Privacy Policy

Last updated 2026. This explains what personal data we collect, why, and your rights under the Personal Data Protection Law of the Kingdom of Bahrain (Law No. 30 of 2018, the “PDPL”).

In short: To post an ad we need your name and WhatsApp number, and those are shown publicly on the ad so people can reach you. We keep this to run the board. For the Verified badge we check your ID in person but do not keep a copy of it. You can ask us to see, correct, or delete your data.

1. Who is responsible for your data

KabayanAds is the data controller for the personal data described here. Contact: [email protected] or the admin on WhatsApp. [VERIFY: the PDPL may require a named legal entity / registered owner and a Bahrain contact to be stated as controller. Confirm the business identity to publish here.]

2. What we collect

To post an ad: your name, WhatsApp number, the ad’s text, category, area, price, and any photos you upload.
For the Verified badge (optional): the admin views your CPR (national ID card) and confirms a working phone number in person or over a call. We record only that verification happened and the date — we do not store, photograph, or keep the CPR number or image.
Automatically: basic technical logs (such as IP address and request time) needed to run the site securely. We do not use advertising or tracking cookies.

3. What is shown publicly

The name and WhatsApp number you give with an ad are published on that ad and are visible to anyone, so buyers can contact you directly. Do not include your home address or any data you do not want public in the ad text or photos. Everything else (such as logs) stays internal.

4. Why we may process your data (legal basis)

Your consent, which you give when you tick the box and submit an ad, or when you ask to be verified.
Our legitimate operation of the platform — reviewing ads, preventing fraud and spam, keeping the service secure.
Legal obligation, where the law requires us to act (for example, responding to a lawful request from a Bahraini authority).

5. How long we keep it

An ad and its contact details remain while the ad is live and for a reasonable period afterwards, then are deleted. Verification records (the yes/no and date) are kept while the badge is active. Security logs are kept only as long as needed for security. [VERIFY: set concrete retention periods, e.g. ads removed 90 days after expiry, logs 30 days — confirm the numbers you want.]

6. Who we share it with

We do not sell your data. We do not share it with third parties for marketing. We may disclose data where required by the law of Bahrain or a lawful request from a competent authority. The site may run on hosting/infrastructure providers who process data on our behalf under appropriate safeguards. Contacting a seller moves the conversation to WhatsApp, which has its own privacy terms outside our control.

7. Security

We take reasonable technical and organisational measures to protect your data. No system is perfectly secure, so we cannot guarantee absolute security.

8. Your rights under the PDPL

Subject to the PDPL, you may ask us to: confirm what data we hold about you; give you a copy; correct it if it is wrong; delete it; or stop certain processing, including withdrawing consent. To exercise a right, contact us using the details above; we will respond within the period the PDPL requires. You also have the right to complain to the Bahrain Personal Data Protection Authority.

9. Children

The platform is intended for adults. Do not use it or provide data if you are under 18.

10. Changes

We may update this policy; the current version is always the one on this page, with the date above.