Privacy Policy

1. The data we handle

We handle the following categories of personal data. Not every category applies to every user.

1.1 Account and identity data. Your name, email address, mobile number, city, the sex you declare at registration, your role on the Platform, your language and notification preferences, and your profile image. If you register through a third-party sign-in service, we receive the identifier and the details that service shares with us, which may be limited or relayed.

1.2 Photographer data. In addition, for Photographers: biography, portfolio, cover and profile images, Packages and prices, service areas, availability and days off, social media handle where provided, application and review status, and bank account details used to pay earnings.

1.3 Booking data. The Bookings you make or receive, including Package, date, time, location and its coordinates, event type, number of people, special requests, notes, Add-ons, status history, cancellation reasons, and the identity of the other party.

1.4 Payment and financial data. Amounts charged, paid, refunded, credited, and transferred, payment status, references issued by the payment provider, and records of fees and commission. Card details are entered on the payment provider's own page and are handled by that provider.

1.5 Communications. Messages you send through the Platform, including text, voice notes, images, videos, locations, and quotes, together with delivery and read status, and your correspondence with our support team.

1.6 Delivery data. Technical records about delivered files, such as file names, sizes, counts, timestamps, and receipt status, and the cryptographic material needed to operate the delivery service. The content of delivered files is protected in the manner described in the Terms and is not something we undertake to be able to access.

1.7 Reviews, reports, and blocks. Ratings and reviews you write or receive, reports you file or that are filed about you, and blocks you place. When a report is filed, we record contact details of both the person reporting and the person reported.

1.8 Device and technical data. Device model, operating system, application version, language, time zone, push notification token, session and security records, IP address, approximate location derived from it, diagnostic and crash information, and logs of actions taken on the Platform. The delivery website also stores information in your browser to keep you signed in and to operate uploads and downloads, and sends us diagnostic events about how those operations perform.

1.9 Location data. The location you choose for a Session, and, only if you grant permission, your device location in order to help you choose it.

1.10 Device permissions. With your permission, the Platform may access your photo library to save or upload files, your microphone to record voice notes, your calendar to add a Booking, and notifications to alert you. You can withdraw any permission in your device settings, although some features may then stop working.

2. Where the data comes from

We obtain personal data: (a) directly from you; (b) automatically from your use of the Platform; (c) from other users, for example when a Photographer or Client includes information about you in a Booking, message, review, or report; and (d) from third parties that support the Platform, such as sign-in services and payment providers.

3. Why we use it, and on what basis

3.1 We use personal data to:

(a) create, secure, and administer Accounts, and to apply the Platform's access rules, including using the sex you declared to decide which Content you may be shown;

(b) review Photographer applications and profile content;

(c) enable discovery, Bookings, Add-ons, messaging, Delivery, and reviews;

(d) collect, settle, refund, and transfer payments, and keep financial records;

(e) send service communications, security codes, reminders, and, where permitted, news and offers;

(f) provide support, handle complaints, reports, and disputes, and enforce the Terms;

(g) detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity;

(h) operate, maintain, diagnose, measure, and improve the Platform;

(i) comply with legal, tax, accounting, and regulatory obligations, and respond to competent authorities;

(j) establish, exercise, or defend legal claims; and

(k) any other purpose the law permits, or that we tell you about at the time.

3.2 We rely, as the case requires, on: your consent; the performance of the agreement you have with us and the steps needed to enter into it; compliance with a legal obligation; and our legitimate interests, where these are not overridden by your rights. Where any data you provide is treated by law as sensitive, you give your explicit consent to its processing for the purposes in this Policy by providing it. Where we rely on consent, you may withdraw it at any time, which does not affect processing already carried out and may mean that we can no longer provide part or all of the Platform to you.

3.3 Automated processing. The Platform uses automated means to operate, for example to rank and display profiles, apply access rules, enforce time limits, and detect misuse. You may contact us about any outcome that affects you.

3.4 Aggregated and anonymised data. We may create data that does not identify you, by aggregating or anonymising personal data, and may use and share it for any purpose.

3.5 Some data is necessary to use the Platform. If you do not provide it, we may be unable to open your Account, accept a Booking, or pay you.

4. Who can see your data on the Platform

4.1 Other users. Information you place in a public profile, Package, portfolio, or review is visible to other users according to the Platform's access rules. When a Booking is made, the Client and the Photographer see the information each needs to carry it out, which may include name, contact details, location, and event details. Messages are visible to the participants in the conversation.

4.2 What other users do with it is their responsibility. The Terms require Photographers to use Client information only to perform the Booking, but we do not control and are not responsible for how another user handles information you share with her.

4.3 Darh. Authorised personnel may access personal data, including messages, where needed for the purposes in Section 3.

5. Who we share it with

5.1 We do not sell your personal data to third parties for their own use. A transfer under 5.2(f) is not a sale for this purpose.

5.2 We share personal data, to the extent needed, with:

(a) service providers acting on our behalf, including providers of cloud hosting and storage, databases, authentication and sign-in, payment processing, email and notification delivery, mapping, crash and diagnostic reporting, monitoring, and customer support tools;

(b) other users, as described in Section 4;

(c) banks and payment providers, to process payments, refunds, transfers, and disputes;

(d) professional advisers, auditors, and insurers;

(e) competent authorities, courts, and law enforcement, where we believe disclosure is required by law or is necessary to protect the rights, safety, or property of any person or of Darh; and

(f) a successor or acquirer, in connection with a merger, sale, restructuring, or transfer of all or part of our business.

5.3 The third parties in 5.2(a) and (c) process data under their own terms and privacy notices as well as ours. The identity of our service providers may change from time to time.

6. Transfers outside the Kingdom

Personal data is stored and processed on infrastructure located outside the Kingdom of Saudi Arabia, and some of our service providers operate from other countries. By using the Platform you acknowledge this and, where the PDPL requires your consent to such a transfer, you give it.

7. How long we keep it

7.1 We keep personal data for as long as your Account is open and for as long afterwards as is needed for the purposes in Section 3, including to meet legal, tax, and accounting requirements, resolve disputes, enforce our agreements, and prevent a person whose Account was closed from returning.

7.2 Some data is kept only for limited periods set by the Platform Rules, and may be deleted earlier or later than you expect. This includes messages and the media within them, and delivered files. We do not undertake to keep any such data for any period. Keep your own copies.

7.3 When you delete your Account, your access ends and, after a period we determine, the personal data associated with your Account is deleted or anonymised, subject to the rest of this Section. Records we are required or entitled to keep are retained, in anonymised form where practicable, including financial and transaction records, Booking records, and reviews. The Terms set out when an Account cannot yet be deleted. Deletion cannot be undone.

7.4 Deletion is carried out by automated processes that may be delayed or may not reach every copy. Backups, logs, and stored files are cleared on their own cycles, so deleted data may persist in them for a time. Information that another user has already received, saved, or copied is outside our control.

8. Security

We apply technical and organisational measures that we consider appropriate to the nature of the data. No system is completely secure, and we do not guarantee the security of any data. You are responsible for keeping your sign-in details, your device, and any delivery code confidential. If we become aware of a breach that the PDPL requires us to report, we will notify the competent authority and the affected individuals as the PDPL requires.

9. Your rights

9.1 Subject to the conditions and exceptions in the PDPL, you have the right to:

(a) be informed about how and why your personal data is handled, which is the purpose of this Policy;

(b) access your personal data and obtain a copy of it;

(c) request the correction, completion, or updating of your personal data;

(d) request the destruction of personal data that is no longer needed; and

(e) withdraw your consent to processing that is based on consent.

9.2 You can exercise many of these rights from inside the application, including editing your profile and deleting your Account. For anything else, contact us using the details in Section 13. We may need to verify your identity before acting, and we will respond within the period the PDPL allows.

9.3 We may decline or limit a request where the PDPL permits, including where data must be retained to comply with a legal obligation, where a request is repetitive or manifestly unfounded, where complying would affect the rights of another person, or where the data is needed for a legal claim.

9.4 You may lodge a complaint with the competent authority in the Kingdom, currently the Saudi Data and Artificial Intelligence Authority.

10. Marketing

We may send you news and offers about the Platform. You can opt out at any time by the means we make available. Opting out does not stop service communications, such as those about Bookings, payments, and security.

11. Children and other people's data

11.1 The Platform is intended for adults. We do not knowingly open Accounts for minors. If we learn that we have, we may close the Account and delete its data.

11.2 Photographs and other Content may contain personal data about people who are not users of the Platform, including children. The user who takes, uploads, shares, or commissions that Content is solely responsible for having the consent of every person who appears in it, or of that person's guardian, and for her own compliance with the PDPL. The same applies to any information about another person that you enter on the Platform, such as the details of guests or of a venue. If you appear in Content on the Platform and object to it, contact us.

12. Changes to this Policy

We may change this Policy at any time. The updated version takes effect when it is published on the Platform, or on any later date it states. We may, but are not obliged to, notify you of a change. Your continued use of the Platform after a change takes effect means the updated Policy applies to you.

13. Contact

For any question or request about this Policy or your personal data, use the address below or the Help section of the application:

14. Governing law and language

This Policy is governed by the laws of the Kingdom of Saudi Arabia. It is a notice of our practices and does not create any right or obligation beyond those the PDPL provides, and the limits and exclusions of liability in the Terms apply to it. It is made in Arabic. Any translation is for convenience, and if a translation differs from the Arabic text, the Arabic text prevails.