EverLuvd: Privacy Policy

Last Update: [November 14, 2025]

1. Introduction

Welcome to EverLuvd. We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy (the “Policy”) explains how EverLuvd (a company incorporated in the Kingdom of Saudi Arabia with Commercial Registration No. 7051745714, “we”, “us”, “our”) collects, uses, stores, and shares your personal data when you use our mobile application, website, and related services (collectively, the “Platform”).

Our Platform is based in the Kingdom of Saudi Arabia (KSA), and this Policy is drafted in accordance with the KSA Personal Data Protection Law (PDPL) and its regulations.

By using our Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Who is Responsible for Your Data?

EverLuvd is the Data Controller for the personal data it collects from its Users. This means we are responsible for deciding how and why your personal data is processed.

If you have any questions, you can contact our Data Protection Officer at:

Email: info@everluvd.com

Address: EverLuvd, Riyadh, Kingdom of Saudi Arabia

3. Personal Data We Collect

We collect personal data to provide and improve our services. The types of data we collect depend on how you interact with us (e.g., as a Seller, a Buyer, or just browsing).

A. Data You Provide Directly to Us:

• Account Information: When you create an account, we collect your name, email address, mobile phone number, and a secure (hashed) password.
• Seller Information: If you sell items, we collect your:
  • Pickup Address: To collect your item(s).
  • Bank Account Details (IBAN): To process your payouts.
  • Government-Issued ID: We may be required to collect this (e.g., National ID or Iqama) to verify your identity, prevent fraud, and comply with anti-money laundering (AML) and financial regulations for seller payouts.
• Buyer Information: If you buy items, we collect your:
  • Shipping Address: To deliver your order.
  • Payment Information: Such as your credit/debit card details (Mada, Visa, Mastercard) or Apple Pay information. Note: We do not store your full card details. This data is provided directly to our secure, third-party payment processors.
• Communications: Any data you send to us when you contact customer support (via info@everluvd.com or in-app), including your message and any images or documents you attach.
• Product Information: As a Seller, you provide information and photos of your items. While this is primarily about the product, it may be linked to your account.

B. Data We Collect Automatically:

• Usage Data: Information about how you use the Platform, such as the items you view, your searches, and your interactions with buttons and features.
• Device & Technical Data: Your IP address, device type, operating system, app version, and other technical identifiers.
• Log Data: Server logs that record activity, including dates, times, and app crashes.

C. Data from Other Sources:

We may receive data from our third-party partners, such as fraud detection warnings from our payment processors or delivery confirmation from our shipping carriers.

4. How We Use Your Personal Data (Purpose of Processing)

We only use your data for specific, lawful purposes. Our legal basis for processing your data under the PDPL is primarily to fulfill our contract with you (our Terms of Service), to comply with our legal obligations, or based on our legitimate interests.

• To Provide Our Services:
  • What we do: We use your data to create and manage your account, collect items from Sellers, verify, authenticate, and list items, process orders and payments for Buyers, deliver items to Buyers, and process payouts to Sellers.
  • Data Used: Account, Seller, Buyer & Usage Data.
  • Legal Basis (PDPL): Fulfilling our Contract.
• To Communicate With You:
  • What we do: We use your data to send order confirmations, shipping updates, and payout notices, respond to your customer support requests, and notify you of changes to our Terms or this Policy.
  • Data Used: Account Data, Communications.
  • Legal Basis (PDPL): Fulfilling our Contract; Legitimate Interest.
• To Prevent Fraud & Secure Our Platform:
  • What we do: We use your data to verify seller identities, monitor transactions for fraudulent or illegal activity, and comply with Anti-Money Laundering (AML) and financial laws.
  • Data Used: All Data, especially ID and Payment Data.
  • Legal Basis (PDPL): Legal Obligation; Legitimate Interest.
• To Improve Our Platform:
  • What we do: We use your data to analyze how users interact with our app to fix bugs and improve usability, and to develop new features and services.
  • Data Used: Usage, Device & Technical Data.
  • Legal Basis (PDPL): Legitimate Interest.
• For Marketing (With Your Consent):
  • What we do: We use your data to send you newsletters, special offers, and promotions (you can opt-out at any time).
  • Data Used: Email Address, Name.
  • Legal Basis (PDPL): Consent.
• To Comply with the Law:
  • What we do: We use your data to respond to valid requests from law enforcement or government bodies and to fulfill tax and financial reporting requirements.
  • Data Used: All Data, as required.
  • Legal Basis (PDPL): Legal Obligation.

