Legal

Privacy Policy

Effective Date: 7 August 2026
Last Updated: 7 August 2026

HayyWorld ("we," "us," or "our") operates an online marketplace connecting buyers and sellers of products and services at https://www.hayyworld.com (the "Platform" or "Services"). HayyWorld is operated by Centasys Ltd ("the Company"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Services, and describes your rights regarding that information.

By using our Services, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our Services.

This policy should be read alongside our Cookie Policy and Terms of Use.

1. Who This Policy Applies To

This policy applies to:

Buyers browsing or purchasing products/services on the Platform
Sellers/Service Providers listing products or services
Visitors browsing the Platform without an account
Business partners and vendors who interact with our Services

2. Information We Collect

2.1 Information You Provide Directly

Account information: name, email, phone number, password, profile photo
Identity verification: government ID, business registration, tax ID (for sellers, as required by law or fraud prevention)
Payment information: billing address, payment card details (processed via third-party payment processors), bank account details for seller payouts
Listing content: product/service descriptions, photos, pricing, availability
Communications: messages between buyers and sellers, customer support inquiries, reviews and ratings
Shipping/delivery information: addresses, delivery preferences

2.2 Information Collected Automatically

Device and usage data: IP address, browser type, operating system, pages viewed, referring URLs, timestamps
Location data: approximate location based on IP address, or precise location if you grant permission (e.g., for local service listings)
Cookies and similar technologies: as described in our Cookie Policy

2.3 Information From Third Parties

Payment processors (e.g., Stripe, PayPal) — transaction confirmations and fraud signals
Identity verification services — verification results
Social login providers (e.g., Google, Facebook) — basic profile data if you register via social login
Marketing and analytics partners — aggregated audience insights
Public sources — for fraud prevention or compliance checks, where legally permitted

3. How We Use Your Information

We use collected information to:

Create and manage buyer and seller accounts
Facilitate transactions, bookings, and payments between buyers and sellers
Verify identity and prevent fraud, money laundering, and abuse
Provide customer support and resolve disputes
Personalize search results, recommendations, and marketing
Send transactional communications (order confirmations, shipping updates, policy changes)
Send marketing communications, where permitted, and in accordance with your preferences
Monitor and enforce compliance with our Terms of Use, including ethical and legal standards
Analyze usage trends to improve the Platform
Comply with legal obligations, respond to lawful requests, and protect our rights and the rights of others

4. How We Share Your Information

We do not sell your personal information for money. We may share information as follows:

4.1 With Other Users

Buyers' names, general location, and order details are shared with sellers to fulfill transactions
Sellers' business name, listings, ratings, and response times are visible to buyers
Messages sent through the Platform are shared with the intended recipient

4.2 With Service Providers

We share information with vendors who perform services on our behalf, including:

Payment processors and fraud prevention services
Cloud hosting and data storage providers
Customer support and live chat tools
Shipping and logistics partners
Analytics and advertising providers (see Cookie Policy)

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 For Legal and Safety Reasons

We may disclose information if we believe in good faith it is necessary to:

Comply with a legal obligation, subpoena, court order, or government request
Enforce our Terms of Use, including investigating breaches of legal or ethical standards
Protect the rights, property, or safety of HayyWorld, our users, or the public
Detect, prevent, or address fraud, security, or technical issues

4.4 Business Transfers

If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections.

4.5 With Your Consent

We may share information for other purposes with your explicit consent.

5. Data Retention

We retain personal information for as long as necessary to:

Provide the Services and maintain your account
Comply with legal, tax, accounting, or regulatory requirements
Resolve disputes and enforce our agreements
Prevent fraud and abuse

Typical retention periods:

Data Type	Retention Period
Account information	Duration of account + [3-7] years after closure
Transaction records	[7] years (tax/legal compliance)
Identity verification documents	As required by applicable law
Marketing preferences	Until you opt out or account is deleted
Support communications	[2-3] years

When information is no longer needed, we securely delete or anonymize it.

6. Data Security

We implement industry-standard technical and organizational measures to protect your information, including:

Encryption of data in transit (TLS/SSL) and at rest
Access controls limiting employee access to personal data
Regular security assessments and monitoring
Secure payment processing via PCI-DSS compliant providers

No method of transmission or storage is 100% secure. If we become aware of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 General Rights (All Users)

Access — request a copy of the personal information we hold about you
Correction — update inaccurate or incomplete information
Deletion — request deletion of your personal information, subject to legal retention requirements
Portability — receive your data in a structured, machine-readable format
Objection — object to certain processing, such as direct marketing
Restriction — request that we limit processing in certain circumstances

7.2 EU/UK/EEA Users (GDPR)

You have the rights above under the General Data Protection Regulation (including the UK GDPR), plus the right to lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner's Office (ICO). Our legal bases for processing include contract performance, legitimate interests, legal obligation, and consent.

7.3 California Residents (CCPA/CPRA)

You have the right to know what personal information is collected, to request deletion, to opt out of the "sale" or "sharing" of personal information (including for cross-context behavioral advertising), and to non-discrimination for exercising your rights. To opt out, visit [Do Not Sell or Share My Personal Information].

7.4 Other Jurisdictions

Residents of other jurisdictions with applicable privacy laws (e.g., Brazil's LGPD, Canada's PIPEDA, Australia's Privacy Act) may have similar rights. Contact us to exercise them.

To exercise any right, contact us at privacy@hayyworld.com. We may need to verify your identity before fulfilling requests.

8. International Data Transfers

Because our Platform serves users globally, your information may be transferred to and processed in countries other than your own, including the United Kingdom, where our servers are hosted. Where required, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms to protect data transferred internationally.

9. Children's Privacy

Our Services are not directed to children under [13/16]. We do not knowingly collect personal information from children. If we learn that we have collected information from a child without parental consent, we will delete it promptly. Parents who believe their child has provided information to us should contact privacy@hayyworld.com.

10. Third-Party Links and Integrations

Our Platform may contain links to third-party websites, plugins, or integrated services (e.g., payment processors, social media, shipping carriers). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Enforcement, Investigations, and Right to Restrict Access

To protect the integrity, safety, and legality of our marketplace, we may use personal information (including account activity, transaction history, and communications) to:

Investigate suspected violations of our Terms of Use, including legal violations or breaches of the ethical standards we set for the Platform
Verify compliance with applicable laws (e.g., consumer protection, anti-fraud, export control, intellectual property law)
Take enforcement action — including warnings, suspension, or denial or termination of access to the Services — against accounts found to be in breach, as further described in our Terms of Use

We retain records related to such investigations as necessary to comply with legal obligations, defend against claims, and prevent repeat violations, even after an account is suspended or terminated.

12. Automated Decision-Making

We may use automated systems (e.g., fraud scoring, content moderation tools) to flag potentially fraudulent transactions or listings that violate our standards. Where such automated decisions produce legal or similarly significant effects (e.g., account suspension), you may request human review, subject to applicable law.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated version with a revised "Last Updated" date and, for material changes, provide additional notice (e.g., email or Platform banner) or seek consent where required by law.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

HayyWorld (operated by Centasys Ltd)
Email: privacy@hayyworld.com
Data Protection Officer: privacy@hayyworld.com