1. Controller and Scope
Sanany Establishment Digital Marketing is the entity responsible for personal data processing within the services it operates. This Privacy Policy applies to the SANANY app, website and related account, listing, messaging, payment and support services.
2. Personal Data We May Collect
- Account data: name, username, phone number, email address if provided, profile photo, bio and account type.
- Verification data: verification codes, verification results and data necessary to complete identity verification through an approved provider where enabled, without retaining data that is not needed for the service.
- Listing data: photos, descriptions, prices, category, item or service attributes, general location where selected by the user, and listing status.
- Messaging and support data: messages, attachments, reports and support communications to the extent needed to provide the service, maintain security and handle complaints.
- Transaction data: service or commission amount, payment status, transaction reference and necessary invoice or transfer information. Full payment-card details are not stored by SANANY when they are entered and processed directly by an independent payment provider.
- Technical and usage data: IP address, device type, operating system, language, login logs, app identifiers, crash and performance data, and security events.
- Location data: an approximate location or a location selected by the user for location-based features. Precise location is used only where a feature requires it and the user is appropriately informed.
3. Sources of Data
We collect information directly from users when they register, post or communicate, and from their use of the Platform. We may also receive limited information from payment, verification, messaging or technical service providers where needed to complete a service or prevent fraud.
4. Purposes of Processing
- Create, verify and manage accounts and login.
- Publish, display, search and manage listings and personalize the experience.
- Enable messaging, notifications, favorites, following, stories and social features where available.
- Calculate commissions, process payments and maintain required transaction and invoice records.
- Prevent fraud and abuse and protect users, accounts and the Platform.
- Handle reports, complaints and support requests.
- Analyze performance, improve the product and fix errors.
- Comply with legal obligations and binding official requests.
- Send necessary service messages and, where legally appropriate, marketing communications subject to available user choices.
5. Legal Basis for Processing
Personal data is processed under the legal basis appropriate to each purpose, which may include providing a service requested by the user, complying with a legal obligation, pursuing legally permitted legitimate interests, and obtaining consent where consent is required. Data will not be used for an incompatible purpose except as permitted by applicable law.
6. Sharing Personal Data
SANANY does not sell users' personal data to advertisers or third parties. We may share the minimum information necessary with service providers that support hosting, messaging, verification, payments, analytics and security, or with government and judicial authorities where there is a valid legal basis or binding request.
Service providers are expected, according to their role and relationship with the Establishment, to follow appropriate confidentiality, security and processing requirements.
7. International Data Transfers
SANANY or its service providers may use technical infrastructure or cloud services that involve processing or transferring data outside the Kingdom. Where this occurs, applicable Saudi requirements for international transfers of personal data and appropriate safeguards will be followed.
8. Retention and Destruction
SANANY retains personal data only for as long as needed for the purposes for which it is processed or for the period required by law. When data is no longer needed, it will be deleted, destroyed or anonymized unless a lawful reason requires or permits longer retention.
9. Information Security
SANANY uses reasonable technical and organizational measures designed to protect personal data from unauthorized access, use, alteration or disclosure. No electronic system can be guaranteed to be completely secure; users should protect their devices and credentials and never share verification codes.
10. Data Subject Rights
Under the Saudi Personal Data Protection Law and its regulations, users may have rights depending on the circumstances, including the right to be informed, access personal data, request a readable copy, request correction, completion or updating, request destruction where the legal conditions are met, and withdraw consent where consent is the basis for processing and withdrawal is legally available.
To exercise a personal-data right, contact info@sanany.com and provide enough information to verify identity and the request without sending unnecessary sensitive data.
12. Notifications and Marketing
SANANY sends necessary service communications such as verification codes, security alerts, listing status, messages and payment updates. Marketing communications are subject to applicable legal requirements and available user opt-out choices.
13. Minors
SANANY does not seek to collect minors' personal data without an appropriate legal basis. If an account is found to be used by a person lacking the required legal capacity without the necessary approval, the account may be restricted until relevant requirements are satisfied.
14. Policy Updates
This Privacy Policy may be updated when services, laws or processing practices change. The latest revision date will be published, and SANANY may provide additional notice where a material change occurs.
15. Contact
For privacy questions and personal-data rights requests: info@sanany.com