Who we are and what this covers

In this policy, "Harage" means HARAGE Q FOR TRADING IN USED APPLIANCE. This policy covers harage.com, the Harage mobile applications and customer support, including account access, buying, seller submissions, pickup, delivery and return requests.

Information used to provide the service

Account and contact information includes the details you provide, such as your name, email address and phone number. Orders and seller submissions include product or item details, photographs, amounts, statuses and related correspondence. Return requests may include your explanation and evidence images.

Delivery and pickup require your address and selected map location. If you choose a device-location feature, permission is requested by your device or browser. You can enter or select an address instead.

Technical information and session identifiers help operate the website, maintain sign-in, protect requests and investigate service issues. Do not include passwords, full card details or unrelated sensitive information in support messages or uploaded images.

How information is used

Harage uses information to manage accounts, review items offered for sale, process purchases, arrange pickup and delivery, handle returns and support, communicate order updates and protect the service against misuse.

Marketing preferences are separate from operational messages about your account or orders. Promotional communications require the consent required by applicable law; you can withdraw it using available unsubscribe or notification controls or by contacting support. Essential order messages are not permission for advertising.

Website payments

New website purchases currently use Cash on Delivery. You are not asked to enter card details for a Cash on Delivery order. Harage uses order amounts and payment-status information to administer your order and provide support. This does not mean historical payment records or related support information are erased.

Mobile-app and earlier online payments

Payment options can differ between the website and mobile apps. Where SkipCash is offered and you choose it, Harage sends your name, email address, phone number, street address and country, payment amount, and order and transaction references to SkipCash to set up the payment. This disclosure does not enable online payments at website checkout.

Card entry and payment authentication take place in the payment provider's checkout flow. Harage uses payment and refund references, amounts and outcome information to update your order, reconcile payments and handle support. Earlier online transactions may continue to have related payment and refund records even if that payment option is no longer offered.

SkipCash describes its own handling of checkout, technical and transaction information, sharing with payment partners and international processing in its privacy notice at https://skipcash.app/privacypolicy. Its retention practices are separate from Harage's; they do not establish how long Harage keeps your records.

Service providers and disclosures

Harage staff handle delivery, pickup and customer support internally. Harage is the buyer or seller in each transaction, not a customer-to-customer classifieds service. Technical providers support hosting, storage, sign-in, communications and maps.

Configured technical services include Google Cloud for backend hosting and storage, MongoDB Atlas for database hosting on Amazon Web Services (AWS), SendGrid for email, Twilio for SMS and Firebase for mobile push notifications. Information relevant to these functions is processed through those services when they are used. Database records include account, order, seller-submission, return and related operational information.

Email and SMS services process recipient contact details and message content for the communications they deliver. Mobile push services use notification-routing identifiers and notification content. These providers support Harage's communications; they are distinct from Harage's internal delivery and customer-support team.

The new web marketplace is hosted through Sites on Cloudflare infrastructure, separately from Harage's backend and media storage. Website requests pass through this hosting layer to serve pages and operate the service. The Qatar location of Harage's backend does not mean all website processing occurs in Qatar.

If you choose Google or Apple sign-in, or use a third-party map, that provider also processes information under its own privacy terms. Review those terms when using the feature.

Primary backend and media storage is in Qatar. The MongoDB Atlas database is hosted on AWS in Paris, France (eu-west-3); this is separate from the Qatar backend. Recovery copies are also stored in Europe, including Google Cloud's Netherlands region (europe-west4), so storage is not limited to Qatar. These storage locations do not mean all support, communications, authentication or website processing is confined to those countries. Technical providers may process information in other locations.

Information may also be disclosed where required by law or necessary to address fraud, enforce rights or protect people and the service.

A business transfer or reorganization may require relevant records to be transferred to a successor, subject to applicable law, confidentiality protections and any required notice or consent. This is not permission for unrelated advertising use. Provider access and legal disclosures should be limited to the information necessary for the relevant purpose.

Cookies and browser storage

The new marketplace uses cookies for account sessions, device identification and request security. Local browser storage can retain up to 30 recent search suggestions and eight recently viewed products, without a fixed automatic expiry. Session storage supports checkout recovery and interface state. Clearing browser storage removes these browser-held entries and may sign you out or interrupt some features.

The existing WordPress website includes order-attribution and CreativeMail-related scripts. Their presence is distinct from the new marketplace's essential storage and does not establish that every optional tracking feature is active. Essential session cookies are not treated as consent to optional tracking.

Your information and account deletion

You can update available account details and saved addresses through your profile. Use the account-deletion option or contact support for help. Outstanding transactions may need to be resolved before deletion can complete.

Contact Harage Customer Support at customer.support@harage.com to ask about access, correction, deletion or other applicable privacy rights. Identity verification may be needed to protect your account.

Account deletion does not erase every record. Order history and original contact details remain in retained records, and recovery copies are not immediately removed when source data is deleted. You can ask support which records remain and the reason for retaining them. Closing an account is not a promise that all identifiable transaction records have been anonymized.

Retention and deletion limits

Retention decisions take account of the purpose of each record, unresolved orders, returns and payments, applicable record-keeping duties, complaints, disputes and security needs. A legal preservation requirement may prevent deletion of particular records. These criteria do not create an unlimited permission to retain information for unrelated purposes.

Harage has not yet established a single automatic deletion deadline for all account, transaction, support and uploaded-media records. This policy therefore does not promise deletion after a fixed number of months or years. A minimum backup-retention setting is not an expiry date, and some recovery copies currently have no automatic expiry configured. Backup-expiry decisions remain deferred; no new expiry or purge schedule is promised here.

Browser-held searches and recently viewed products can be cleared from your device as described above. Clearing them does not delete server-side records. Technical logs and provider-held records can follow separate retention settings; they must not be confused with a universal customer-data deletion period.

Security, external services and updates

No internet transmission or storage system is completely secure. Protect your login details and contact support promptly if you suspect unauthorized access. External websites and sign-in providers have their own privacy policies.

Changes to this policy will be published with an effective date.

Contact Harage