Privacy Policy Your data, handled with care.

Welcome to Sahalat ("we", "our", or "us"). Sahalat operates a digital service marketplace that connects customers with trusted and verified service providers across Bahrain.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our platform. By accessing or using Sahalat, you consent to the practices described in this policy.

We collect information you provide directly, information collected automatically, and data from third-party integrations.

We use the information collected for the following purposes:

• To create and manage your account and authenticate your identity.
• To process service requests and match you with suitable service providers.
• To communicate booking confirmations, status updates, and OTP verifications via email or SMS.
• To display your saved addresses on maps during the booking process.
• To enable vendor bid notifications and order tracking.
• To improve platform performance, detect bugs, and prevent fraud.
• To send service-related communications (we do not send marketing emails without your consent).
• To comply with applicable laws and regulations in Bahrain.

We do not sell, trade, or rent your personal information. We may share your data only in the following limited circumstances:

• With Service Providers (Vendors): When you submit a service request, relevant details (service type, address area, schedule) are shared with matched vendors to allow them to submit bids.
• With Technology Partners: We use trusted third-party services such as Google Maps, Google OAuth, and email delivery providers, each bound by their own privacy policies.
• Legal Compliance: We may disclose information if required by Bahraini law or in response to a valid court order.
• Business Transfers: In the event of a merger or acquisition, your data may be transferred as part of the business assets.

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit
• Bcrypt password hashing (never stored in plain text)
• OTP-based verification for account changes
• Role-based access control on the platform
• Regular security audits and updates
• Secure file storage with restricted access

While we strive to protect your information, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password and to log out after each session.

Sahalat uses cookies and similar tracking technologies to enhance your experience and maintain your session. We use:

• Session Cookies: Required to keep you logged in during your visit.
• Preference Cookies: Remember your language and display preferences.
• Analytics: Anonymous usage data to improve platform performance.

You can configure your browser to refuse cookies, but some features of the platform may not function correctly without them.

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

• Account data is kept for the duration of your account's existence.
• Order and service request history is retained for up to 5 years for dispute resolution and legal compliance.
• OTP and verification tokens are automatically deleted after expiry (typically 10 minutes).
• Upon account deletion request, we will anonymise or delete your personal data within 30 days.

In accordance with applicable data protection laws in Bahrain, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete information in your profile.
• Deletion: Request the deletion of your account and personal data.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain types of data processing.
• Withdraw Consent: Withdraw consent for marketing communications at any time.

To exercise any of these rights, please contact us at info@sahalath.com.

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party services you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by email or by displaying a prominent notice on the platform.

Your continued use of Sahalat after changes are posted constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us: