Privacy Policy

What we collect, why we collect it, and the choices you have.

Last updated: 12 May 2026

1. Information we collect

You provide

  • Account info: name, email, phone, password (stored hashed).
  • Profile info: photo, location, employer/candidate details.
  • Listing content: titles, descriptions, photos, prices, contact preferences.
  • Messages and support tickets you send through the platform.
  • Payment metadata when you subscribe (handled by our payment processor).

We collect automatically

  • Device and browser info, IP address, approximate location.
  • Usage events: pages viewed, listings opened, search terms.
  • Cookies and similar technologies (see Cookies Policy).

2. How we use your information

  • Operate the marketplace: show your listings, deliver messages, process payments.
  • Personalise content and recommendations.
  • Prevent fraud, scams and abuse.
  • Communicate service updates, security alerts and (with consent) marketing.
  • Comply with legal obligations and enforce our Terms.

3. Sharing your information

We share data with:

  • Other users — only what you make public (your listings, profile, ratings, optional contact details).
  • Service providers — hosting (Supabase), payment processing, analytics, email — bound by confidentiality.
  • Authorities — when required by law or to protect rights, users or the public.
  • Acquirers — in the event of a merger or sale, with notice to you.

We do not sell your personal data.

4. Data retention

We keep your data while your account is active and for a reasonable period afterwards to comply with legal, tax and dispute-resolution needs. Closed accounts are anonymised or deleted on a rolling basis.

5. Your rights

  • Access, correct, export or delete your personal data.
  • Withdraw consent for marketing at any time.
  • Object to or restrict certain processing.
  • Lodge a complaint with your local data protection authority.

To exercise these rights, email privacy@gulfactive.com or use Dashboard → Settings.

6. Security

We use encryption in transit (TLS), encrypted storage at rest, role-based access control and row-level security in our database. No system is 100% secure — please use a strong password and enable two-factor authentication where available.

7. Children

GULFACTIVE is not directed to people under 18. We do not knowingly collect data from minors.

8. International transfers

Your data may be processed outside your country of residence. Where required, we use appropriate safeguards (such as standard contractual clauses).

9. Changes

We'll notify you of material changes by in-app notice or email. Continued use after the effective date means you accept the updated policy.

10. Contact

Privacy questions: privacy@gulfactive.com.