Privacy Policy

Last updated: April 2026

We are committed to protecting your privacy and personal data. Learn how we collect, use, and safeguard your information.

1. Introduction

Mzadat Company ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy describes how we collect, use, store, share, and protect information when you use our website, mobile applications, and related services (collectively, the "Platform").
By accessing or using the Platform, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with this policy, please do not use the Platform.
This policy is governed by and shall be interpreted in accordance with the laws of the Sultanate of Oman, including the Personal Data Protection Law and any applicable regulations issued by the relevant authorities.

2. Information We Collect

Personal Information: When you register on the Platform, we collect your full legal name, national ID or commercial registration number, mobile phone number, email address, date of birth, physical address, and any other information you provide during the registration or verification process.
Financial Information: We collect payment details, bank account information, transaction records, deposit amounts, bid history, and invoice details necessary to process your auction participation and purchases.
Device and Usage Data: We automatically collect technical data such as your IP address, browser type, operating system, device identifiers, pages visited, time spent on pages, click patterns, and referral URLs when you interact with the Platform.
Communication Data: We may collect and store records of your communications with us, including support tickets, emails, phone calls, and chat messages for quality assurance and dispute resolution purposes.
Verification Documents: We may request and store copies of identification documents, proof of address, commercial licenses, and other documents necessary for identity verification and regulatory compliance.

3. How We Use Your Information

To create and manage your account, verify your identity, and authenticate your access to the Platform.
To facilitate auction participation, process bids, manage deposits, generate invoices, and complete purchase transactions.
To communicate with you regarding your account, auctions you are participating in, auction results, payment confirmations, and other service-related notifications.
To detect, prevent, and investigate fraud, bid manipulation, unauthorized access, and other potentially illegal or harmful activities on the Platform.
To improve and optimize the Platform, analyze usage trends, develop new features, and enhance user experience.
To comply with legal obligations, regulatory requirements, court orders, and lawful requests from government authorities in the Sultanate of Oman.
To send you marketing communications about our services, new features, and promotions — only where you have provided your explicit consent or where permitted by law. You can opt out at any time.

4. Information Sharing and Disclosure

We do NOT sell, rent, or trade your personal information to third parties for their own marketing purposes.
We may share limited information with Sellers (Customers) to the extent necessary to facilitate and complete auction transactions, such as the Winning Bidder's name and contact information for item delivery and ownership transfer.
We may share your information with trusted third-party service providers who perform services on our behalf, such as payment processors, cloud hosting providers, email delivery services, and analytics tools. These providers are contractually obligated to protect your data and use it only for the purposes for which it was shared.
We may disclose your information when required by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.
In the event of a merger, acquisition, restructuring, or sale of all or a portion of our assets, your information may be transferred as part of that transaction, subject to the same level of data protection.

5. Data Security

We implement industry-standard technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption (SSL/TLS), secure servers, access controls, and regular security audits.
Payment information is processed through secure, PCI-compliant payment gateways. We do not store complete credit card numbers or CVV codes on our servers.
While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and shall not be liable for unauthorized access resulting from circumstances beyond our reasonable control.
You are responsible for maintaining the security of your account credentials. If you suspect any unauthorized use of your account, you must notify us immediately.

6. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to enhance your experience, analyze Platform usage, remember your preferences (such as language settings), and deliver relevant content.
Essential cookies are required for the Platform to function properly (e.g., session management, authentication, security). These cannot be disabled.
Analytics cookies help us understand how users interact with the Platform. We use services such as Google Analytics and Firebase Analytics to collect anonymized usage data.
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality and performance of the Platform.

7. Your Rights

Right of Access: You have the right to request a copy of the personal data we hold about you.
Right of Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
Right of Deletion: You may request the deletion of your personal data, subject to our legal obligations to retain certain information (e.g., transaction records required by law).
Right to Object: You have the right to object to the processing of your personal data for marketing purposes.
Right to Data Portability: Where technically feasible, you may request your personal data in a structured, commonly used, machine-readable format.
To exercise any of these rights, please contact us at privacy@mzadat.om. We will respond to your request within thirty (30) days.

8. Data Retention

We retain your personal data for as long as your account remains active or as needed to provide you with our services.
After account closure or deletion, we may retain certain information for a period necessary to comply with legal obligations, resolve disputes, enforce agreements, and as permitted by applicable law.
Transaction records, bid histories, and financial data are retained for a minimum of ten (10) years in accordance with Omani commercial and tax regulations.

9. Push Notifications and Communications

With your consent, we may send push notifications to your device about auction updates, bid status, new listings, payment reminders, and other service-related alerts.
You can manage notification preferences through your device settings or your account settings on the Platform.
Service-critical notifications (e.g., payment confirmations, account security alerts) may be sent regardless of your notification preferences.

10. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18.
If we discover that we have inadvertently collected personal data from a child under 18, we will take immediate steps to delete such information from our records.

11. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last Updated" date.
For significant changes that materially affect how we handle your data, we will make reasonable efforts to notify you (e.g., via email or a prominent notice on the Platform).
Continued use of the Platform after changes to this Privacy Policy constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: Email: privacy@mzadat.om
You may also contact us by mail at: Mzadat Company, Muscat, Sultanate of Oman.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant data protection authority in the Sultanate of Oman.

Your privacy matters to us. If you have any questions about this Privacy Policy, do not hesitate to contact us.