Privacy Policy

1. Introduction

This Privacy Policy explains how Local collects, uses, stores, shares, and protects your personal data when you use our platform, including our website, mobile applications, and QR-based interfaces (collectively, the "Platform"). The Platform is operated by the relevant Local affiliate in your jurisdiction (referred to herein as "Local," the "Company," "we," "us," or "our").

Local operates a digital marketplace where consumers can discover, browse, and order from hospitality and service venues, including restaurants, hotels, cafés, and healthcare providers ("Merchant Partners").

We are committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws in the jurisdictions in which we operate, including the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, the Bahrain Personal Data Protection Law (Law No. 30 of 2018), the Saudi Arabia Personal Data Protection Law (Royal Decree M/19 of 2021), and any other applicable data protection legislation.

This Privacy Policy should be read in conjunction with our Terms and Conditions and our Refund and Cancellation Policy, which are available on the Platform.

By using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your personal data, please do not use the Platform.

2. Scope

This Privacy Policy applies to all users of the Platform, whether you access it via our website, mobile application, QR code interface, or explore page, and whether you create an account or use the Platform as a guest.

This Privacy Policy does not cover third-party websites, applications, or services that may be linked from the Platform. We are not responsible for the privacy practices of any third party.

3. Information We Collect

We collect information in three ways: information you provide to us directly, information we collect automatically through your use of the Platform, and information we receive from third parties.

Information You Provide

When you create an account, we collect your name, email address, phone number, and password.

When you place an order or complete a transaction (with or without an account), we collect your name, contact information, order details, and any preferences or instructions you provide.

When you contact us for support, provide feedback, respond to a survey, or otherwise communicate with us, we collect the content of your communication and any information you choose to share.

Information We Collect Automatically

When you use the Platform, we automatically collect certain technical and usage data, including:

Device information such as device type, operating system, hardware version, browser type and version, device identifiers, and language settings.

Network information such as your IP address, mobile carrier or internet service provider, and connection type.

Usage data such as pages visited, features used, time spent on the Platform, access times, referring URLs, and interaction patterns.

Transaction data such as order details, items selected, transaction amounts, payment method type (though not your full card details), timestamps, and Merchant Partner details.

Approximate location data inferred from your IP address. We do not collect precise GPS location unless you explicitly enable location services and grant permission, in which case we may use your location to show you nearby Merchant Partners on the explore page.

Information from Third Parties

We may receive information about you from our payment service providers (such as transaction confirmation and fraud screening results), from Merchant Partners (such as order fulfilment status), and from analytics providers that help us understand Platform usage.

4. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to recognise your device, remember your preferences, understand how you use the Platform, and improve your experience.

The types of cookies we use include:

Essential cookies that are necessary for the Platform to function, including session management, authentication, and security.

Analytics cookies that help us understand how users interact with the Platform, which pages are visited, and where users encounter issues. We may use third-party analytics services such as Google Analytics for this purpose.

Preference cookies that remember your settings and choices, such as language and region preferences.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform.

5. How We Use Your Information

We use the information we collect for the following purposes:

To provide and operate the Platform, including processing your orders, facilitating payments, and coordinating fulfilment with Merchant Partners.

To manage your account, verify your identity, and maintain the security of your account.

To communicate with you about your orders, transactions, account activity, and customer support requests.

To display relevant Merchant Partners, menus, and offers based on your location and preferences.

To improve the Platform, including analysing usage patterns, diagnosing technical issues, testing new features, and enhancing the user experience.

To send you promotional communications, offers, and updates about Local and our Merchant Partners, where you have consented or where permitted by applicable law.

To detect, investigate, and prevent fraud, unauthorised transactions, and other illegal or harmful activity.

To comply with applicable laws, regulations, legal processes, and governmental requests.

To enforce our Terms and Conditions and protect the rights, property, and safety of Local, our users, and our Merchant Partners.

6. How We Share Your Information

We do not sell your personal data to third parties.

We may share your information with the following categories of recipients, solely to the extent necessary for the purposes described in this Privacy Policy:

Merchant Partners. When you place an order, we share relevant order details (such as items ordered, table number, and any special instructions) with the Merchant Partner to enable fulfilment. Where you create an account, sign in at a Merchant Partner venue, or participate in loyalty or rewards programmes offered through the Platform, we may also share your profile information (such as your name, email address, and visit or order history) with the relevant Merchant Partner to enable personalised service, loyalty tracking, and promotional offers. By creating an account, signing in at a venue, or opting into a loyalty programme, you consent to this sharing. We do not share your full payment details with Merchant Partners.

