Privacy policy

Last updated: 5 July 2026

This Privacy Policy explains how Halalmi (“Halalmi,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal data when you visit or use halalmi.de, create an account, buy products, sell products, apply to become a seller, contact us, subscribe to newsletters, or otherwise interact with our online marketplace.

Halalmi is an online marketplace that enables customers to discover and purchase halal products and enables independent sellers to offer products through our platform.

1. Controller and contact details

The controller responsible for processing your personal data is:

Halalmi GmbH, Address: Rathausmarkt 1, Hamburg, Germany Email: mail@halalmi.de Order support email: bestellungen@halalmi.de Telephone: +49 162 6271709

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data processed through:

halalmi.de, customer accounts, checkout, order management, customer support, seller/vendor registration, seller dashboards, newsletters, call request forms, contact forms, wishlists, comparison lists, product reviews, product questions, promotions, and related marketplace services.

This Privacy Policy does not apply to websites, apps, services, or payment pages operated by third parties that have their own privacy policies. When you leave our website or use a third-party service, that third party’s privacy policy may apply.

3. Personal data we collect

Depending on how you use Halalmi, we may collect the following categories of personal data.

3.1 Account and profile data

When you create or manage an account, we may collect:

name, email address, phone number, password in protected form, birthday if provided, billing address, shipping address, account preferences, language preference, currency preference, newsletter preferences, wishlist data, comparison-list data, saved products, order history, returns, refunds, customer notes, and account status.

3.2 Order and transaction data

When you place an order, we may collect:

products ordered, quantities, prices, discounts, voucher or gift certificate details, delivery address, billing address, payment status, invoice information, tax-related information, delivery method, order status, shipment tracking, return requests, refund requests, complaints, and customer service correspondence.

We do not intentionally store full payment card numbers unless this is necessary and lawfully handled through a certified payment provider. Payments are generally processed by payment service providers, banks, or other financial service providers.

3.3 Seller and vendor data

If you apply to become a seller or operate a seller account, we may collect:

business name, legal name, contact person name, business address, email address, phone number, tax number, VAT ID, business registration information, bank or payout information, identity or verification information, seller profile information, product listings, halal certification or product compliance information where provided, order fulfillment information, customer service messages, seller performance data, payout history, invoices, commission records, and communications with us.

We may also process seller-related data for verification, fraud prevention, compliance, tax, marketplace quality, payment, dispute handling, and seller support.

3.4 Communications and support data

When you contact us or request a call, we may collect:

your name, email address, phone number, convenient contact time, message content, order number, attachments, support history, call notes, and any other information you choose to provide.

3.5 Newsletter and marketing data

When you subscribe to newsletters or marketing messages, we may collect:

email address, subscription preferences, consent records, unsubscribe records, email delivery data, and, where enabled, open/click information.

We may use a third-party email service provider such as Mailchimp to send newsletters. If we do so, subscriber data may be processed by that provider on our behalf.

3.6 Technical, usage, and device data

When you visit or use our website, we may automatically collect:

IP address, device type, browser type, operating system, language settings, referring URL, pages viewed, products viewed, search terms, dates and times of visits, session identifiers, cookie identifiers, log files, approximate location derived from IP address, cart activity, checkout activity, security logs, and error reports.

3.7 Reviews, ratings, and public content

If you submit a product review, seller review, product question, comment, or other public content, we may process:

display name, review content, rating, product details, seller details, images or attachments you upload, date of posting, and moderation status.

Public content may be visible to other users.

3.8 Sensitive data and halal-related preferences

Halalmi does not require you to provide information about your religion, beliefs, health, or other special-category data.

Because Halalmi focuses on halal products, your purchases, searches, wishlists, or preferences may indirectly suggest dietary, lifestyle, cultural, or religious preferences. We process such data only to provide the marketplace services you request, such as product discovery, checkout, order fulfillment, customer support, fraud prevention, and account features. We do not ask you to declare your religion, and we do not use your order history to determine or profile your religious beliefs.

Please do not include sensitive personal data in free-text fields, reviews, seller messages, or support messages unless it is necessary for your request.

