Privacy notice

Contact PLATES at platesbh973@gmail.com. Include the listing URL and relevant details when reporting an issue. Never send passwords, payment-card details or unnecessary identity documents.

PLATES is a pre-commercial project; its commercial registration and formal operator particulars are still pending. Contact the project through the email above for access, correction, deletion, objection or privacy complaints.

Account data includes your email, authentication information, seller display name, WhatsApp number and optional governorate. Listing data includes the number, category, price, description, status and timestamps. A wanted request includes the request text, optional budget, name, email, WhatsApp number, payment reference and dates. A homepage spotlight enquiry includes the plate number, name, WhatsApp number, optional note, status and date. We also store offer activity, seller responses, promotion records and support messages and images. For support chat we collect the name and email you enter, link a signed-in account when available, and store a keyed hash of the connection's IP address to limit abuse. Guest contact details are not verified or shown publicly. Hosting and authentication providers may process IP addresses, request metadata and security logs. Visit statistics: when you open a public page we record the page, the day, the language, your approximate country, the device type (mobile, desktop or tablet), where you arrived from (for example a search engine or Instagram) and an anonymous one-day code made from your connection address and browser. The address and browser details are not stored, the code cannot be linked from one day to the next because its key is deleted every day, and no cookie or browser storage is used. Visits by signed-in administrators or by sellers viewing their own plates, and visits that send a Do Not Track or Global Privacy Control signal, are not recorded. We also count when a signed-in visitor presses a contact button for a plate. These raw statistics are deleted after about 180 days.

Tap processes the Benefit checkout. PLATES receives the charge reference and status but does not receive or store your card or bank credentials. Do not include identity documents, bank details or sensitive information in a public request, listing or support message.

Your active listings and seller contact details are available to visitors and may be indexed by search engines. Anyone receiving your seller-page link can view public listings. Your account email and support conversations are not public marketplace content. Authorized administrators can access information needed to operate the service and handle complaints.

We use account and listing data to provide the service you request; security and abuse information to protect users and the service; anonymous visit statistics to understand and improve the service; and information required to comply with applicable legal obligations. Where consent is the required legal basis, it must be specific and withdrawable. No optional marketing or advertising tracking is currently enabled. You can object to a use or withdraw consent by contacting us; this does not undo processing already lawfully completed.

Supabase provides the database and authentication; the current database region is Mumbai, India. Vercel hosts the website and may process requests through a global network. Tap processes Benefit payments, and Google’s Gmail service receives messages you email to support. These providers may process data outside Bahrain. Provider arrangements and applicable cross-border requirements must be finalized before commercial launch.

When you open WhatsApp, you leave PLATES and WhatsApp’s own terms and privacy policy apply. We cannot read, delete or confirm delivery of your WhatsApp conversations.

The beta currently keeps account and listing records until you remove them or request deletion, subject to legal or dispute-related retention requirements. Marking a plate sold does not delete its record. A private price-reference record may remain after a public listing is removed or relisted, so past sale evidence can support aggregate estimates. Contact us if you want that reference removed too. Closing a support conversation ends access from that browser; it does not by itself erase the stored conversation. A scheduled retention and backup-deletion policy is not yet active and remains a launch requirement.

Contact us to request removal or a copy of your data. We may need proportionate identity checks and will explain any lawful reason that limits deletion. Search-engine caches and messages held by a seller or WhatsApp are outside our direct control.

Subject to applicable Bahrain data-protection law, you may request access, correction or deletion, object to relevant processing, and complain to the competent Personal Data Protection Authority. Send requests to the contact above with enough information to locate your account. We do not sell your personal contact information to advertisers.