Privacy Policy
We are committed to protecting your privacy and handling your data with transparency, integrity, and care — whether you're a business or an individual.
1. Overview
Welcome to Yomaak ("we," "our," or "us"). Yomaak is a B2B and B2C marketplace platform that connects suppliers, manufacturers, and service providers with buyers and consumers across the Arab world and beyond. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal and business information when you use our platform at yomaak.com and any related applications or services.
This policy applies to all users of Yomaak, including:
Business Users (B2B)
Suppliers, manufacturers, exporters, importers, distributors, and corporate buyers who use Yomaak to source products, find partners, or grow their business operations.
Individual Users (B2C)
Consumers, freelancers, and individuals who browse products, request quotes, or purchase services through Yomaak's consumer-facing features.
By accessing or using Yomaak, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of our services.
2. Information We Collect
We collect information in several ways depending on how you interact with Yomaak.
2.1 Information You Provide Directly
When you register, create a company profile, submit a quote request, or contact us, we may collect:
| Full name and contact details | Account registration, quote requests |
| Company name, trade license, and business registration number | B2B supplier/buyer verification |
| Job title and department | Business profile creation |
| Email address and phone number | Communication and notifications |
| Billing and payment information | Transactions and invoicing |
| Products, services, and catalogue data | Supplier listings |
| Communications and messages sent on platform | Buyer-supplier interactions |
| Identity verification documents (B2B) | Trust & verification program |
2.2 Information Collected Automatically
When you use our platform, we automatically collect:
| IP address and approximate location | Security and fraud prevention |
| Browser type, device type, and OS | Platform optimization |
| Pages visited and time spent | Analytics and UX improvement |
| Search queries and filters used | Personalization |
| Clickstream and interaction data | Improving recommendations |
| Referring URLs | Marketing attribution |
2.3 Information from Third Parties
We may receive information from partners including payment processors, identity verification services, social login providers (e.g., Google, LinkedIn), and business data providers to enrich company profiles.
3. How We Use Your Information
We use your information for legitimate business purposes. The specific uses depend on whether you are a business or individual user.
3.1 For All Users
- Create and manage your account and profile
- Process transactions, payments, and invoicing
- Send service-related notifications and updates
- Respond to your inquiries and support requests
- Ensure platform security, integrity, and fraud prevention
- Comply with legal obligations and regulatory requirements
- Improve our platform through analytics and feedback
3.2 For Business Users (B2B)
- Verify business identity, licenses, and certifications
- Match buyers with relevant suppliers based on industry, category, and location
- Facilitate Request for Quotation (RFQ) workflows
- Enable company profile and product catalogue visibility
- Provide market insights, trends, and trade intelligence
- Promote your business to relevant buyers on the platform
- Enable participation in exhibitions and business events
3.3 For Individual Users (B2C)
- Personalize product and supplier recommendations
- Process orders and manage delivery preferences
- Send promotional offers and relevant product updates (with consent)
- Enable saved searches, wishlists, and browsing history
- Provide customer support and dispute resolution
Legal Basis (GDPR & applicable laws): We process your data based on contractual necessity, legitimate interests, legal obligations, or your explicit consent — depending on the type of data and purpose.
6. Data Retention
We retain your data only as long as necessary to fulfil the purposes described in this policy or as required by law.
| Active account data | Duration of account activity |
| Transaction and invoicing records | 7 years (tax and legal compliance) |
| Business verification documents | 5 years post contract termination |
| Communication logs | 2 years |
| Marketing consent records | 3 years or until opt-out |
| Analytics data (anonymized) | Indefinitely |
Upon account deletion, we will remove or anonymize your personal data within 30 days, except where retention is required by law.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
To exercise your rights, email info@yomaak.com. We will respond within 30 days. Identity verification may be required.
8. Security
We implement industry-standard security measures to protect your data from unauthorized access, loss, alteration, or disclosure. These include TLS/SSL encryption for all data in transit, AES-256 encryption for sensitive data at rest, role-based access controls and audit logging, regular security assessments and penetration testing, and incident response procedures compliant with applicable breach notification laws.
However, no system is completely secure. You are responsible for keeping your account credentials confidential. Please notify us immediately if you suspect unauthorized access at info@yomaak.com.
9. International Transfers
Yomaak operates across international markets. Your data may be transferred to and processed in countries outside your home jurisdiction, including countries that may not have the same level of data protection laws as your own.
When we transfer data internationally, we ensure appropriate safeguards are in place such as Standard Contractual Clauses (SCCs), adequacy decisions by relevant authorities, or your explicit consent. For users in the EU/EEA, we comply with GDPR Chapter V transfer requirements.
10. Children's Privacy
Yomaak's platform is intended for individuals aged 18 and above. We do not knowingly collect personal information from children under 18. If you believe a minor has provided us with their information, please contact us immediately at info@yomaak.com and we will promptly delete such data.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Send an email notification to registered users for significant changes
- Display a banner or in-app notice on Yomaak for 30 days following a material update
We encourage you to review this policy periodically. Continued use of Yomaak after changes are posted constitutes acceptance of the revised policy.
12. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Data Protection team:
If you are located in the European Union or European Economic Area, you also have the right to lodge a complaint with your local data protection authority (DPA).