Privacy Policy

1Introduction and Scope

2Data Controller Information

3Types of Personal Data We Collect

4How We Collect Your Personal Data

• Direct Interaction: When you create an account, list items, or contact us.
• Automated Technologies: As you move through the site or app.
• Third Parties: From verification services, social media logins (e.g., Google, Facebook), and analytics providers.

5Legal Basis for Processing Personal Data

We process data under the following GDPR bases:

• Contractual Necessity: To provide the services you requested.
• Legal Obligation: To comply with tax, AML, and safety laws.
• Legitimate Interests: For fraud prevention, security, and Platform improvement.
• Consent: For marketing and processing sensitive data (e.g., biometrics).

6How We Use Your Personal Data

• Verification: To ensure the safety of our marketplace.
• Transactions: To facilitate buying and selling of items.
• Service Delivery: To manage your account and profile.
• Support: To resolve disputes and respond to inquiries.
• Security: To detect and prevent fraudulent or illegal activity.
• Improvement: To analyze usage patterns and optimize user experience.

7Data Sharing and Disclosure

We share information with:

• Other Users: Only as necessary to facilitate a transaction (e.g., contact info for collection).
• Service Providers: Hosting, payment processing, ID verification, and cloud storage providers.
• Law Enforcement: When required by law or to protect our legal rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets.

8International Data Transfers

Your data may be transferred to and stored in countries outside the European Economic Area (EEA) or UK. In such cases, we ensure adequate protection through Standard Contractual Clauses (SCCs) or other approved mechanisms.

9Data Retention and Storage

10Your Privacy Rights Under GDPR

Under the GDPR, you have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data ("Right to be Forgotten").
• Restriction: Limit how we process your data.
• Portability: Request transfer of data to another service.
• Object: Object to processing based on legitimate interests.
• Withdraw Consent: At any time for consent-based processing.

To exercise these rights, contact dpo@yallasir.com.

11Cookies and Tracking Technologies

We use cookies to:

• Remember your login and preferences.
• Analyze traffic via Google Analytics.
• Provide targeted advertising (with consent).

You can manage cookie preferences in your browser settings.

12Security Measures

We implement technical and organizational measures including:

• End-to-end encryption for sensitive data.
• Multi-factor authentication (MFA) options.
• Regular security audits and vulnerability scanning.

13Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, as required by GDPR Article 33. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

14Children's Privacy

YallahSir is not intended for individuals under the age of 18. We do not knowingly collect data from children. If we become aware that we have collected personal data from a person under 18 without verification of parental consent, we will take steps to remove that information from our servers promptly.

15Marketing Communications and Opt-Out

We may send you marketing communications if you have opted in to receive them. You can opt out at any time by:

• Clicking the "unsubscribe" link in any marketing email.
• Contacting us at privacy@yallasir.com.
• Updating your notification preferences in the app settings.

16Third-Party Services and Links

Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of every website you visit. Third-party services we use include payment processors, analytics providers, and cloud storage services, each governed by their own privacy policies.

17Changes to This Privacy Policy

We may update this policy periodically. We will notify you of material changes via email or a prominent notice on the Platform. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of our Platform after any changes constitutes your acceptance of the new Privacy Policy.

18Contact Information and Data Protection Officer