1. Who is responsible for your data
The data controller and its privacy contact are published on this page with the seller identity. Where this page shows no seller identity, Ecomfella is an anonymous product brand in technical pre-launch and no registered company, public owner identity or formal data-controller registration is claimed.
Privacy questions can be sent to ecomfella@outlook.com in either state, or submitted through the authenticated privacy workflow in your account.
2. Scope
This policy covers the public website, account authentication, Buyer Portal, checkout, payments, store licensing, downloads, support and related administrative records.
3. Browsing and technical data
The platform may process request time, route, security headers, coarse network information and diagnostic events needed for hosting, availability, abuse prevention and troubleshooting.
Ecomfella measures its own funnel without third-party cookies: page views, clicks, checkout starts, orders and confirmed payments are counted per page and, while two versions of a page are compared, per version. A one-day salted hash of the network origin and browser signature separates visitors within a day and is worthless afterwards; no name, e-mail, IP address or persistent identifier is stored for this purpose. When you arrive through a tagged link, the campaign labels in that link (such as the network and campaign name) are kept for thirty days and attached to those counts, so Ecomfella knows which advertising works; the labels identify nobody. Where two versions of a page are compared, a first-party cookie remembers which version you were shown so the page does not change between visits; it contains only the letter of the version.
Advertising measurement with the Meta Pixel and Meta's Conversions API, and with the TikTok Pixel and TikTok's Events API, is switched off unless the site says otherwise on the cookie page, and even then it runs only after you agree to marketing cookies. With your agreement the networks that are switched on receive page views, checkout starts and, for a confirmed purchase, the order value and a hashed e-mail address, so the advert that brought you here can be credited. Declining changes nothing about the theme, the price or your account.
4. Account and authentication data
Account data includes email address, authentication identifiers, confirmation and recovery state, session security information and account status. Passwords are handled by the authentication provider and are not displayed to Ecomfella staff.
A mobile number is asked for when you create an account or place your first order. It is used only for important messages about your order and your access, such as a payment that has not arrived or a delivery that needs your attention, by e-mail, WhatsApp or SMS from Ecomfella. It is never used for marketing and never shared with advertisers. You can change it on the Account page.
5. Orders and payment data
Order records include package, store-seat count, price, currency, discounts, payment route and status. Bank-transfer records may include the account-safe payment reference, amount, review status and evidence needed to match a transfer without exposing unnecessary financial information.
Crypto payment records include the receiving address Ecomfella derived for the order, the payment-link status, the asset and network used, and the on-chain transaction references. Ecomfella does not receive wallet private keys or account credentials.
6. Shopify store data
Ecomfella may process a canonical .myshopify.com domain, Shopify shop identifier, theme/release metadata and access evidence needed for the licensed service. Store access is used only after the customer grants it and within the agreed scope.
7. Support and WhatsApp
Support records contain the subject, message, status and staff handling history. If you choose WhatsApp, Meta and the telecommunications providers process that communication under their own terms. Do not send secrets or unnecessary personal data.
8. Legal and security evidence
Ecomfella stores policy versions, consent choices, order confirmations, invoices, refund decisions, entitlement events, download events and security/audit records to perform contracts, meet legal obligations, resolve disputes and protect the service.
9. Purposes
Data is used to provide accounts and delivery, calculate orders, review payment, issue licences and invoices, operate support, handle refunds and privacy requests, prevent abuse, maintain security and comply with law.
10. Legal bases
Depending on the person and applicable law, processing may rely on contract performance, steps requested before a contract, legal obligations, legitimate interests in secure and auditable operations, or consent where consent is the appropriate basis. Marketing consent is not inferred from a purchase or support request.
11. Providers
The deployed platform uses Vercel for application hosting, Supabase for authentication, database and private storage, and Resend for transactional authentication email. Meta is involved in two ways only: when a customer chooses WhatsApp as a support channel, and, where advertising measurement is switched on and you have agreed to marketing cookies, as the recipient of pixel and Conversions API events described in section 3. TikTok is involved only in that second way, as the recipient of pixel and Events API events, under the same switch and the same consent. The verified seller and bank destination will be completed before payment is enabled.
12. Retention
Account and support records are kept while needed for the service and a proportionate follow-up period. Test-order, acceptance, licence, download, refund and security evidence is retained to keep the system auditable and prevent abuse. Exact production retention rules will be reviewed before commercial sales open.
13. Provider locations
Technology providers may process data in several countries. Ecomfella uses the providers and security controls described here. No legally reviewed international-transfer framework is claimed until one is published on this page with the seller identity.
14. Security
Controls include server-side authorisation, tenant isolation, row-level security, encrypted provider connections, private storage, append-only audit records, restricted secrets and fail-closed sales and delivery gates. No system can guarantee absolute security.
15. Your requests and rights
From Account privacy you can request access, correction, deletion, restriction, portability or objection. Available rights depend on applicable law. Sensitive requests require identity verification. Ecomfella will explain any lawful limitation or retained record.
16. Account deletion
Deleting access credentials does not automatically erase invoices, payment ledgers, acceptance evidence or other records that must be retained for legal, tax, security or dispute purposes. Data not subject to a valid retention need is deleted or de-identified where appropriate.
17. Children
Ecomfella is a business product and is not directed to children. A purchaser must have legal capacity to contract. Contact the privacy route if personal data of a child may have been provided improperly.
18. Complaints and changes
Raise a privacy concern through the authenticated workflow or verified privacy contact. The version attached to an order remains preserved. New versions state their effective date and do not silently rewrite earlier acceptance evidence.
Seller identity
Help requests and theme faults go through Support: your Buyer Portal, email or WhatsApp, one inbox.
- Trading name
- Ecomfella
- Registered seller
- BMB SYNCED HOLDING L.L.C
- Limited liability company
- Dubai, United Arab Emirates
- ecomfella@outlook.com
- Governing law
- The law of the United Arab Emirates as applied in Dubai.
- Disputes
- Raise a complaint with Ecomfella support at ecomfella@outlook.com first. If it is not resolved, the courts of Dubai, United Arab Emirates have jurisdiction, without affecting any mandatory consumer right to bring a claim locally.
- Data controller
- BMB SYNCED HOLDING L.L.C
- Privacy contact
- ecomfella@outlook.com
- Website
- ecomfella.com