Privacy Policy
Last updated: August 22, 2026 · Applicable in the Lebanese Republic
The short version
- We collect what we need to send the right professional to the right address at the right time — mainly your name, phone number, address and job details.
- Your full address and phone number are shared with the Service Provider once you confirm a booking. That is how the service works.
- We never sell your personal data.
- Our servers are located outside Lebanon, so using Zabbetli involves transferring your data abroad.
- You can ask to see, correct or delete your data at any time by writing to privacy@zabbetli.com.
This summary is for convenience only. The full policy below governs.
1. Introduction
This Privacy Policy explains how Zabbetli ("we," "our," or "us") collects, uses, shares and protects personal information when you use our website and mobile application (the "Platform").
The data controller is Zabbetli, based in and operating from the Lebanese Republic. You can reach us about any privacy matter at privacy@zabbetli.com.
We process personal data in accordance with the applicable law of the Lebanese Republic, in particular Law No. 81/2018 on Electronic Transactions and Personal Data. This policy applies to both Customers and Service Providers, and should be read together with our Terms and Conditions.
2. Information We Collect
From everyone who registers:
- Account information: name, mobile number, email address, password, profile photo where you add one.
- Verification data: the one-time codes we send by SMS or WhatsApp to confirm your number.
- Social sign-in: if you choose to register or log in with Google or Facebook, we receive your name, email address and profile picture from that provider. We do not receive your password, and we do not post anything to your social accounts. Your use of those sign-in options is also governed by Google's and Facebook's own privacy policies.
From Customers:
- Service address: your street address, building, floor and access notes. This is sensitive in practice — it tells someone where you live — and we treat it accordingly.
- Job details: the service requested, its description, scheduling preferences, and any photographs you upload of the problem.
- Booking history: past and upcoming jobs, agreed prices, ratings and reviews you submit.
From Service Providers, additionally:
- Identity documents: a copy of your national identity card, residency permit or passport. These are mandatory — you cannot be activated as a Provider without one. They are stored with restricted access, are visible only to the Zabbetli staff who carry out verification, and are never shown to Customers.
- Profile photograph: a current photograph of your face, which is also mandatory. Unlike your identity document, this photograph is shown to Customers who book you, so they can confirm at the door that you are the person Zabbetli sent. By registering as a Provider you consent to this. We do not use your photograph for facial recognition or any biometric matching.
- Professional information: trade, years of experience, licences or permits, references, photographs of past work, and insurance details where applicable.
- Financial information: the details needed to invoice and collect commission from you, and records of jobs completed.
- Live location while you are online and available for jobs, so that nearby requests can be matched to you and Customers can see when you are approaching.
Collected automatically:
- Device and usage data: device model, operating system, app version, language, IP address, crash reports, and how you navigate the Platform.
- Location data from your device, only with the permission you grant in your phone settings. Customers use it to set the job address and see a Provider approaching; Providers use it to receive nearby job offers. If you are a Provider and you grant "always" location access, the app may also read your location while it is in the background, so that you keep receiving job offers without holding the app open. You can withdraw location permission at any time in your device settings, though features that depend on it will stop working.
- Maps: addresses and map screens in the app are powered by Google Maps. When a map is displayed, Google receives the data described in its own privacy policy. Your use of the map features is also subject to Google's Terms of Service and Google's Privacy Policy.
- Communications: in-app chat messages between Customers and Providers, including voice notes you choose to record, and your correspondence with our support team. Where calls are placed through the Platform, we keep the call record — and where we tell you in advance, the recording — for safety and dispute resolution. The microphone is used only when you actively record a voice note; we do not listen in the background.
- Camera and photo library: accessed only when you choose to add a profile photo, upload a photograph of a job, or save an image. We do not browse your photo library.
- Push notification token: an identifier issued by Google that lets us send you booking and message alerts.
We do not ask you for religious affiliation, political opinion, health data or other sensitive categories, and you should not submit them in free-text fields or job photographs.
3. Why We Use Your Information
- To create and manage your account.
- To match your request to an available Provider and let you agree a scope and price.
- To enable the visit: giving the Provider the address, letting you both communicate, and showing arrival status.
- To verify Provider identity and credentials, and to keep the Platform safe.
- To handle complaints, damage claims and disputes under clause 9 of our Terms.
- To invoice Providers for commission and keep the accounting records Lebanese law requires.
- To send you operational messages about your bookings, and — only if you have not opted out — offers and news about Zabbetli.
- To detect and prevent fraud, fake accounts, rating manipulation and abuse.
