Privacy Policy

The party responsible for processing your personal data (the controller) is [Company legal name], a company registered in the Syrian Arab Republic under commercial register number [Commercial register number], with its address at [Address]. Privacy contact: ibra.m@hotmail.co.uk · +905451045050.

• Account data: your name, email address, phone number and password (stored only after it has been run through a secure hashing algorithm, so nobody, including us, can read it), your profile photo if you add one, and preferences such as language and city.
• Listings: title, description, price, category, location (governorate or city), photos, and the contact method you choose to show. Published ads are public and anyone can see them, including your phone number if you choose to show it.
• Messages: the content of your conversations with other users on the platform, and when they were sent.
• Verification documents (optional): if you ask to verify your account, we collect a photo of your identity card or passport and a selfie. These images are kept in private storage that is not publicly accessible, and only staff authorised to review verification requests can see them.
• Reports and support: the content of reports you send or that are sent about you, and your messages with our support team.
• Technical data: IP address, device and browser type, sign-in times, pages requested, error logs and performance measurements. We use them to protect the platform, prevent abuse and limit repeated attempts (rate limiting), and to run the service and keep it fast.
• Payment data (when payments launch): the amount, reference and status of each transaction. Payments are processed by the payment provider; we do not store your mobile-wallet PIN or card details.

• We only use cookies that are strictly necessary for your session, to keep you signed in and protect your account. We do not use advertising or tracking cookies, and we do not let third parties track you through our platform.
• Your browser stores some preferences locally, such as language, theme, currency and search history, to make the site easier to use. This data stays on your device, and you can clear it in your browser settings.

• Providing the service: creating your account, publishing your ads, letting users contact each other, and sending essential messages such as verification codes and password resets. Basis: performing our agreement with you (the Terms of Use) and the consent you give when you register.
• Security and fraud prevention: reviewing ads, handling reports, limiting repeated attempts, and detecting spam or fraudulent accounts and messages. Basis: our legitimate interest and our users’ interest in a safe platform, and our legal obligations.
• Optional verification: checking your identity to give your account a “Verified” badge. Basis: your explicit consent, which you can withdraw at any time by asking us to delete your documents.
• Legal obligations: keeping certain records and responding to requests from the competent judicial and official authorities under Syrian law.
• Improving the service: measuring performance, fixing faults and understanding usage in aggregate. Basis: our legitimate interest.
• Marketing messages: we only send them with your consent, and you can unsubscribe at any time.

We do not sell your personal data, and we do not use it for purposes not listed here without your consent. When you create an account you agree to this policy; you can withdraw your consent at any time by deleting your account, without affecting the lawfulness of processing carried out before that.

• Account data: for as long as your account exists; deleted when the account is deleted.
• Listings: until you delete them or your account is deleted. A deleted ad disappears from public view immediately and is erased for good when the account is deleted.
• Messages: after your account is deleted they remain with the other person in the conversation, shown as “Deleted user”.
• Verification documents: deleted within 30 days after the verification decision (approved or rejected); after that we keep only the outcome and its date.
• Security logs (such as IP addresses and sign-in attempts): 90 days.
• Reports and support messages: up to one year after the case is closed.
• Payment records (when payments launch): for the period required by Syrian accounting and tax law.
• Backups: deleted data may remain in backups for up to 14 days before being overwritten automatically.

We may keep specific data for longer if a competent judicial or official authority requires it, or if it is needed to resolve an ongoing dispute or deal with a fraud report.

We only share your data as far as necessary, and only with:

• Other users: they see your ads, your display name, the contact method you choose to show, and the messages you send them.
• Hosting provider: which runs our servers, database and backups.
• Email provider: to send verification, password-reset and notification emails.
• Bot check (Cloudflare Turnstile): receives your IP address and technical details of your browser when you sign up, sign in, post or report, to stop automated accounts and spam.
• Browser push service (only if you turn on notifications on a device): notifications travel through your browser maker’s push service (such as Google, Mozilla or Apple), encrypted so that service cannot read their content.
• Payment provider (when payments launch): to process payments for paid services.
• Competent authorities: where Syrian law requires it, on a valid judicial or official request, or to protect someone’s life or safety.
• If the platform changes hands: if the platform is sold or the company merges, the data passes to the new operator, which must honour this policy, and we will tell you in advance.

We require our service providers to process data only on our instructions and only to provide the service, and to protect it with appropriate security measures.

Our servers, or those of some service providers (such as hosting and email), may be located outside the Syrian Arab Republic, which means your data may be transferred to and stored in other countries. We only do this as far as needed to provide the service, with providers that give appropriate protection to data, and under the conditions set by Syrian law. By agreeing to this policy, you consent to this transfer.

• Access: to know whether we process your data and to get a copy of it.
• Correction: to correct or complete inaccurate data. You can edit most of your profile yourself in your settings.
• Deletion: to delete your account and data, except what the law requires us to keep.
• Export: to get a copy of your data in a common, machine-readable format.
• Withdrawing consent and objecting: to withdraw your consent at any time, to object to processing based on our legitimate interest, and to stop marketing messages.
• Complaint: to complain to the competent official data-protection authority if you believe we have not respected your rights.

• Connections to the platform are encrypted with HTTPS.
• Passwords are stored as salted hashes made with a secure algorithm (scrypt, or bcrypt for older accounts) and never as readable text.
• Identity documents are kept in private storage that is not publicly accessible, and only authorised moderators can access them.
• Access to data is limited to those who need it for their work, and repeated attempts are limited to protect accounts from password guessing.
• Regular backups protect data against loss.
• No system is completely secure; if a security breach affects your data, we will inform you and the competent authorities as the law requires.

The platform is for people aged 18 and over, and we do not knowingly collect data from anyone younger. If you know that a minor has created an account, email ibra.m@hotmail.co.uk and we will delete it.

We may update this policy from time to time; the date of the latest update is shown at the top of this page. We will tell you about any significant change through a notice on the platform or by email before it takes effect, and if a change needs your fresh consent, we will ask for it.

For any question or request about your personal data: ibra.m@hotmail.co.uk · +905451045050 · [Company legal name], [Address]. You can also use our contact page.