This document explains what personal data of Plumb. users is processed, why it is collected, who can access it, how long it is kept, and the rights of the data subject under the Jordanian Personal Data Protection Law No. 24 of 2023.
1. Who we are
The Plumb. app is operated by Waslat Al Rabee for Commercial Brokerage Services LLC (شركة وصلة الربيع لخدمات الوساطة التجارية ذات مسؤولية محدودة), a company registered in the Hashemite Kingdom of Jordan under registration number 85033, national establishment number 200216891, with its principal office in Amman, the Hashemite Kingdom of Jordan, operating under the trade name "Plumb." (referred to below as "Plumb." or "we").
2. The data we process, and why
| Category | Data processed | From whom | Purpose of processing |
|---|---|---|---|
| Account and registration data | Name; phone number; email address; password (stored in encrypted form by the sign in service; we cannot see it); profile photo (required for Plumb. Men, optional for Customers). | Everyone | Creating the account; signing in; managing the account; contacting the user about requests or matters related to the service; letting the Customer recognise the Plumb. Man at the door. |
| Plumb. Man verification data | Photos of the ID card (both sides), or passport; ID number. | Plumb. Men | Verifying the Plumb. Man's identity before he can receive requests; safety requirements; internal administrative and regulatory verification. |
| Location and address data | The Customer's address and its location on the map; the Plumb. Man's home address and its location on the map (seen only by the management team); the Plumb. Man's live location while carrying out a request; the route and distance of each request. Note: the Plumb. Man's live location is processed only during a request, from the moment the "I'm on my way" status is activated until the request is completed or cancelled. | Customers and Plumb. Men | Organising geographic coverage; distributing requests; pricing; following the progress of the work; enabling the Plumb. Man to reach the correct location; enabling the Customer to see the Plumb. Man's location and arrival time. |
| Request data | Request details; a description of what needs fixing; attached photos; messages exchanged; records of calls related to the request. | Customers and Plumb. Men | Understanding the nature of the request; enabling the Plumb. Man to prepare properly; handling complaints or disputes; improving service quality. |
| Payment data | Transaction amount; payment method; payment status; card type; the last four digits of the card, where available to us through the payment provider; the transaction reference number; CliQ data or related financial settlements. | Everyone | Carrying out payments and settlements and issuing invoices. Card and Apple Pay payments are processed through MyFatoorah. Note: we do not see or store your full card number. |
| Quality and support data | Ratings; comments; complaints; support messages; customer service records. | Everyone | Monitoring service quality; improving performance; handling requests and complaints; protecting users and the platform. |
| Technical data | Device type; app version; notification token; crash and performance logs. | Everyone | Running the app; sending notifications; fixing technical errors; protecting the security of the service and improving performance. |
3. Legal basis for processing
We process personal data on one or more of the following grounds, depending on the type of data and the purpose of processing:
- The prior consent of the data subject, where the nature of the processing requires it, including certain optional features or permissions such as location, notifications or other features that depend on the user turning them on.
- The processing is necessary to provide or carry out the service, where it is required to create the account, receive the request, carry out the service, coordinate between the parties, or follow up transactions related to the service.
- Legal obligation, where we are required under applicable legislation to keep, disclose or organise certain data or records, including tax, accounting and regulatory obligations.
- Legitimate interest in operating and protecting the service, to the extent permitted by applicable legislation, without conflicting with the rights of the data subject or going beyond the legitimate purpose of the processing.
We are committed to processing that is lawful, specific, clear and linked to the purpose for which the data was collected, and that does not continue after that purpose has ended unless a legal basis permits it.
4. Who can access the data
The following categories may access personal data, or have it made available to them, to the extent necessary:
- The other party to the request. In an Emergency, the Customer sees the Plumb. Man's name, photo, rating and live location while he is on the way, and the Plumb. Man sees the request location, the description of what needs fixing and its photos, then the Customer's phone number and address as soon as he accepts the request. For Book in Advance, the Customer sees the Plumb. Man's name and photo 48 hours before the appointment, and the Plumb. Man sees the Customer's phone number and exact address 24 hours before. Once the request is completed, the Customer's name, phone number and exact address no longer appear in the Plumb. Man's history.
