سياسة الخصوصية

Welcome to Sougak's Privacy Policy. At Sougak, we take your privacy seriously. This policy explains how we collect, use, disclose, and protect your personal information when you visit our website, use our mobile applications, or interact with our services (collectively, the "Platform").

Sougak is committed to being transparent about how we handle your data. This privacy policy applies to all users, including buyers, sellers, and visitors of our Platform.

2.1 Personal Information

We collect various types of personal information, including:

• Account Information: name, email address, phone number, date of birth, address
• Identity Documents: for seller verification (national ID, passport, business registration)
• Payment Information: banking details, card information (processed securely)
• Transaction History: order details, purchase records, seller information
• Profile Information: profile picture, biography, ratings, reviews
• Communication Records: messages with sellers/buyers, support tickets
• Tax Information: VAT number, tax ID for sellers

2.2 Automatically Collected Information

When you use our Platform, we automatically collect:

• IP Address: your internet protocol address
• Device Information: device type, operating system, browser type
• Browsing Data: pages visited, time spent, navigation patterns
• Cookies: small files that identify your browser
• Location Data: general geographic location (with your permission)
• Log Files: access times, error messages, feature usage

3.1 Direct Collection

We collect information directly from you when you:

• Create an account or register on our Platform
• Make a purchase or list a product for sale
• Complete your profile information
• Submit payment information
• Contact our customer support team
• Participate in surveys or feedback forms
• Upload documents for identity verification

3.2 Automatic Collection

We automatically collect information about your interactions with our Platform through:

• Cookies and similar technologies
• Server logs and analytics
• Web beacons and pixels
• Browser caching
• Session recording (with explicit consent)

3.3 Third-Party Sources

In limited cases, we may receive information from:

• Payment processors (for transaction verification)
• Identity verification services (for seller verification)
• Other users (in public reviews or communications)
• Government or law enforcement (if legally required)
• Shipping and logistics partners

4.1 Core Service Delivery

We use your information to:

• Create and manage your account
• Process transactions and orders
• Verify your identity as a buyer or seller
• Facilitate communication between buyers and sellers
• Handle payments and refunds
• Arrange shipping and delivery
• Provide customer support

4.2 Security & Fraud Prevention

Your information helps us:

• Detect and prevent fraud and unauthorized access
• Monitor for suspicious activities
• Enforce our Terms of Service
• Protect against illegal activities
• Comply with legal obligations
• Maintain the integrity of our Platform

4.3 Improvement & Analytics

We analyze information to:

• Understand user behavior and preferences
• Improve our services and user experience
• Develop new features
• Provide personalized recommendations
• Conduct research and analytics
• Generate aggregate statistics

4.4 Marketing & Communication

With your consent, we may:

• Send you promotional emails and notifications
• Notify you about order updates
• Inform you of special offers or discounts
• Send newsletters and product updates
• Request feedback or reviews
• Conduct marketing campaigns

5.1 Service Providers

We share information with trusted partners who help us deliver our services:

• Payment processors (for secure payment handling)
• Shipping companies (for delivery)
• Cloud hosting providers (for data management)
• Identity verification services (for seller verification)
• Customer support platforms
• Email and SMS providers

5.2 Transaction Participants

When conducting transactions:

• Sellers can see buyer's name, address, and contact information
• Buyers can see seller's business information and ratings
• Both parties can communicate through our messaging system

5.3 Legal & Regulatory Requirements

We may disclose information when:

• Required by law or court order
• Requested by government authorities
• Necessary to protect our legal rights
• Complying with tax or regulatory obligations
• Protecting public safety or health

Sougak operates globally, and your information may be transferred to and stored in countries outside Sudan. These countries may have different data protection laws than your home country.

6.1 Data Storage Locations

Your information may be stored in:

• Sudan (primary data center)
• Regional processing centers in East Africa
• Cloud servers in the United States or Europe
• Third-party provider locations

6.2 Data Protection

When transferring data internationally, we:

• Use encryption and secure protocols
• Implement data protection agreements
• Require vendors to maintain confidentiality
• Ensure compliance with applicable laws

7.1 Security Measures

We implement comprehensive security measures to protect your information:

• 256-bit SSL/TLS encryption for data transmission
• Two-factor authentication (2FA) for accounts
• Secure password hashing algorithms
• Regular security audits and penetration testing
• Firewalls and intrusion detection systems
• Restricted access to sensitive data
• Data encryption at rest and in transit

7.2 Your Responsibility

While we protect your data, you are responsible for:

• Keeping your password confidential
• Not sharing your account credentials
• Logging out of your account on public devices
• Reporting suspicious account activity immediately
• Using strong, unique passwords

8.1 Access & Correction

You have the right to:

• Access your personal information
• Review what data we have collected
• Correct inaccurate information
• Update outdated information

8.2 Deletion & Portability

You may request to:

• Delete your account and associated data
• Receive your data in a portable format
• Transfer your data to another service
• Remove your profile information

8.3 Marketing Opt-Out

You can:

• Unsubscribe from marketing emails
• Opt-out of promotional messages
• Manage notification preferences
• Disable targeted advertising

8.4 How to Exercise Your Rights

To exercise any of these rights, please:

1. Log into your account and access settings
2. Contact our Privacy Officer at privacy@sougak.com
3. Submit a request through our data access form
4. Include your full name and account email
5. We will respond within 30 calendar days

9.1 What Are Cookies?

Cookies are small text files stored on your device that help us recognize you and remember your preferences. We use several types:

• Essential Cookies: required for basic functionality
• Performance Cookies: help us understand how you use the site
• Functional Cookies: remember your preferences
• Marketing Cookies: track your interests for ads

9.2 Cookie Management

You can control cookies by:

• Adjusting browser cookie settings
• Clearing cookies manually
• Using do-not-track features
• Opting out through our preference center

Sougak does not knowingly collect information from children under 18 years of age. Our Platform is intended for adults and families with parental supervision.

10.1 Age Requirements

• Users must be 18+ to create an account independently
• Ages 16-17 may use the platform with parental consent
• Children under 16 cannot register accounts
• Parents can manage children's accounts

10.2 Parental Controls

If you are a parent or guardian and believe your child has created an account without consent, please contact us immediately to remove their information.

11.1 Retention Periods

We retain your information for as long as necessary:

• Account Data: for duration of your account + 3 years
• Transaction Records: for 7 years (tax/legal requirements)
• Payment Information: not retained (deleted after processing)
• Marketing Data: until you unsubscribe
• Analytics Data: 24 months
• Support Tickets: 2 years

11.2 Deletion Process

When you request account deletion:

1. Your data is deleted within 30 days
2. Some data may be retained for legal compliance
3. Server backups are purged within 90 days
4. You will receive deletion confirmation

If you are located in the European Union or European Economic Area, the following additional rights apply under GDPR:

12.1 Your GDPR Rights

• Right to Access: obtain copies of your personal data
• Right to Rectification: correct inaccurate data
• Right to Erasure: request deletion of your data
• Right to Restrict: limit how your data is used
• Right to Portability: get data in machine-readable format
• Right to Object: object to processing of your data
• Right to Withdraw Consent: stop data processing
• Right to Lodge Complaint: file complaint with your DPA

12.2 Legal Basis for Processing

We may update this privacy policy periodically to reflect changes in our practices, technology, or legal requirements.

13.1 How We Notify You

• Material changes: email notification minimally 30 days before
• Minor changes: posted on website with notice
• We maintain previous versions for reference
• Your continued use constitutes acceptance

If you have questions about this privacy policy or our data practices, please contact our privacy team: