Privacy Policy

1. Scope and controller

This Policy applies when Souqly processes personal data through its Bahrain and India marketplace websites and related support operations. Souqly Marketplace is the operator and controller responsible for the Souqly service. Sellers and buyers may independently control information they receive from each other; their handling is not governed by this Policy.

This Policy is designed with the Bahrain Personal Data Protection Law No. 30 of 2018 and India’s Digital Personal Data Protection framework in mind, as applicable. Legal requirements and commencement dates may differ, and mandatory local law prevails.

2. Data we collect

• Account data: name, username, email, phone, city, profile photo, biography, verification status, and policy acceptance.
• Marketplace content: listings, property details, photos, favorites, saved searches, offers, reviews, reports, and moderation records.
• Communications: messages and uploaded chat images, support requests, and notification preferences.
• Security and technical data: IP address, device/browser information, session records, timestamps, authentication events, approximate country selection, audit logs, and fraud signals.
• Derived data: listing views, engagement metrics, approximate reputation summaries, and safety classifications.

Do not place sensitive identity documents, financial credentials, passwords, OTPs, PINs, or recovery codes in listings, chat, reviews, or support messages.

3. Why and how we use data

We process data to create and secure accounts; publish and search listings; enable messaging, offers, reviews, and notifications; localize country and currency; prevent fraud and abuse; moderate content; respond to support; maintain audit and security records; comply with law; and improve reliability and usability.

Depending on applicable law and context, processing is based on performing the service you request, your consent, compliance with legal obligations, protection of users, and legitimate marketplace and security interests that do not improperly override your rights. You may withdraw consent where processing relies on consent, without affecting earlier lawful processing.

4. What becomes public

Your display name, username, profile photo, city or marketplace area, biography, verification indicator, member-since date, active listings, listing location area, seller rating, and reviews may be visible publicly. Listing photos can reveal personal details; check backgrounds, documents, vehicle plates, and reflections before uploading.

Your email, account phone number, exact residential address, password hash, authentication secrets, private reports, and private messages are not intentionally public. A verified phone number is shown only when you enable phone visibility and phone contact for the relevant listing.

5. When data is shared

We may share the minimum necessary data with service providers that host, secure, deliver email/SMS, store media, measure service health, or support Souqly under appropriate obligations; with another user when you choose to publish or send it; during a lawful corporate transaction; and with courts, regulators, law enforcement, or rights holders where legally required or reasonably necessary to protect rights and safety.

We do not state that we sell personal data. If that practice changes, we will update this Policy and provide choices required by law. Service providers or infrastructure may process data outside your country; where required, we use lawful transfer safeguards.

6. Retention

We keep account and marketplace data while your account is active and as needed to provide the service. After deletion, we delete or de-identify data that is no longer needed, while retaining limited records where reasonably necessary for fraud prevention, dispute resolution, safety, accounting, enforcement, backups, or legal obligations. Retention depends on data type and risk rather than one period for every record.

Public listings are removed or deactivated according to their lifecycle. Messages, reports, moderation decisions, and transaction-related records may be retained longer where necessary to address abuse or disputes.

7. Security and your responsibilities

We use access controls, password hashing, session management, verification, monitoring, and other organizational and technical safeguards appropriate to the service. No internet service can promise absolute security.

You must keep your password, phone, email, OTPs, PINs, recovery codes, and devices secure. If you voluntarily give a secret to another person, Souqly may be unable to reverse their actions. This does not remove Souqly’s responsibility for a breach caused by its own failure to meet applicable security duties. Report suspected compromise immediately and change affected credentials.

8. Your choices and rights

Subject to applicable law, you may request access to or a summary of your data; correction or updating; deletion/erasure; withdrawal of consent; restriction or objection where available; information about processing; and grievance handling. You can edit many profile fields, notification choices, sessions, blocked users, and account deletion from Settings.

We may verify your identity before completing a request and may retain information where law permits or requires. Authorized representatives must provide proof of authority.

India users can review the official Digital Personal Data Protection Act and Rules published by MeitY.

9. Children

Souqly is not intended for children who cannot lawfully consent to or enter marketplace transactions. Do not create an account for a child or submit a child’s personal data without legally valid authority. Contact us if you believe a child’s data was submitted improperly.

10. Updates, requests, and complaints

We may update this Policy as services or laws change. We will update the version and provide additional notice or consent where required.

Send privacy requests, complaints, or security concerns to support@market.local. Include the email or phone associated with your account, but never include your password, OTP, PIN, or banking credentials.