Payment Service Providers. We share transaction data with licensed and regulated payment service providers who process payments on our behalf. These providers are bound by their own regulatory obligations and data protection standards.

Service Providers. We may share data with third-party service providers who perform services on our behalf, such as cloud hosting, analytics, customer support tools, email delivery, and fraud detection. These providers are contractually obligated to protect your data and may only use it for the purposes we specify.

Legal and Regulatory. We may disclose your information where required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of Local, our users, or the public.

Corporate Transactions. In the event of a merger, acquisition, reorganisation, or sale of assets, your personal data may be transferred to the successor entity, subject to the same protections described in this Privacy Policy.

7. Cross-Border Data Transfers

Local operates across multiple jurisdictions. Your personal data may be transferred to, stored in, or processed in a country other than your country of residence, including by Local affiliates, service providers, or payment partners located in other jurisdictions.

Where we transfer personal data across borders, we take appropriate measures to ensure that your data is protected in accordance with applicable data protection laws, including through contractual safeguards with recipients and compliance with any transfer requirements imposed by the relevant data protection authority in your jurisdiction.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations.

Account data is retained for as long as your account remains active and for a reasonable period thereafter in case you wish to reactivate your account or in case we need to address any post-closure queries.

Transaction data is retained for the period required by applicable tax, financial reporting, and regulatory obligations in the relevant jurisdiction.

When personal data is no longer required, we securely delete or anonymise it in accordance with our data retention procedures.

9. Data Security

We endeavour to implement appropriate technical and organisational measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures may include:

The use of encryption technologies and secure protocols for the transmission and storage of data, where commercially and technically practicable.

Access controls designed to restrict internal access to personal data to authorised personnel who require it for legitimate business purposes.

Periodic reviews of our security practices and systems to identify and address potential vulnerabilities.

Secure handling and processing of payment data in accordance with applicable payment card industry security standards, through our licensed payment service providers.

While we take commercially reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of your personal data and shall not be liable for any unauthorised access, disclosure, or loss that occurs despite our reasonable efforts, except to the extent caused by our wilful misconduct or gross negligence.

10. Your Rights

Depending on the jurisdiction in which you reside, you may have the following rights regarding your personal data:

Right of Access. You may request a copy of the personal data we hold about you.

Right of Correction. You may request that we correct any inaccurate or incomplete personal data.

Right of Deletion. You may request that we delete your personal data, subject to any legal or regulatory obligations that require us to retain it.

Right to Restrict Processing. You may request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability. You may request that we provide your personal data in a structured, commonly used, and machine-readable format, where technically feasible.

Right to Object. You may object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.

Right to Withdraw Consent. Where processing is based on your consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us using the details provided in the Contact Us section below. We will respond to your request within the timeframe required by applicable law.

We may need to verify your identity before processing your request. If we are unable to fulfil a request due to a legal exception, we will explain the reason.

11. Marketing Communications

We may send you promotional communications about Local, our Merchant Partners, offers, and updates, where you have consented or where permitted by applicable law.

You may opt out of promotional communications at any time by:

Following the unsubscribe link included in any marketing email.

Adjusting your communication preferences in your account settings.

Contacting us using the details in the Contact Us section below.

Opting out of promotional communications will not affect transactional or service-related communications (such as order confirmations, payment receipts, or account security notifications).

12. Children's Privacy

The Platform is not intended for use by individuals under the age of 18 (or the age of legal majority in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take prompt steps to delete it.

If you believe that a child has provided personal data to us, please contact us using the details in the Contact Us section below.

13. Call Recording and Communications

Local may monitor or record telephone calls and other communications with you for quality assurance, training, dispute resolution, and compliance purposes, where permitted by applicable law. By engaging with Local through these channels, you acknowledge and consent to such monitoring and recording.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or for other operational reasons. If we make material changes, we will post the revised Privacy Policy on the Platform and update the "Last Updated" date.

Your continued use of the Platform after any changes are posted constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:

Email: privacy@uselocal.co Website: uselocal.co/support

© 2026 Local. All rights reserved.