1. Introduction
LOQTA ("we", "us", or "our") operates a marketplace platform connecting buyers and sellers of businesses and commercial assets in Saudi Arabia. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you access or use our platform and services. Please read it carefully. By using our platform, you acknowledge the practices described here.
2. Information We Collect
2.1 Information You Provide
When you register, create a listing, or contact us, you may provide:
- Identity and contact details (name, email address, phone number)
- Account credentials
- Business listing information (description, financials, assets, asking price)
- Communications you send us or through our messaging features
2.2 Information Collected Automatically
When you use our platform, we automatically collect certain technical and usage information to operate and improve our services, such as device and browser type, pages visited, and general location derived from your IP address.
3. How We Use Your Information
We use your information to:
- Create and manage your account
- Publish and manage your business listings
- Facilitate communication between buyers and sellers
- Send you service notifications, updates, and support responses
- Verify identity and ensure platform integrity
- Comply with legal obligations
- Improve the platform's features and user experience
4. Legal Basis for Processing
We process your personal data in accordance with the Saudi Personal Data Protection Law (PDPL). Our legal bases include: performance of a contract with you (providing our services), compliance with a legal obligation, our legitimate business interests (such as fraud prevention and platform security), and your consent where required.
5. Disclosure of Your Information
We do not sell your personal data. We may share it with:
- Service providers who assist us in operating the platform (subject to confidentiality obligations)
- Other platform users to the extent necessary to facilitate a transaction (e.g., sharing contact details with a matched buyer or seller upon mutual consent)
- Regulatory or judicial authorities when required by applicable law
- Successors in the event of a merger, acquisition, or sale of assets
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. We may retain certain information for longer periods where required by law or for legitimate business purposes such as resolving disputes or enforcing our agreements. When data is no longer needed, we securely delete or anonymise it.
7. Security of Your Information
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. However, no system is completely secure. If you believe your account has been compromised, please contact us immediately.
8. Cookies and Similar Technologies
We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how our platform is used. You can adjust your browser settings to refuse cookies, though some features may not function correctly without them.
9. Third-party Services
Our mobile application uses Google Firebase services for analytics, crash reporting, and push notification delivery. These services collect limited technical data — such as anonymised usage statistics, crash diagnostics, and a device token — governed by Google's Privacy Policy. You can opt out of analytics collection through your device settings or by contacting us.
10. Push Notifications
With your consent, we send push notifications to your device to alert you about new messages, listing activity, and important service updates. A device token linked to your account is used solely for delivering these notifications and is not shared with third parties for marketing. You can withdraw consent at any time in your device's notification settings or through the app's notification preferences.
11. International Data Transfers
Some of the third-party services we use, including Google, process data outside the Kingdom of Saudi Arabia. When personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or the recipient's compliance with recognised data protection frameworks. By using our platform, you acknowledge that your data may be processed in countries with different data protection standards than those in Saudi Arabia.
12. Your Rights Under the PDPL
Under the Saudi Personal Data Protection Law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data (subject to legal retention requirements)
- Withdraw consent where processing is based on consent
- Object to processing in certain circumstances
To exercise any of these rights, please contact us using the details in Section 14 below.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email or through the platform. Your continued use of our services after any update constitutes acceptance of the revised policy.
14. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: