Privacy Policy

Farahak operates an online marketplace that helps clients in Jordan find and book verified event vendors (venues, photographers, caterers, planners, and other service providers). This Privacy Policy explains how we handle personal data for visitors, clients, and vendors using farahak.com and related services (the "Service").

If you have any questions about this policy or your data, contact us at [email protected].

Account data: name, email, phone (optional), city, and preferred language when you sign up.

Event data: event date, guest count, budget range, and message content when you send a quote request or message a vendor.

Vendor application data: business name, category, service description, pricing range, identity and licence documents you upload during onboarding.

Usage data: pages viewed, search filters, and error logs, collected automatically to keep the Service working and detect abuse.

Cookies: an authentication session cookie (essential), a locale preference cookie, and limited analytics storage. We do not use third-party advertising cookies.

To operate the Service: create your account, route inquiries between clients and vendors, process bookings, and send transactional emails.

To verify vendor identities and keep the marketplace trustworthy (manual checks of uploaded documents).

To enforce our rate limits, detect abuse, and investigate security incidents.

To communicate with you about your account, inquiries, bookings, and important policy updates.

We do not sell your personal data to third parties. We do not share your contact details directly with vendors — communication is relayed through Farahak.

When a client sends a quote request, the vendor sees the event details (date, guest count, budget range, and message) and the client's display name. The client's phone number and email address are not shared with the vendor. All messages are relayed through Farahak until the client chooses to share further details.

Messages, quotes, and bookings are stored so you can review them from your dashboard and so we can support disputes.

Account data is kept while your account is active. You may request deletion of your account and associated personal data at any time.

Inquiry and booking records are retained for up to 24 months after the last interaction, to support disputes and accounting. Anonymous aggregate usage data may be retained longer.

Uploaded identity and licence documents for vendor applications are kept only as long as needed to review the application, and are deleted within 90 days of a final decision unless required for compliance.

Data is stored in managed databases and file storage (Supabase) hosted in a secured data centre region. Access is restricted to authorised Farahak staff and follows the principle of least privilege.

Passwords are hashed and never stored in plain text. Transport is encrypted over HTTPS.

No system is perfectly secure. Please contact us immediately at [email protected] if you suspect your account has been compromised.

You can access, correct, or delete your personal data at any time from your dashboard, or by emailing [email protected]. We aim to respond within 30 days.

You may withdraw consent for non-essential processing (such as optional analytics) at any time.

You may also object to a specific use of your data, restrict processing, or request a portable copy of your data.

Farahak is not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy from time to time. Material changes will be announced by email or in-app notice at least 14 days before they take effect. The "last updated" date below reflects the most recent revision.

This policy is governed by the laws of the Hashemite Kingdom of Jordan. Any disputes relating to your personal data will be handled by the competent courts of Amman, Jordan.