4. Sources of personal data

We collect personal data from:

you directly, such as when you register, order, apply as a seller, contact us, or subscribe; your device and browser when you use our website; sellers when they process or update your orders; payment, delivery, fraud-prevention, and technical service providers; public registers or official sources where needed for seller verification; and other users where they interact with your public content or seller profile.

5. Purposes and legal bases

We process personal data only where we have a legal basis under applicable data protection law.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that happened before withdrawal.

6. Marketplace sellers and order data

Halalmi operates as a marketplace. When you order products sold by an independent seller, we share the personal data necessary for that seller to fulfill and support your order. This may include:

name, delivery address, contact details, ordered products, order number, delivery method, order status, messages related to the order, return/refund information, and other information needed to complete the transaction.

Sellers may use your data only for permitted purposes, such as order fulfillment, customer service, returns, refunds, legal compliance, and product-safety obligations. Sellers are not permitted to use your order data for unrelated marketing or to sell your data.

Depending on the circumstances, sellers may act as independent controllers for their own legal obligations and fulfillment activities. Their own privacy notices may apply where they independently process your data.

7. Who we share personal data with

We may share personal data with the following categories of recipients where necessary and lawful:

independent sellers whose products you order; payment service providers, banks, and fraud-prevention providers; shipping, courier, logistics, and delivery providers; hosting, cloud, database, security, and IT service providers; email, newsletter, and communication providers; customer support tools; analytics and cookie providers where enabled; accountants, tax advisors, auditors, lawyers, insurers, and professional advisors; public authorities, courts, regulators, law enforcement, or tax authorities where required; buyers or users where you publish public content; business partners involved in promotions, only where lawful; and potential successors, buyers, or advisors in the event of a business transfer, merger, restructuring, or sale.

We do not sell personal data.

8. Payments

Payments may be processed by external payment service providers. Depending on the payment method selected, payment providers may process:

name, billing address, email address, payment amount, order number, payment method, transaction ID, risk/fraud data, bank details, card details, wallet details, or other payment information.

Payment providers may act as independent controllers for certain payment and compliance activities. Their own privacy policies may apply.

We receive payment confirmation, payment status, and related transaction data needed to complete your order, handle refunds, prevent fraud, and maintain accounting records.

9. Delivery and logistics

To deliver your order, we may share necessary information with sellers, warehouses, delivery companies, and logistics partners. This may include:

name, delivery address, phone number where required for delivery, email address where required for tracking, order number, package details, delivery instructions, and shipment status.

10. Newsletters and marketing communications

You receive marketing newsletters only where you have subscribed or where another lawful basis applies.

You can unsubscribe at any time by:

using the unsubscribe link in the newsletter, changing newsletter settings in your account where available, or contacting us at mail@halalmi.de.

Even if you unsubscribe from marketing messages, you may still receive service messages, such as order confirmations, password reset emails, delivery updates, seller communications related to your order, security notices, and legal notices.

If we use an email marketing provider such as Mailchimp, your email address and newsletter-related data may be processed by that provider to send and manage newsletters. If newsletter data is transferred outside the European Economic Area, we use appropriate safeguards as described in Section 15.

11. Cookies and similar technologies

We use cookies and similar technologies such as pixels, tags, local storage, and device identifiers.

11.1 Strictly necessary technologies

These are needed to operate the website, remember your cart, keep you logged in, process checkout, maintain security, prevent fraud, and remember privacy choices. These do not require consent where they are strictly necessary.

11.2 Optional technologies

With your consent where required, we may use optional technologies for:

analytics, performance measurement, personalization, marketing, advertising, retargeting, social media features, and measuring newsletter or campaign performance.

You can manage or withdraw cookie consent through our cookie banner or privacy settings where available. You can also control cookies through your browser settings. If you disable certain cookies, some website features may not work properly.

12. Product recommendations and personalization

We may use your browsing activity, purchases, wishlist, comparison list, cart activity, and account preferences to personalize your experience, such as showing relevant products, remembering preferences, or improving search results.

We do not use personalization to determine your religious beliefs. Where personalization requires consent, we will ask for consent.

13. Fraud prevention and platform security

We process personal data to protect customers, sellers, and Halalmi from fraud, spam, abuse, unauthorized access, payment misuse, fake accounts, suspicious orders, and other harmful activity.

