Privacy Policy

1. Introduction

SpareSouq ("we," "our," or "us") operates a multi-vendor marketplace for automotive parts and services in the Kingdom of Bahrain. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Platform"). By using the Platform, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Phone number — used for account creation and verification via OTP (one-time password)
• Full name — displayed on your profile and associated with orders
• Delivery address — required for order fulfillment and shipping within Bahrain
• Business information — for sellers and workshops: commercial registration number, shop name, and location
• Profile photo — optional avatar image

2.2 Information Collected Automatically

• Order history — records of purchases, sales, and transaction details
• Device tokens — for push notification delivery via Firebase Cloud Messaging (FCM)
• Device information — device type, operating system, and app version
• Usage data — search queries, browsing patterns, and feature interactions

3. How We Use Your Information

• To create and manage your account and verify your identity
• To process orders, payments, and facilitate delivery of auto parts
• To enable communication between buyers, sellers, and workshops
• To send push notifications about order updates, messages, and promotions
• To improve our Platform, develop new features, and enhance user experience
• To prevent fraud, enforce our terms, and comply with legal obligations
• To provide customer support and respond to inquiries

4. Third-Party Services

We use the following third-party services to operate the Platform:

• Supabase — cloud database and authentication infrastructure. Your data is stored securely with row-level security policies and encrypted at rest.
• Tap Payments — payment processing for card transactions and BenefitPay. We do not store your full card details; payment data is handled directly by Tap Payments in compliance with PCI DSS standards.
• Twilio — SMS delivery for phone number verification (OTP codes).
• Firebase Cloud Messaging (FCM) — push notification delivery to your device.

5. Data Storage & Security

Your personal data is stored on secure servers with encryption at rest and in transit. We implement row-level security policies to ensure that users can only access their own data. Seller documents and private files are stored in private storage buckets with access-controlled policies. While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure.

6. Data Sharing

We do not sell your personal information. We may share your information in the following circumstances:

• With sellers and buyers — limited order and delivery information necessary to fulfill transactions
• With service providers — third-party services listed above, solely for Platform operations
• For legal compliance — when required by law, regulation, or legal process in the Kingdom of Bahrain

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate personal data
• Request deletion of your account and associated data (subject to legal retention requirements)
• Opt out of promotional push notifications
• Request a copy of your data in a portable format

To exercise any of these rights, please contact us at the address below.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. Order and transaction records are retained in accordance with applicable Bahraini commercial law. When you request account deletion, we will deactivate your account and remove personal data within 30 days, except where retention is required by law.

9. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: