Privacy Policy

Tojaz is committed to respecting the privacy of its users and protecting their personal data. This policy explains how personal data is collected, processed, used, and protected when using the Tojaz app or website and the services and features available through them.

This policy applies to all users of the Tojaz platform, including the client (service seeker), the service provider, and the visitor, according to the nature of each user's use of the platform.

This policy aims to clarify the types of data Tojaz may collect, the purposes of collecting and using it, the parties the data may be shared with, the user's rights regarding their data, and the ways to contact Tojaz about privacy and personal data.

By using the Tojaz platform or registering on it, you acknowledge that you have read and understood this policy, to the extent permitted by the laws and regulations in force in the Kingdom of Saudi Arabia.

This policy does not cover the details of the "Guarantee" service in terms of its financial transaction mechanism or the processing of data related to it, as the Guarantee service is subject to independent terms and policies explained to the user when using it.

Data may be collected through registration and account creation, updating account data, placing orders, submitting price quotes, using services, posting ads, opportunities, and content, communicating with users, making payments or transfers, submitting complaints and support requests, and adding ratings and reviews.

Some technical data may also be collected automatically when using the app or website for operational, security, and performance-improvement purposes.

Some data may be obtained from other parties whenever necessary, lawful, and consistent with the applicable regulations.

The user is responsible for providing accurate and up-to-date data and updating it when needed. The platform may request permissions to access certain device functions, such as photos, files, notifications, or location, depending on the features used, and denying permission may result in some functions being unavailable.

Personal data is processed according to an appropriate legal basis depending on the nature and purpose of the processing. This may include performing a contract or taking steps at the user's request prior to entering into a contract, complying with a legal obligation, the data owner's consent when consent is the appropriate basis, or any other basis permitted by the Personal Data Protection Law and its executive regulations.

Tojaz is committed to not requesting or relying on consent as a basis for processing except in cases where consent is the appropriate basis under legal requirements, while clarifying the purpose of processing when needed.

Tojaz applies appropriate technical and organizational measures to protect personal data from unauthorized access, use, alteration, disclosure, loss, or destruction, commensurate with the nature of the data and the risks associated with its processing.

Tojaz works to periodically review and update its protection and security measures as needed.

The user is responsible for keeping their login data confidential and not sharing it with others, and must notify Tojaz immediately if they suspect any unauthorized access to their account.

Tojaz handles security incidents in accordance with the relevant procedures and legal requirements. However, no electronic environment can be guaranteed to be absolutely secure.

Tojaz never asks users to share their password or secret verification codes through official support channels, and users must not share them with anyone.

The Tojaz website and apps may use cookies and similar technologies necessary to operate services, improve performance, and analyze usage, depending on the nature of the technology used.

These technologies may be used to remember certain user settings, improve the user experience, measure platform performance, and improve services and security.

Cookie control options may vary depending on the browser or device used, and disabling some necessary technologies may affect some website functions or services.

When using services that require payment or a transfer, the data necessary to complete and document the transaction may be processed according to the payment mechanism approved for each service.

Some payment operations may be carried out through payment service providers or specialized financial entities, and their processing of data is subject to the relevant regulations and policies.

The "Tojaz Guarantee" service is subject to independent terms, conditions, and policies that explain the mechanism of financial transactions and the data related to them.

The personal data of Tojaz platform users is hosted and processed within the Kingdom of Saudi Arabia, in accordance with the regulations and laws in force in the Kingdom.

Tojaz does not transfer personal data outside the Kingdom unless it becomes necessary in the future, in which case the transfer will be carried out in accordance with the legal requirements and controls in force in the Kingdom of Saudi Arabia.

Tojaz retains personal data for the period necessary to achieve the purposes for which it was collected, or for the period required by regulations and laws, or to protect rights and prove obligations, depending on the nature of the data and its purpose.

Once the legal or legitimate need to retain the data ends, Tojaz works to destroy, delete, or anonymize it in accordance with the applicable procedures and controls.

Tojaz may retain some records after account closure if retaining them is required by law or necessary to prove existing rights or obligations or for legitimate legal purposes.

The user may request the deletion of their account and personal data through the means and channels Tojaz provides for this purpose.

Deleting an account does not necessarily mean all records are deleted immediately if there is a legal obligation or legitimate basis for retaining them.

The Tojaz platform does not target the collection of minors' personal data without an appropriate legal basis and without taking the measures required to protect their data.

If a service requires processing a minor's data, the processing is carried out in accordance with the legal provisions and controls applicable to minors' data, and depending on the nature of the service.

The Tojaz platform may contain links, services, or integrations belonging to other parties. Tojaz is not responsible for the privacy policies or data processing practices of those parties.

The user should review the privacy policies and terms of the third party before using their services or sharing their data with them.

Tojaz may update this policy from time to time in line with the platform's development or regulatory or operational changes.

The updated version will be published through the appropriate channels on the platform, and the date of the last update will be shown at the end of the policy.

Users are advised to review the policy periodically to stay informed of any updates.

For inquiries related to the privacy policy, personal data, or exercising rights, users can contact Tojaz through the official communication channels shown on the website or app.

A request to exercise any right must, when needed, include information that helps Tojaz verify the identity of the requester and identify the data or account concerned, in accordance with the applicable requirements and procedures.

Data controller's legal name

Tojaz

Privacy contact email

support@ijaz.sa

Contact number

+966 12 345 6789

Address

Kingdom of Saudi Arabia

Last updated

September 18, 2026