Privacy Policy

Introduction

This policy explains how Haraj Jazan collects, uses and protects your personal data, and your rights over it, in line with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

By using the platform you agree to your data being processed as described here.

Data we collect

• Account data: your phone number, name, display name, bio, governorate, and profile photo if you add one.
• What you publish: listings and their photos, comments, messages, ratings, reports and support tickets.
• Payment data: the result and reference of each transaction and the card type and last four digits only. We never receive or store the full card number — card details are entered directly on the payment gateway's page.
• Technical data: device and browser type, sign-in and session history, and your device's notification identifier. To count views we keep an irreversible hash of your IP address, never the address itself.
• We do not collect your location automatically. If you add a map location to a listing, it is shown with that listing. We strip the metadata (EXIF) — including where a photo was taken — from every image you upload.

How we use your data

• To create your account and verify your phone number.
• To publish your listings and comments and show them to other users.
• To let buyers and sellers contact each other.
• To process promotion payments and issue invoices.
• To send notifications about your account, listings and conversations.
• To moderate content, fight fraud and abuse, and keep the platform secure.
• To improve the platform using aggregated statistics that do not identify you.
• To comply with the law and with lawful requests from the competent authorities.

What others can see

• Your public profile: display name, photo, bio, governorate, join date, rating, and your active and sold listings.
• Your phone number is never sent to a visitor who is not signed in and never appears on your public profile. Signed-in users see it only on your listing page, and only if you choose to show it.
• Public comments are visible to everyone. Chat messages are visible only to the two participants; the moderation team may review them when they are reported.

Sharing your data

We do not sell your personal data. We share only what is necessary with:

• The payment gateway, to complete payments.
• The SMS provider, to send your verification code.
• Notification, hosting and e-mail providers acting on our behalf under data-protection obligations.
• The competent government authorities, when there is a lawful request.

Retention and deletion

• We keep your data for as long as your account is active.
• When you delete your account we remove your identifying data — name, phone number, e-mail, photo and bio — immediately, and keep what is needed for security and dispute resolution for no more than thirty days before removing it, unless the law requires a longer period, as it does for tax invoices.
• A conversation may remain readable to its two participants after a listing is deleted, because it may be evidence in a dispute.

Your rights

Under the Personal Data Protection Law you have the right to:

• Know how your data is processed.
• Access your data and obtain a copy of it.
• Ask for your data to be corrected or updated.
• Ask for your data to be destroyed — you can delete your account yourself from "My account".
• Withdraw your consent to processing at any time, without affecting the lawfulness of what came before.

To exercise any of these rights, contact us through "Support" and we will respond within the statutory period.

Security

We use encrypted connections (HTTPS), store verification codes only in hashed form, restrict data access to authorised team members and log every moderation action. No method of transmission or storage is completely secure, however, and we will notify you and the authorities as the law requires if a breach affects your data.

Cookies and local storage

We use local storage in your browser or device to keep you signed in and to remember your preferences, such as language, theme and your listing draft. We do not use cookies for advertising or to track you across other websites.

Children

The platform is not intended for anyone under 18, and we do not knowingly collect their data. If you learn that a child has created an account, contact us and we will delete it.

Changes and contact

We may update this policy; the date of the last update appears at the top of this page, and we will notify you within the platform of any material change.

For any question or request about your personal data, contact us through "Support" in your account or at the e-mail address on the "Contact us" page.