Privacy policy
WeBazz is a brand operated by TASKWREN LIMITED, a private limited company registered in England and Wales under company number 17389116. Registered office: 71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. ICO registration: ZC232056.
TASKWREN LIMITED is the controller of the personal data processed through the WeBazz app and website. This policy explains what we collect, why, who we share it with, how long we keep it and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
1. What we collect You give us: - Your mobile number (to sign in) and, if you set one, a password (stored only as a one-way hash). - Your display name, username, profile photo if you add one, and governorate. - Delivery addresses you save. - Listings you create: text, prices and photographs. Photographs are re-encoded when uploaded, which removes hidden metadata such as GPS location. - Offers, orders, cancellations, returns, reviews, reports, support tickets and the messages you exchange with other users. - Information you send through the website contact form.
Collected automatically: - Device information needed for security: device model, operating system version, app version and a device identifier generated by the app. - IP addresses and security logs (for example sign-in attempts) to protect accounts and prevent abuse. - Basic usage events about how the app is used (for example "a listing was viewed", "a search was performed"). These record no free text: not the words you searched for, not your messages.
We do not collect your precise location, your contacts, card details or any payment information. We use no advertising identifiers and no third-party advertising or tracking.
2. Why we use it, and our lawful bases - To provide WeBazz — your account, listings, offers, orders, messaging, deliveries and collections, returns and support (performance of our contract with you). - To keep WeBazz safe — verifying sign-ins, preventing fraud, spam and abuse, moderating content, investigating reports (our legitimate interests in a safe marketplace, and legal obligations). - To improve WeBazz — understanding which features are used, using aggregated usage events (legitimate interests). - To comply with the law — keeping records we are required to keep and responding to lawful requests (legal obligation). - To contact you about your account, orders and important changes, such as new versions of these policies (contract and legitimate interests). We do not send marketing.
3. Who can see what - Other users see your public profile (display name, username, governorate, profile photo, ratings) and your listings. - Your phone number is never shown to other users. - Your delivery address is shown only to the seller of an order you choose to have shipped, while that order is being fulfilled. Personal collection shares no address. - Messages are private between the people in the conversation. WeBazz staff do not browse conversations; one is opened only when a report or support request requires it, and the reason, the staff member and the time are recorded.
4. Service providers We use these providers to run WeBazz. They process data only on our instructions: - Railway — application hosting and database (servers in the European Union, Netherlands). - Cloudflare — content delivery, image storage (R2), DNS, security and bot protection. - Meta Platforms (WhatsApp Business Platform) — sending your sign-in verification codes to your WhatsApp.
We may also disclose information where the law requires it or to protect the rights and safety of users and the public.
5. International transfers Our main servers are in the European Union, which the UK recognises as providing adequate protection. Some providers (Cloudflare, Meta) may process data in other countries, including the United States; where they do, transfers are protected by the UK's approved safeguards, such as the UK International Data Transfer Addendum or the UK–US data bridge.
6. How long we keep it - Your account data is kept while your account is open. - When you delete your account, your personal data is deleted or anonymised. We keep records of orders, moderation decisions and security logs where we must, or need to for the protection of other users and for legal claims, for no longer than necessary (generally up to 6 years). - Sign-in verification codes are never stored in readable form; only a one-way fingerprint is kept for a short time.
7. Your rights You have the right to: access your data; correct it; delete it; restrict or object to our use of it; and receive it in a portable form. You can download a copy of your data and delete your account in the app under Account → Privacy. For anything else, contact us (below). We reply within one month.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO): https://ico.org.uk. We would appreciate the chance to resolve it first.