Privacy Policy


Welcome to Sooq Al Thahab (the “Platform”), owned and operated by The Gold Market Platform WLL (“we,” “us,” or “our”). We value your trust and are committed to protecting your personal data. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you download and use our mobile application on Android and iOS devices. It also outlines your rights under Bahrain’s Personal Data Protection Law (PDPL) and other applicable regulations.

By using our platform, you agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use our platform.

Scope

This Privacy Policy applies to all users of The Gold Market Platform in the Kingdom of Bahrain and any other jurisdiction. It outlines our practices regarding the personal data we process, including how we collect, store, use, and disclose such data.

Information We Collect

We may collect personal data from you when you use our website. The personal data we collect includes, but is not limited to:

  1. Personal Identification Information
    • Full name
    • Contact information (email address, phone number)
    • Nationality or other demographic information, as required for compliance with financial regulations in Bahrain
  2. Account Information
    • Username and password
    • Profile picture or avatar (if applicable)
  3. Transaction Information
    • Payment method details, payment transaction IDs, or billing information if you make purchases through the website
    • Transaction history and receipts
  4. Device and Usage Information
    • Device identifiers (e.g., IP address, unique device ID)
    • Operating system and browser type
    • Website usage data, including log-in times, activity, and feature usage
  5. Location Data (if applicable)
    • Approximate or precise location information, if you grant us permission
  6. Communications
    • Information contained in your correspondence with us (e.g., through email or Website support)

We only collect the data that is necessary for fulfilling the purposes outlined in this Privacy Policy.

How We Use Your Information

We may use your personal data for one or more of the following purposes:

  1. To Provide and Maintain Our website
    • Create and manage your account
    • Allow access to core website features
  2. To Process Transactions
    • Facilitate purchases or sales of gold or other related assets
    • Verify payment details and complete transactions
  3. To Improve Our Services
    • Analyze usage to enhance user experience, optimize performance, and develop new features
    • Conduct research to better understand market trends and customer preferences
  4. To Communicate With You
    • Send notifications, updates, and administrative messages
    • Respond to your inquiries and provide customer support
  5. To Ensure Compliance and Security
    • Monitor and detect fraud, illegal activities, and potential security threats
    • Comply with applicable legal obligations, including PDPL and other Bahrain-specific laws
  6. Marketing and Promotional Activities (where applicable and with your consent)
    • Send you promotions, offers, and updates that may be relevant to you
    • Personalize marketing and promotional messages

Legal Basis for Processing

Under Bahrain’s PDPL, we process your personal data only where there is a lawful basis to do so. Depending on the context, this may include:

  • Consent: Where you have given us clear permission to process your personal data for a specific purpose.
  • Contractual Necessity: Where processing is necessary for the performance of a contract with you.
  • Legal Obligation: Where we must comply with a legal or regulatory obligation under Bahraini law or other applicable laws.
  • Legitimate Interests: Where processing is necessary for our legitimate business interests, provided your rights and freedoms do not override these interests

Cookies and Similar Technologies

We may use cookies or similar tracking technologies in the App to:

  • Remember your preferences
  • Monitor App usage patterns
  • Enhance security and prevent fraud

You can control certain tracking mechanisms through your device settings or by adjusting Website permissions. Please note that disabling some tracking technologies may affect your ability to use certain features.

Disclosure of Your Information

We may share your personal data with:

  1. Service Providers and Partners
    • Third parties who perform services on our behalf (e.g., payment processors, hosting providers, analytics providers), subject to appropriate confidentiality and security obligations.
  2. Business Transfers
    • o In connection with a merger, acquisition, or sale of all or a portion of our assets, user data may be transferred as part of the transaction.
  3. Legal and Regulatory Authorities
    • If we believe disclosure is necessary to comply with a legal obligation (e.g., court order, law enforcement request), to protect our rights or the rights of others, or to enforce our Terms of Service.
  4. With Your Consent
    • We may share your personal data for other purposes if you have specifically consented to such disclosure.

Data Retention and Deletion

We retain personal data only as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by Bahraini law and regulations. Once retention is no longer required, we securely delete or anonymize the data in accordance with recognized industry standards and local regulatory requirements.