This may include reviewing technical logs, order patterns, account activity, payment status, device data, delivery information, and seller activity.

Where necessary, we may restrict accounts, cancel suspicious transactions, require additional verification, or report unlawful activity to relevant authorities.

14. Reviews, ratings, and public areas

If you post reviews, ratings, questions, comments, seller profile content, product listings, images, or other content intended for publication, that content may be visible to other users.

Do not post personal data about yourself or others unless you want it to be public and have the right to share it. We may moderate, remove, or restrict content that violates our terms, applicable law, or platform rules.

15. International transfers

We aim to process personal data within the European Economic Area where possible. Some service providers may process personal data in countries outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, we use appropriate safeguards, such as:

an adequacy decision by the European Commission, Standard Contractual Clauses, the EU-U.S. Data Privacy Framework where applicable, supplementary technical and organizational measures, or another lawful transfer mechanism.

You may contact us for more information about relevant safeguards.

16. How long we keep personal data

We keep personal data only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Typical retention periods include:

account data for as long as your account exists and for a reasonable period afterward where needed for legal claims, fraud prevention, or compliance; order, invoice, payment, and accounting data for the statutory retention period required under German commercial and tax law; seller account and payout data for the duration of the seller relationship and applicable statutory retention periods; support communications for as long as needed to resolve the matter and document our response; newsletter data until you unsubscribe or withdraw consent, plus consent/unsubscribe records needed for compliance; cookie consent records for the period needed to prove and manage consent; security logs for a limited period unless longer storage is needed for investigation, fraud prevention, or legal claims; public reviews and content until removed, anonymized, or no longer needed.

When data is no longer needed, we delete, anonymize, or restrict it.

17. Security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These measures may include encryption in transit, access controls, password protection, role-based permissions, logging, backups, monitoring, staff confidentiality, vendor controls, and security reviews.

No online service can guarantee absolute security. You are responsible for keeping your login details confidential and using a strong password.

18. Your rights

Subject to legal conditions, you have the right to:

request access to your personal data; request correction of inaccurate or incomplete data; request deletion of your data; request restriction of processing; object to processing based on legitimate interests; object to direct marketing at any time; request data portability; withdraw consent at any time where processing is based on consent; lodge a complaint with a supervisory authority.

To exercise your rights, contact us at:

mail@halalmi.de

We may need to verify your identity before responding. We will respond within the time required by law.

19. Children and minors

Our marketplace is not intended for children under 16 without the involvement of a parent or legal guardian.

If you are under 16, you should use Halalmi only with permission from a parent or legal guardian. We do not knowingly collect consent-based marketing data from children under 16 without required parental authorization.

If we learn that we have collected personal data from a child unlawfully, we will delete or restrict that data where required.

20. Data you must provide

Some personal data is necessary to use our services. For example, we need your name, email address, delivery address, and payment/order information to process an order. We need seller verification and payout information to operate seller accounts.

If you do not provide required data, we may not be able to create an account, process an order, deliver products, pay sellers, provide support, or comply with legal obligations.

Optional data, such as newsletter consent or certain profile preferences, is not required to place an order unless clearly stated.

21. Automated decision-making

We do not use automated decision-making that produces legal effects concerning you or similarly significantly affects you without human involvement.

We may use automated tools to support fraud prevention, security, spam detection, payment risk review, product recommendations, search ranking, or marketplace quality control. These tools help us identify risks or improve the platform, but important decisions can be reviewed where required by law.

22. Third-party links and social media

Our website may contain links to third-party websites, seller websites, map services, social media pages, payment pages, or other external services.

We are not responsible for the privacy practices of third-party websites or services. Please review their privacy policies before providing personal data.

23. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, our services, our sellers, or our data practices.

The updated version will be posted on halalmi.de with a new “Last updated” date. Where required by law, we will notify you or request consent before material changes take effect.

24. Contact us

For privacy questions, data subject requests, or concerns about how your personal data is handled, contact:

Halalmi GmbH, Rathausmarkt 1, Hamburg, Germany, Email: mail@halalmi.de Telephone: +49 162 6271709