- The management team. Only to the extent needed to run the service, verify Plumb. Men, follow up payments, complaints and safety. Customers' names, phone numbers and email addresses do not appear on the internal coverage map; only a circle at the address location is shown.
- Service providers and processors. We may use third parties to process data on our behalf or to provide operational and technical functions, such as:
- the database, storage and sign in provider (Supabase);
- the maps, addresses and notifications providers (Google Firebase and Google Maps);
- the electronic payment provider (MyFatoorah, for card and Apple Pay payments);
- the crash reporting provider (Sentry);
- the provider of account related emails and messages (Resend);
- the app stores and the infrastructure that delivers notifications (Google Play and the Apple App Store).
- The translation service. When you tap "Translate" on a job description or a chat message, only that text is sent to the MyMemory translation service to be translated.
- Official authorities, under the national legislation in force.
5. Data stored outside Jordan
Some service providers store data on servers outside Jordan. By accepting this policy when you register, you expressly consent to your personal data, including sensitive personal data, being transferred to or stored with service providers outside the Hashemite Kingdom of Jordan, for the operational and technical purposes set out in this Privacy Policy, pursuant to Article 15(5) of the Personal Data Protection Law No. 24 of 2023.
6. Notifications and messages
- Request notifications (status updates, messages and payments) are part of the service. You can turn them off in your phone's settings.
- Reminders and news are sent only if you turn on "Reminders and news" in Settings. This option is off by default, and you can turn it off at any time.
- We do not sell your data, and we do not share it with anyone for their own marketing purposes.
7. How long we keep data
| Data | Retention period |
|---|---|
| Account and profile | Until the account is deleted. |
| The Plumb. Man's live location | Only the latest location is kept during the request, and it is deleted as soon as the request is completed or cancelled. |
| Trip routes and chat messages | 12 months from the date of the request. |
| The Plumb. Man's ID photos | 90 days after he leaves Plumb. or deletes his account. |
| Request, payment and invoice records | For as long as tax and accounting laws require. |
| Everything else | Deleted within 30 days of the account being deleted. |
8. Rights of the data subject
A data subject whose data is processed has all the rights set out in the Personal Data Protection Law No. 24 of 2023, including, without limitation, the right to:
- know about, view and access the data;
- withdraw consent;
- correct, amend, add to or update the data;
- erase or conceal the data.
To exercise any of these rights, email us at plumb.joamman@gmail.com. We will reply within 30 days.
9. Deleting your account
You can delete your account in the App by following these steps: Account, then Settings, then Delete account. You can also use this link: plumbjo.com/delete-account
However, deletion may not be possible immediately or in full in some cases, including:
- an active request;
- outstanding amounts or financial settlements;
- a legal or regulatory obligation to keep certain records;
- an open dispute, complaint or claim that requires certain data to be kept temporarily.
10. Data security
- Data is encrypted in transit, access is limited by role, ID photos and request photos are kept in private storage, and passwords are handled only by the sign in service. Location and camera data are removed from photos before they are uploaded.
- If a breach of data security occurs that is likely to cause serious harm to a person, we will notify the affected data subjects within 24 hours of discovering the breach and give them the steps needed to avoid any consequences that may result from it. We will also notify the unit responsible for personal data protection at the Ministry of Digital Economy and Entrepreneurship within 72 hours of discovering the breach, stating its source, how it happened, the affected data subjects and any other available information, pursuant to Article 20 of the Personal Data Protection Law No. 24 of 2023.
11. Age
Plumb. is intended for people aged 18 and over. We do not knowingly collect data from people under 18, except with the consent of one of their parents or their legal guardian, pursuant to Article 5(a)(4) of the Personal Data Protection Law No. 24 of 2023.
12. Cookies
Plumb. does not use advertising or tracking cookies. The app stores your sign in token securely on your phone, together with your settings such as language and appearance, and our website uses only essential storage. For details, see our Cookie Policy.
13. Changes
We may update this policy from time to time to keep up with legal, technical or operational developments. When we make material changes that affect how data is processed, its nature, its purposes or the rights of the data subject, we will notify users by appropriate means, and we may ask for consent again where required under applicable legislation.
14. Language and contact
This policy is available in Arabic and English. If there is any difference between the two, the Arabic text prevails.
For questions about this Privacy Policy:
Phone: +962 79 279 1839
Email: plumb.joamman@gmail.com