سياسة الخصوصيةPrivacy Policy

1. Who we are

Hubaib is an app that connects customers with grill teams who provide their service at the customer's own event, within the Sultanate of Oman.

Data controller: Sulaiman Al-Busaidi — Muscat, Oman.

For anything about your personal data: privacy@hubaib.com

This policy is given under the Personal Data Protection Law issued by Royal Decree 6/2022 and its executive regulations.

2. What we collect

The service is for people aged 18 and over. We do not knowingly collect children's data.

3. Basis for processing

We process your data on the basis of your explicit consent, given when you create an account and when you confirm a booking, and as far as is necessary to carry out the booking you asked for.

You may withdraw your consent at any time, though doing so may prevent us from completing a booking already in progress.

4. Who we share it with

• The provider you booked: your name, phone number, the event address and time, and your order. This is what they need to deliver the service; nothing else is shared.
• The payment gateway: the amount and a transaction reference only.
• Google Firebase as our processor (hosting, database, sign-in).
• Competent authorities where we are legally required to.

We do not sell your personal data, and we do not share it for advertising.

5. Where your data is stored

Data is stored on Google Firebase servers, which may be located outside the Sultanate of Oman. By using the service you consent to that transfer, and we undertake to apply the safeguards the law requires to protect it.

6. How long we keep it

• Account data: for as long as your account is open.
• Booking and payment records: for as long as accounting and legal requirements demand.
• When you delete your account we delete your personal data, keeping only what the law requires us to keep: we delete your profile (name, phone number and email) and your sign-in, and wipe the address, map pin, note and phone number from your past bookings and your name from your reviews. We keep, without your name, booking dates, dishes and amounts for as long as accounting and legal requirements demand, and the stars and text of your reviews.
• You can delete your account in the app (Account → Delete my account), or ask us through the account deletion page. A paid booking that is not finished yet has to be completed first.

7. Your rights

Under the law you have the right to:

• See your data and obtain a copy of it.
• Correct anything that is wrong.
• Ask us to delete it.
• Withdraw your consent.
• Have your data transferred to another provider.

Send your request to privacy@hubaib.com. We will respond within 45 days at the latest, and will suspend processing of your data while the request is considered.

8. Security and data incidents

We protect your data with encryption in transit, with database permission rules that stop any user reading another user's data, and by requiring a verified phone number before a booking can be placed.

If an incident affects your personal data we will notify the regulator within 72 hours, and will tell you directly where the incident puts your rights at risk.

9. Changes to this policy

We may update this policy and will publish the new date at the top of this page. Where a change is significant we will tell you inside the app before it takes effect.