall on Salla / Zid: data is kept for 30 days so a reinstall can restore the merchant’s looks, then deleted permanently
  • Records we must keep for legal, security, or billing disputes are retained only as long as required
  • Backups may persist for a limited cycle, then expire

Order attribution records are retained for the merchant’s analytics while the app is installed, then deleted on the same schedule.

8. Security

  • Encryption in transit (HTTPS / TLS)
  • Encryption at rest via our hosting and database providers
  • Access controls for production systems

No method of transmission or storage is 100% secure; we apply reasonable technical and organizational measures.

9. Consent, opt-outs, and “do not sell”

  • Etlala does not sell personal data; “do not sell” opt-outs are not applicable to our processing model
  • We do not run shopper-facing marketing consent UIs; merchants own shopper consent on their storefronts
  • We do not perform shopper automated decision-making with legal / significant effects; related opt-outs are not applicable

10. Rights and requests

Merchants (and, where law requires, individuals) may request access, correction, or deletion by emailing support@intalaq.com. We will respond within a reasonable period and as required by applicable law and platform rules (including Shopify GDPR webhooks: customer data request, customer redact, shop redact).

Uninstalling the app from the store stops new processing; contact us if you need confirmed deletion sooner.

11. Children

Etlala is a B2B merchant tool and is not directed at children.

12. International transfers

Data may be processed in regions where our providers operate. We use reputable providers and contractual protections appropriate to the transfer.

13. Changes

We will post updates on this page with a new “Last updated” date. Continued use after changes constitutes acceptance of the updated policy where permitted by law.

14. Contact

INTALAQ — Etlala