This policy explains how the GazHome application ("the App", "we") collects, uses, shares and protects your personal data, and what rights you have over it. By using the App you agree to the practices described below.

Data controller: GazHome — an application for ordering and delivering gas cylinders and related products within the Kingdom of Saudi Arabia.

1. Data we collect

1.1 Account information

• First and last name
• Mobile number (used to create your account and verify it via a one-time code)
• Email address (optional)
• Password — stored hashed; it is never readable in its original form
• Profile photo (optional)

1.2 Business account information

When registering as a business account, we additionally collect:

• VAT number
• Commercial registration number and certificate

1.3 Driver information

Collected from driver accounts only, for verification and operations:

• Driving licence number
• Vehicle licence and plate number

1.4 Order and address data

• Delivery addresses you save or select on the map
• Order contents, history, status and delivery reports
• In-app wallet balance and transaction history

1.5 Location data

• Approximate and precise location while using the App: to set the delivery address on the map, show products and service areas available near you, and calculate distances and arrival times.
• Background location: drivers only, during an active order only, as described above.

You may decline or revoke the location permission at any time in your device settings. Declining does not prevent you from using the App, but you may need to enter your delivery address manually.

1.6 Device and notification information

• Push notification token (FCM Token) — an identifier issued by Google to deliver order-status notifications to your device
• Device type, OS version and app version — for compatibility and technical support
• Crash diagnostics, to improve app stability

1.7 Payment data

Electronic payments are processed by a licensed third-party payment provider (MyFatoorah) through its own secure payment page. The GazHome app does not collect or store card numbers, CVV codes or banking credentials. We receive only the transaction outcome (success/failure), the transaction reference and the amount.

1.8 Other permissions the App requests

2. How we use the data

• Creating your account, verifying your identity and securing sign-in
• Receiving, processing, delivering and invoicing your orders
• Enabling shipment tracking and communication between you and the driver
• Processing payments and managing wallet balance and refunds
• Sending operational notifications about your order status
• Technical support and complaint handling
• Improving app performance and stability, and detecting fraud and abuse
• Complying with legal and tax obligations in the Kingdom of Saudi Arabia

We do not sell your personal data to any third party, and we do not share it for advertising purposes.

3. Sharing data with others

We share only the minimum necessary data, and only with the following parties:

Some data may be processed on servers outside the Kingdom by the cloud providers listed above, under contractual safeguards that preserve its confidentiality.

4. Data retention

• Account data: for as long as your account is active; deleted or anonymised within 30 days of an account deletion request.
• Order and invoice records: retained for the period required by Saudi tax and commercial regulations (no less than 6 years), even after account deletion, strictly to the extent needed for compliance.
• Delivery route data: deleted within 90 days of order completion.

5. Information security

• All data between the App and our servers travels over an encrypted connection (HTTPS/TLS).
• Passwords are stored using one-way hashing.
• Access to customer data is limited to authorised staff on a need-to-know basis.

That said, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. In the event of a breach affecting your personal data, we will notify you and the competent authorities as required by applicable regulations.

6. Your rights

Under the Saudi Personal Data Protection Law (PDPL), you have the right to:

• Be informed: know the legal basis and purpose for collecting your data.
• Access: request a copy of the personal data we hold about you.
• Rectification: correct any inaccurate or incomplete data.
• Destruction: request deletion of your data when it is no longer needed.
• Withdraw consent: at any time, without affecting processing already carried out.

To exercise any of these rights, contact us at the email in the "Contact us" section below. We respond within 30 days at most.

7. Account and data deletion

8. Children's privacy

The App is intended for users aged 18 and over. We do not knowingly collect data from children below that age. If you become aware that a child has provided us with their data, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy from time to time. When we make material changes, we will notify you through an in-app notice or a message to your registered email before the change takes effect. The last-updated date is shown at the top of this page.

10. Contact us