Washy policy
Privacy Policy
This Privacy Policy explains how Washy handles personal data when you use our website, customer application, worker application, support channels and related services in Qatar and Saudi Arabia. It is designed to support applicable privacy requirements, including Saudi Arabia's Personal Data Protection Law and Qatar Law No. 13 of 2016 on Personal Data Privacy Protection.
1. Information we may collect
Depending on how you use Washy, we may collect information you provide directly, information generated by your use of the platform and limited technical information required to operate the service.
- Account and contact details such as name, email address and phone number.
- Saved addresses, selected service location and map coordinates when location access is used.
- Vehicle information such as vehicle type, category, registration details and saved vehicle preferences.
- Booking, package, order, invoice, wallet, promotion, tip and support history where those features are available.
- Messages, complaints, ratings, support requests and information submitted through contact or worker application forms.
- Before-and-after service images and service notes where required for order verification or quality control.
- Worker or applicant information required for recruitment, identity verification, assignment and operational administration.
- Device, browser, language, country, theme, notification token and basic security or diagnostic information.
2. How we use personal data
- Create and manage accounts, vehicles, addresses and preferences.
- Accept, schedule, assign, track and complete car-wash orders.
- Calculate market and vehicle-specific pricing, process packages, tips and payments, and issue receipts or invoices.
- Provide customer support, investigate complaints and deliver appropriate service remedies.
- Send transactional messages, booking updates, security notices and requested notifications.
- Prevent fraud, abuse, unauthorized access and misuse of Washy systems.
- Improve service quality, capacity, safety, reliability and customer experience.
- Comply with legal, tax, accounting, regulatory and dispute-resolution obligations.
3. Location information
Location information is used to check service-zone availability, save addresses, help assign workers, provide navigation and support order tracking. Where device permission is required, you can manage location permission through your device settings.
Washy should only use precise location where it is needed for a requested service or feature. Disabling location may prevent some booking or tracking functions from working correctly.
4. Payments and financial information
Card and payment transactions may be processed by third-party payment providers such as Stripe or other approved providers available in the relevant market. Washy may receive transaction references, payment status, amount, currency and limited billing information, but should not store full card numbers or card security codes when payment is handled by a compliant payment provider.
Payment providers process information under their own terms and privacy notices. Customers should review the notice presented by the payment provider used at checkout.
5. When information may be shared
Washy may share only the information reasonably necessary to deliver the service with authorized workers, supervisors and service providers. This can include payment processors, cloud hosting providers, authentication providers, maps and navigation providers, messaging or notification providers, customer-support systems and professional advisers.
We may also disclose information where required by law, a valid government request, court process, fraud investigation, safety requirement or to establish, exercise or defend legal claims.
Washy does not sell personal data to advertisers.
6. Legal basis, consent and marketing
Washy processes personal data only when there is an appropriate legal basis under the law that applies to the relevant market, such as performing a customer contract, complying with legal obligations, protecting legitimate operational or security interests, or obtaining consent where consent is required.
Promotional messages should be sent only where permitted. You can use available notification settings or the unsubscribe method in a marketing message to stop optional marketing communications without affecting essential booking or security messages.
7. Retention and security
Personal data is retained only for as long as reasonably necessary for the purposes described in this policy, including order history, accounting, legal compliance, dispute handling, fraud prevention and legitimate operational needs. Different categories of data may have different retention periods.
Washy uses reasonable technical and organizational safeguards designed to protect personal data against unauthorized access, loss, alteration, misuse or disclosure. No online system can guarantee absolute security, so users should also protect passwords, verification codes and devices.
8. International and cross-border processing
Some technology or payment providers may process information in a country different from the country where the service is booked. Where cross-border transfer rules apply, Washy will use transfer arrangements and safeguards required by applicable law.
9. Your privacy rights
Depending on the law that applies to you, you may have rights to be informed about processing, request access to personal data, request correction or completion, request deletion or destruction in eligible cases, withdraw consent where processing depends on consent, and raise a privacy complaint with the competent authority.
To submit a privacy request, contact admin@washy.services. We may need to verify your identity before acting on a request and may retain information where the law requires or permits us to do so.
10. Children and policy changes
Washy customer booking services are intended for people who can lawfully enter into the relevant transaction. We do not knowingly design the customer service to collect children's personal data without appropriate authorization.
We may update this Privacy Policy when our services, providers or legal obligations change. Material changes will be reflected by updating the effective date and, where required, providing additional notice or requesting consent.
