Privacy Policy
Last updated: 30 September 2026
What we collect, why, and where it is stored — under the Saudi Personal Data Protection Law (PDPL).
Who is responsible for your data
The data controller is Esna alyawm Establishment — Unified National Number 7055269158, Riyadh, Saudi Arabia. For any privacy question: esna.platform@gmail.com.
What we collect
Name, email, mobile number, city, request files and photos, messages on the platform, and order and payment records — plus the basic operational data needed to run and protect the site. For makers and suppliers: the commercial registration number, the VAT number, and the IBAN for receiving payouts.
Why we collect it
To run your account, match requests with makers, deliver messages and notifications, process payments and refunds, decide disputes, and protect the platform from abuse. We collect nothing without one of these uses.
Who we share it with
Makers matched to your request see the request and its files. The licensed payment gateway processes payment data on its side — your card numbers never pass through us. We do not sell your data, and we do not share it for marketing.
Where it is stored
Your data is hosted outside Saudi Arabia: the database, files and accounts on Supabase (AWS servers in Mumbai, India), and the site itself on Vercel (servers in the United States). Transfers outside the Kingdom are subject to the Personal Data Protection Law.
How long we keep it
For as long as your account exists. Order and payment records are kept for the periods the law requires, even after an account is deleted.
Your rights
You can ask for a copy of your data, a correction, or deletion of your account by emailing us. Deletion does not cover records the law requires us to keep.
Cookies
We use cookies only to sign you in and to remember your language; the sign-in cookie stays on your device so you do not have to sign in every time. There are no advertising trackers and no third-party analytics.
Security
Access to data is enforced by permissions at the database level itself, and private files open only through short-lived links.
Updates to this policy
If this policy changes, the date at the top is updated. Continuing to use the platform after an update means you have seen it.