5. Who We Share Your Personal Data With

We do not sell your personal data. We only share it with the following trusted third parties who are necessary to provide our service:

• Payment Processors: To securely process Buyer payments and Seller payouts. (e.g., Mada, HyperPay, Moyasar, PayTabs, etc.).
• Shipping & Logistics Carriers: To provide them with the Seller's pickup address and the Buyer's delivery address and contact details.
• Cloud & Hosting Providers: We use third-party services (e.g., AWS, Azure, Google Cloud) to host our Platform and store our data securely.
• Analytics Providers: To help us understand app usage (data is often anonymized or aggregated).
• Government & Legal Authorities: We will share data if required by KSA law, a court order, or to protect the rights and safety of our users (e.g., reporting fraud to SAMA or the Ministry of Commerce).

6. International Data Transfers

Our operations are based in the Kingdom of Saudi Arabia. However, some of our third-party service providers (like cloud hosting or payment gateways) may be located or process data outside of KSA.

When we transfer your personal data outside of KSA, we will take all necessary steps to ensure it is done in full compliance with the KSA PDPL. This includes ensuring the recipient country has an adequate level of data protection or implementing appropriate safeguards (such as Standard Contractual Clauses approved by KSA authorities).

7. Data Security

We take the security of your personal data very seriously. We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, misuse, or alteration. These measures include:

• Encryption: Using SSL/TLS for data in transit and encryption for sensitive data at rest (like passwords and financial details).
• Access Controls: Limiting access to personal data to only those employees and contractors who have a "need-to-know" and are bound by confidentiality obligations.
• Secure Infrastructure: Storing your data in secure, high-availability data centers.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

8. Data Retention

We will not keep your personal data for longer than is necessary for the purposes for which it was collected. The retention period depends on:

• The purpose: We keep data for as long as you have an active account and as needed to provide our services.
• Legal obligations: We are required by KSA law to retain certain data (e.g., financial transaction data) for several years.
• Dispute resolution: We may retain data if it is relevant to a legal claim or dispute.

When your data is no longer needed, we will either securely delete it or anonymize it so it can no longer be linked to you.

9. Your Rights as a Data Subject

Under the KSA PDPL, you have specific rights regarding your personal data. You have the right to:

• Know: Be informed about how we collect and process your data (this Policy).
• Access: Request a copy of the personal data we hold about you.
• Correct (Rectify): Request that we correct any inaccurate or incomplete data.
• Delete (Erase): Request that we delete your personal data (subject to certain legal exceptions, such as our need to retain transaction data).
• Withdraw Consent: At any time, you can withdraw the consent you gave us (e.g., for marketing). This will not affect the lawfulness of processing before your withdrawal.

To exercise any of these rights, please contact us at info@everluvd.com. We will respond to your request within the timeframe required by law and will need to verify your identity before proceeding.

10. Children's Privacy

Our Platform is not directed to, and should not be accessed by, children under 18 years of age. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it immediately.

11. Cookies and Tracking Technologies

We use cookies and similar technologies (like device identifiers) in our mobile application to operate the service, remember your preferences, and for analytics. A "cookie" is a small file stored on your device. You will be able to manage your preferences for these technologies through your device or app settings.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. We will notify you of any material changes by posting the new Policy on this page, updating the "Last Update" date, and/or through an in-app notification.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at:

EverLuvd Data Protection Officer

Email: info@everluvd.com

Address: Riyadh, Kingdom of Saudi Arabia