- To analyse usage in aggregate so we can improve the Platform, and to comply with legal obligations and lawful requests from authorities.
We rely on your consent, on the performance of the contract between us, on our legitimate interest in operating a safe platform, and on our legal obligations, depending on the purpose.
4. Who We Share It With
- The Service Provider you book. Before you confirm, the Provider sees only your first name, your general area and the job description. Once you confirm, they receive your full address, your contact number and your access notes, because they cannot do the job otherwise. After the job is closed, their access to your contact details is withdrawn.
- The Customer, if you are a Provider: your name, photo, trade, rating, reviews and live location while en route.
- Technology suppliers who make the Platform work. They act on our instructions and may not use your data for their own purposes. Currently these include:
- Google — maps and address lookup, sign-in, and push notification delivery on Android.
- Meta (Facebook) — only if you choose to sign in with Facebook. We have disabled the automatic activity logging that this software can perform, so it is not used to track you for advertising.
- Sentry — crash and performance reporting. When the app crashes, Sentry may capture a short replay of the screens leading up to the crash. All text and all images in that replay are masked before it leaves your device, and we have switched off the setting that would attach your personal details to error reports.
- Our SMS and messaging providers — delivery of verification codes and booking notifications.
- Professional advisers — lawyers, accountants, auditors — under confidentiality.
- Authorities, where we are required by Lebanese law, a court order or a lawful request, or where disclosure is necessary to protect someone from harm or to establish or defend a legal claim.
- A buyer or successor, if Zabbetli is sold, merged or reorganised — with notice to you.
We do not sell your personal data, and we do not share it with third parties for their own advertising.
5. Transfers Outside Lebanon
Our servers and several of our technology suppliers are located outside the Lebanese Republic. This means your personal data is transferred to and stored in other countries. We transfer data only to suppliers who are bound by contract to protect it to a standard consistent with Law No. 81/2018, and we limit what is transferred to what is needed. By creating an account and using the Platform, you consent to this transfer. If you would prefer your data not to leave Lebanon, you should not use the Platform.
6. How Long We Keep It
- Account data: while your account is open, and for 12 months after you close it, in case of a late dispute or a re-opened account.
- Booking and commission records: for the period required by Lebanese commercial and tax law, which is generally 10 years.
- Chat messages and call records: 12 months, or longer where they relate to an open complaint, safety incident or claim.
- Provider identity documents: while the Provider is active, and 12 months after deactivation.
- Device and analytics data: up to 24 months, usually in aggregated form that no longer identifies you.
When a retention period ends, we delete the data or irreversibly anonymise it.
7. Your Rights
Under Law No. 81/2018 and this policy, you may:
- ask what personal data we hold about you and get a copy;
- have inaccurate or incomplete data corrected;
- ask us to delete your data, where we are not required to keep it for a legal, accounting or dispute-related reason;
- object to processing, including direct marketing;
- withdraw a consent you gave — such as location access or marketing — without affecting processing already carried out;
- close your account.
Write to privacy@zabbetli.com and we will respond within 30 days. We may need to verify your identity first, so that we do not disclose your data to someone else. If you are not satisfied with our response, you may raise the matter with the competent Lebanese authority or the courts.
8. Security
We protect your data with encryption in transit, access controls that limit staff access to what their role requires, hashed passwords, and logging of administrative access. On your phone, session credentials and device identifiers are held in the operating system's secure storage (the Android Keystore) where it is available. Providers see Customer contact details only for the duration of an active booking, and Provider identity documents are restricted to the staff who perform verification.
No system is perfectly secure, and we cannot guarantee absolute security; if a breach affects your personal data in a way likely to harm you, we will inform you and the competent authority without undue delay.
9. Cookies and Similar Technologies
The Zabbetli website does not set analytics or advertising cookies. It uses only the cookies strictly necessary for the site to load and function. Our mobile app uses device identifiers to keep you signed in and to deliver push notifications. You can clear or block cookies in your browser settings, though parts of the site may not work as well afterwards.
10. Children
The Platform is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes to This Policy
We may update this policy. If a change materially affects how we use your data, we will notify you in the Platform or by email at least 15 days before it takes effect, and where the law requires it we will ask for your consent again.
12. Contact Us
For any question about this policy or how we handle your data:
Zabbetli
Privacy inquiries: privacy@zabbetli.com
General: info@zabbetli.com
Phone: +961 70 094 686
WhatsApp: +961 70 094 686
Zabbetli operates in the Lebanese Republic.