Privacy Policy

We collect information you give us, information created when you use GMANA, and a small amount of technical information.

• Account detailsYour email address, display name and password when you create an account. Passwords are stored by our authentication provider in hashed form; we never see them in plain text.
• Google sign-inIf you sign in with Google, we receive your name, email address and profile picture from Google. We do not receive your Google password.
• Orders and deliveryThe products you order, order totals, and the delivery details you give us, such as your name, phone number and address.
• PaymentsThe payment method you choose, the amount and whether the payment succeeded. Payments are handled by licensed payment providers such as ABA PayWay and KHQR (Bakong). We do not receive or store your full card or bank account numbers.
• Messages and reviewsMessages you send to merchants through GMANA, and the reviews and ratings you post.
• Saved items and preferencesYour cart, wishlist, language, currency and shipping country.
• Technical informationYour IP address, browser type and the pages you request, which our hosting and security providers record to keep GMANA running and protected.

We use your information to:

• create and secure your account and keep you signed in;
• process your orders, pass them to the merchant who sells the product, and arrange delivery and payment;
• send messages about your account and orders, such as sign-up codes, password resets and order updates;
• answer your questions and help resolve problems between buyers and merchants;
• detect and prevent fraud, abuse and security incidents, and enforce our Terms of Service;
• fix problems and improve how GMANA works; and
• meet our legal, tax and accounting obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

We share personal information only in the following cases:

• MerchantsWhen you place an order, the merchant who sells the product receives what they need to fulfil it: your name, phone number, delivery address, the items you ordered and any messages you send them. Merchants may use this information only to complete your order and answer questions about it.
• Service providersCompanies that help us run GMANA, including Supabase (database and sign-in, hosted in Singapore), Cloudflare (hosting, content delivery and security), Google (sign-in with Google) and our payment providers. They process information on our behalf and only as needed to provide their service.
• Legal reasonsWhen the law, a court order or a government authority requires it, or when it is needed to protect the rights, safety or property of GMANA, our users or others.
• Business changesIf GMANA is part of a merger, acquisition or sale of assets, your information may be transferred as part of that deal. We will tell you before it becomes subject to a different privacy policy.

GMANA uses a small number of cookies and browser storage items that the site needs to work. We do not use advertising or cross-site tracking cookies.

• Sign-in cookiesKeeps you signed in securely as you move between pages and come back later.
• Language cookieRemembers whether you chose English or Khmer.
• Local storageKeeps your display preferences, currency and shipping country in your browser. This information stays on your device.

You can clear cookies and local storage in your browser settings at any time. If you block sign-in cookies, you will not be able to sign in.

GMANA is operated from Cambodia. Our database is hosted in Singapore, and our hosting provider serves the site from data centres around the world. When your information is handled outside Cambodia, we rely on providers that use industry-standard safeguards to protect it.

• We keep your account details for as long as your account is open. If you delete your account, we delete or anonymise those details within 30 days.
• We keep order and payment records for as long as we need them for accounting, tax and dispute purposes, which can continue after your account is closed.
• Server and security logs are kept for a short period and then deleted automatically.

We encrypt information in transit (HTTPS), store passwords only in hashed form, and limit access to personal information to the people who need it for their work. Staff access to our admin tools requires two-step verification.

No system is completely secure. If you think someone has accessed your account, change your password and contact us straight away.

You can ask us to:

• give you a copy of the personal information we hold about you;
• correct information that is inaccurate or out of date;
• delete your account and the personal information linked to it, except records we must keep by law; and
• stop using your information for a purpose you previously agreed to.

To make a request, email us from the address linked to your account. We may need to confirm your identity before acting on it, and we aim to respond within 30 days.

You must be at least 18 years old to create an account and place orders, or use GMANA with the involvement of a parent or guardian. We do not knowingly collect personal information from children without a parent or guardian’s consent. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy as GMANA grows. When we do, we will change the “Last updated” date at the top of this page. If the changes are significant, we will tell you by email or with a notice on the site before they take effect.