Privacy Policyسياسة الخصوصية

01 Who we are

UrPrice (the "Platform", "we", "us", "our") operates a live‑streaming auction and shopping marketplace for the MENA region, delivered through the UrPrice iOS app and the UrPrice seller portal. For the purposes of the PDPL, UrPrice is the data controller of the personal data described in this policy.

02 Scope & consent

This policy applies to everyone who uses UrPrice as a buyer, seller, or visitor. By creating an account, verifying your phone number, and continuing to use the app, you consent to the collection and processing of your personal data as described here. Where the law requires explicit consent — for example to send you marketing messages or to process sensitive data — we ask for it separately, and you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

03 Data we collect

We only collect what we need to run the service. This is the full list.

We do not intentionally collect special‑category (sensitive) data. Please do not share health, religious, or similar information through chat, streams, or support requests.

04 How we use your data

• To create your account, sign you in by SMS one‑time passcode, and keep it secure.
• To run live auctions and Buy‑Now sales, place your bids, and confirm your wins.
• To charge your saved card for winning bids and wallet top‑ups, and to issue tax invoices.
• To arrange delivery and let you and the seller track shipments.
• To personalise your feed, recommendations, and notifications.
• To operate gamification and loyalty features.
• To provide customer support and handle disputes, returns, and refunds.
• To detect, prevent, and investigate fraud, abuse, and violations of our Terms.
• To establish, exercise, or defend legal claims.
• To diagnose faults, measure how the app is used, and improve it.
• To comply with legal, tax (ZATCA), and regulatory obligations in Saudi Arabia.

05 Legal basis for processing

Under the PDPL we rely on one or more of the following legal bases:

• Your consent — for optional processing such as marketing and (where used) precise location.
• Performance of a contract — to deliver the service you asked for: running auctions, taking payment, and shipping orders.
• Legal obligation — to meet tax, e‑commerce, and record‑keeping requirements.
• Legitimate interests — to secure the platform, prevent fraud, investigate reports and enforce our Terms, establish or defend legal claims, and improve the service, balanced against your rights.

06 Who we share your data with

We do not sell your personal data. We share it only with the recipients we need to run UrPrice, and only for the purposes below:

Most of these recipients act as our processors: they handle your data on our instructions, under a contract that limits what they may do with it. Some — such as our professional advisers, the payment gateway for its own regulatory and card‑scheme obligations, the mobile platform push‑notification services, the government address service, and couriers for their customs and record‑keeping duties — act as independent controllers, bound by their own statutory, regulatory, and professional obligations. If you want to know which specific recipient we use for any of the purposes above, ask us at privacy@urprice.sa.

We may also disclose data to sellers you transact with (limited to what they need to fulfil your order), and to courts, regulators, or law enforcement where required by law or to protect our rights and users' safety.

07 Cross‑border transfers

Some of the infrastructure and service providers we rely on are located outside the Kingdom. This means your personal data may be transferred to and processed outside Saudi Arabia. Where we do this, we apply the safeguards required by the PDPL and its transfer regulations — including appropriate contractual protections with the recipients we transfer data to — to keep your data protected to the standard required in the Kingdom. By using UrPrice you acknowledge these transfers.

08 How long we keep your data

We keep personal data only for as long as we need it for the purposes above, or for as long as the law requires:

• Account data — for as long as your account is active. After you delete your account we remove or anonymise your personal data, except where we must keep it by law or retain it on another lawful basis.
• Transaction & tax records — retained for the period required by Saudi tax and commercial law (generally up to several years) even after account deletion.
• SMS passcodes — short‑lived and discarded shortly after verification.
• Usage & session records — retained no longer than we need them for the purposes above.
• Trust & safety evidence and report attachments (e.g. reported content, and any screenshot you attach to a report) — retained for as long as we may need them to investigate the report, enforce our Terms, or establish or defend a legal claim. This can continue after you delete your account.

09 Your rights under the PDPL

Subject to the conditions and exceptions in the law, you have the right to:

• Be informed about how and why we process your data (this policy).
• Access your personal data and obtain a copy.
• Correct inaccurate or incomplete data — you can edit most profile fields in the app.
• Request deletion of your data. You can delete your account from within the app; we then erase or anonymise your data, except records we must keep by law or retain on another lawful basis — including trust & safety evidence and report attachments, as described in the retention section above.
• Withdraw consent at any time for processing that relies on consent.
• Object to or restrict certain processing.
• Request destruction of your data where there is no lawful basis to keep it.

To exercise any of these rights, contact us at privacy@urprice.sa. We will respond within the period required by the PDPL. We may need to verify your identity before acting on a request.

10 Security

We protect your data with encryption in transit and at rest, strict access controls, tokenized card storage (we never hold your full card number), and continuous monitoring. No system is perfectly secure, but we work to protect your information and will notify you and the competent authority of a personal‑data breach where the law requires.

11 Children

UrPrice is not intended for children. You must be at least 18 years old (or the age of legal majority in your country) to hold an account and to bid or buy. We collect your date of birth to enforce this. If we learn that we have collected data from someone under the required age without appropriate consent, we will delete it.

12 Marketing & notifications

We send transactional messages (verification codes, order and shipment updates, payment receipts) as part of the service. We send marketing or promotional messages only where you have agreed to receive them. You can turn off push notifications in your device settings and unsubscribe from marketing at any time; you will still receive essential service messages.

13 Changes to this policy

We may update this policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of UrPrice after an update means you accept the revised policy.

14 Contact & complaints

If you believe we have not handled your data properly, you may lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA), the supervisory authority for the PDPL in the Kingdom of Saudi Arabia. We would appreciate the chance to resolve your concern first — please reach out to us before escalating.