  1. Requesting Data Deletion

    If you wish to delete your personal data, you may submit a request by contacting us using the details in the “Contact Us” section. Or using the details below:

    • Email: support@sooqalthahab.com
    • Phone: +973 1768 7222
    • Area: Manama Block: 304 Road: 341 Building: 71 Flat: 302
  2. We will make reasonable efforts to accommodate your request unless we are legally obligated or otherwise permitted by law to retain the information. For example, certain transaction records and identification documents may be kept for anti-money laundering (AML) or other regulatory compliance requirements, or for resolving disputes and enforcing our policies.

  3. Legal and Regulatory Obligations
    • We may be required to store some of your data (e.g., purchase history, identification data) for statutory record-keeping, auditing, or security purposes—especially if your transactions are governed by financial regulations.
    • Once these obligations no longer apply, we will securely delete or anonymize any remaining personal data.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of data transmission or storage can be guaranteed as 100% secure. You are responsible for keeping your account credentials confidential.

Your Rights Under Bahrain’s PDPL

Under the PDPL, you have the right to:

  1. Access Your Personal Data
    • Request a copy of the personal data we hold about you.
  2. Rectify Your Personal Data
    • Ask us to update or correct any inaccurate or incomplete information.
  3. Delete Your Personal Data
    • Request that we erase your personal data, where legally permissible.
  4. Object to or Restrict Processing
    • In certain circumstances, object to the processing of your personal data or request that we restrict such processing.
  5. Withdraw Consent
    • Where we rely on your consent to process your personal data, you may withdraw this consent at any time.

To exercise any of these rights or for more information, please contact us at the details provided in the “Contact Us” section below. We will respond within the timeframes required by law.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the Kingdom of Bahrain. Whenever such transfers take place, we ensure that appropriate safeguards are in place to protect your personal data consistent with the requirements of the PDPL and other applicable laws.

Children’s Privacy

Our Website is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have accidentally collected personal data from a minor, please contact us immediately so we can delete that information.

Links to Third-Party Websites or Services

Our Website may contain links to third-party websites or services that are not operated or controlled by us. We are not responsible for the content or privacy practices of those websites or services. We encourage you to review the privacy policies of any third-party websites or services you visit.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or to comply with legal requirements. We will notify you of any material changes by updating the “Effective Date” at the top of this policy or through other appropriate communication channels. Your continued use of the website after the posting of any changes constitutes acceptance of those changes.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, or if you wish to exercise your rights under Bahrain’s PDPL, please contact us at:

  • The Gold Market Platform W.L.L
  • Email: support@sooqalthahab.com
  • Phone: +973 1768 7222

Force Majeure and Security Incidents

  • Reasonable Security Measures: We implement appropriate technical and organizational safeguards to protect your personal data. However, you acknowledge that no method of electronic transmission or storage is completely secure.
  • Events Beyond Our Control: We shall not be held responsible or liable for any breach, unauthorized access, disclosure, alteration, or loss of personal data caused by events beyond our reasonable control (“Force Majeure Events”). Such events include, but are not limited to, natural disasters, government actions or regulations, war, civil unrest, acts of terrorism, insurrection, embargoes, strikes, lockouts or other labor disputes, system malfunctions, power failures, cyber-attacks (including hacking or denial-of-service attacks), or the acts or omissions of third parties.
  • Human Error: While we strive to minimize errors through internal policies and regular training, inadvertent human error may occur. We will take prompt corrective measures upon discovering or being notified of such errors. However, we shall not be liable for damages arising from unintentional or inadvertent human errors if we have taken reasonable precautions and measures in line with applicable law.
  • Notification and Mitigation: In the event of a security incident affecting your personal data, we will notify you and relevant authorities if and as required by applicable law. We will also take reasonable steps to contain and investigate the incident, mitigate potential harm, and implement measures to prevent future incidents.
  • Applicable Laws and Limitations: Nothing in this clause is intended to limit any legal rights you may have under applicable data protection laws. Our liability (if any) for data breaches, security incidents, or force majeure events will be governed by this Privacy Policy and any mandatory provisions of applicable law.