Privacy Policy
Last Updated: April 14, 2026
1. Introduction
STAM ZEYAD T ALETAIBI ("Tashaleeh Market", "we", "us", or "our"), a commercial establishment registered in the Kingdom of Saudi Arabia (National Number: 7053214214), operates the Tashaleeh Market mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our App, in compliance with the Saudi Arabia Personal Data Protection Law (PDPL) and applicable regulations.
For questions about this policy, contact us at info@tashaleeh.net.
2. Data We Collect
We collect the following categories of personal data:
Account Information
Full name, email address, phone number, and password (encrypted) when you register an account.
Profile Information
Profile photo and date of birth, provided voluntarily to personalize your experience.
Vendor Verification Documents
If you register as a seller, we collect identification documents (national ID or commercial registration) for verification purposes as required by law.
Transaction Data
Purchase and sale records, order details, payment status, and transaction history. Payment card details are processed securely by our third-party payment provider and are never stored on our servers.
Communications
Messages exchanged between buyers and sellers through the in-app chat system, including text and image attachments.
Device Information
Device type, operating system version, and app version for technical support and compatibility purposes.
Photos and Media
Photos you upload for product listings or your profile, accessed only with your explicit permission.
3. How We Use Your Data
We use your personal data for the following purposes:
- Creating and managing your account
- Verifying seller identity and business credentials
- Processing orders and facilitating transactions between buyers and sellers
- Enabling communication between buyers and sellers via in-app chat
- Sending push notifications about orders, messages, and important updates
- Providing customer support and responding to inquiries
- Improving app performance, features, and user experience
- Complying with legal and regulatory obligations in Saudi Arabia
- Preventing fraud and ensuring platform safety
4. Legal Basis for Processing
Under the Saudi PDPL, we process your data based on:
- Contract Performance: Processing necessary to provide our marketplace services to you.
- Consent: For optional data such as profile photos and push notifications. You may withdraw consent at any time.
- Legal Obligation: Processing required by Saudi commercial and financial regulations, including seller verification.
- Legitimate Interest: Improving our services and preventing fraud, balanced against your privacy rights.
5. Third-Party Sharing
We share your data with the following third parties only as necessary:
Payment Provider
Transaction data is shared with our payment gateway to process payments securely.
Cloud Infrastructure
Your data is hosted on secure servers to ensure reliable service delivery.
Communication Services
We use real-time communication services to enable the in-app chat feature.
We do not sell your personal data to any third party. We do not share your data with advertisers or data brokers.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including: encrypted data transmission (HTTPS/TLS), secure token-based authentication, encrypted password storage, and access controls limiting data access to authorized personnel. While we take reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure.
7. Data Retention
We retain your personal data for the following periods:
- Account data: For as long as your account is active, plus 30 days after deletion request.
- Transaction records: 5 years as required by Saudi commercial law.
- Vendor verification documents: For the duration of the seller account plus the legally required retention period.
- Chat messages: For the duration of the active session and a reasonable period thereafter.
- Device information: Until app uninstallation or account deletion.
8. Your Rights
Under the Saudi PDPL, you have the following rights:
- Right to Access: Request a copy of your personal data we hold.
- Right to Correction: Request correction of inaccurate or incomplete data.
- Right to Deletion: Request deletion of your personal data, subject to legal retention requirements.
- Right to Withdraw Consent: Withdraw consent for optional data processing at any time.
- Right to Data Portability: Request your data in a structured, commonly used format.
- Right to Object: Object to processing based on legitimate interest.
To exercise any of these rights, contact us at info@tashaleeh.net. We will respond within 30 days.
9. Children's Privacy
Our App is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at info@tashaleeh.net and we will promptly delete the information.
10. International Data Transfers
Your data is primarily stored and processed within the Kingdom of Saudi Arabia. If any data transfer outside of Saudi Arabia is required for service delivery, we ensure appropriate safeguards are in place in compliance with the PDPL requirements for cross-border data transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via email. The "Last Updated" date at the top of this policy indicates when it was last revised. Continued use of the App after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: