Privacy
policy.
This policy explains how Octopus for Computer Programming W.L.L (CR 160062-1, Kingdom of Bahrain) ("Octopus", "we", "us") collects, uses and protects personal data when you use the Octopus Social Marketplace app and the website theoctopusapp.co (together, the "Service"). We process personal data in line with Bahrain's Personal Data Protection Law (Law No. 30 of 2018).
1. Data we collect
| What | Examples | Why |
|---|---|---|
| Account details | First and last name, email address, mobile number, password (stored encrypted), account type (customer, service provider or supplier) | To create and secure your account and contact you about it |
| Optional profile details | Country, birth date, gender, profile photo, Instagram username | To personalise your profile, only if you choose to add them |
| Orders, bookings and tickets | Items ordered, delivery or pickup choice, delivery address and time, service bookings, event tickets, order status | To deliver what you ordered or booked and show your history |
| Payment information | Payment method type (for example BenefitPay or card) and payment reference | To record payments. Card details are handled by our payment provider and are not stored by Octopus. |
| Business details (vendors) | Store or business name, description, products, services, prices, photos, opening hours, events | To show your business to customers on Octopus |
| Reviews and activity | Ratings, reviews, replies, saved items, follows | To run the marketplace features you use |
| Technical data | Device type, app version, sign-in times, error logs | To keep the Service secure and working |
2. How we use your data
- To provide the Service: accounts, shopping, bookings, tickets and vendor tools.
- To share the details needed to complete an order or booking with the store or service provider involved (for example your name, delivery address and order items).
- To send account messages such as verification codes and order or booking updates.
- To keep the Service safe, prevent fraud and meet legal obligations.
We do not sell your personal data.
3. Who we share data with
- Stores and service providers you order from or book with, only what they need to fulfil your order or booking.
- Service providers that run our platform: our hosting and database provider (Supabase), our email provider for verification codes and notifications, and our payment provider (such as Tap Payments) when online payment is used. They process data only on our instructions.
- Authorities, when required by law.
Our database is hosted outside Bahrain (in South Korea). Where data is transferred outside Bahrain, we use providers that apply appropriate security safeguards.
4. How long we keep data
We keep your account data while your account is active. When you delete your account, we delete or anonymise your personal data, except records we must keep by law (for example transaction records), which we keep for 5 years and then delete.
5. Your rights
You can ask to access, correct or delete your personal data, or object to how we use it. You can edit most details yourself in the app under Profile → Personal information. To delete your account, see Delete your account. For any other request, email contact@theoctopusapp.co.
6. Security
Data is sent over encrypted connections, passwords are stored encrypted, and access to data is limited so each account can only see what it is allowed to see.
7. Children
The Service is not intended for anyone under 18. We do not knowingly collect data from them.
8. Changes
We may update this policy. We will post the new version here and change the date above, and tell you in the app if the changes are significant.
Octopus for Computer Programming W.L.L · Kingdom of Bahrain
Email: contact@theoctopusapp.co · Phone: +973 1366 0600