We care about your privacy and are committed to protecting your personal data. This privacy statement will inform you how we handle your personal data, your privacy rights and how the law protects you. Please read this privacy statement carefully before using our Services.
In this privacy statement:
Services means any products, services, content, features, technologies, or functions, and all related websites, applications and services offered to you by us.
Platform means the websites, mobile apps, mobile sites or other online properties through which we offer our Services.
Who are we?
What data do we collect about you?
Data provided through direct interactions
Registration and other account information
When you register to use our Services we may collect the following information about you:
Depending on the choices you make during the log-in to our Services or during the process of engaging our Services, you may opt to give the following additional personal data:
Communication through the chat feature on our Platform
When you use our chat feature to communicate with other users, we collect information that you choose to provide to other users through this feature.
When you interact with our Platform or use our Services, we automatically collect the following information about you:
Client and Log data
Cookies and Similar Technologies
We may receive personal data about you from various third parties and public sources. If you would like more information about this, please contact us using the relevant contact details set out in section 13.
Do we collect data from children?
Our Services are not intended for children under 16 and we do not knowingly collect data from anyone under 16. If we become aware that a person under 16 has provided us with personal data, we will delete it immediately.
Why do we process your personal information?
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
In certain circumstances, we may also process your personal data based on your consent. If we do this, we will let you know the purpose and the category of personal data to be processed at the time we seek your consent.
We have set out below a description of the ways we use your personal data.
We use your e-mail address and mobile number (by SMS) to make suggestions and recommendations to you about our Services that may be of interest to you.
We process the above information for adequate performance of our contract with you and on the basis of our legitimate interest in undertaking marketing activities to offer you Services that may be of your interest.
We use clickstream data to:
We use your location data for the following purposes:
With the help of your log-in information which includes your email id and phone number, we map the different devices (such as desktop, mobile, tablets) used by you to access our Platform. This allows us to associate your activity on our Platform across devices and helps us in providing you a seamless experience no matter which device you use.
We process the above information on the basis of our legitimate interest to improve your experience on our Platform and for adequate performance of our contract with you.
We process the above information for adequate performance of our contract with you, to improve our services and on the basis of our legitimate interest to prevent fraud.
How will we inform you about changes in our privacy statement?
We may amend this privacy statement from time to time. We will post changes on this page and will let you know by e-mail or through our Platform. If you or your guardian (as the case may be) do not agree with the changes, you may close your account by going to account setting and select delete account.
You may have certain legal rights regarding your personal data depending on the country you are in or how we interact with you. You can learn more about this in this section.
6.1 Pakistani data subjects
If you are a data subject in Pakistan, you will have the following rights:
6.2 EU General Data Protection Regulation ("GDPR") data subjects
If you are a data subject under the GDPR, you will have certain additional rights in relation to our handling of your personal information.
No fee usually required: You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
Time limit to respond: We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made several requests. In this case, we will notify you and keep you updated.
Communication and marketing
We will communicate with you by email, SMS or in app notification in connection with our Services/Platform to confirm your registration, to inform you in case your ad listing has become live/expired and for other transactional messages in relation to our Services. As it is imperative for us to provide you such transactional messages you may not be able to opt-out of such messages.
However, you can ask us to stop sending you marketing communication at any time by clicking on the opt-out link in the email or SMS sent to you or by reaching out us on Privacy@olx.com.
You may receive marketing communications from us if you:
Who do we share your data with?
We may have to share your personal data with the parties set out below for the purposes set out in section 4 above.
Corporate affiliates – we may share your data with other OLX group companies which are located within as well as outside European Economic Area (“EEA”) and Pakistan and help us in providing business operation services such as product enhancements, customer support and fraud detection mechanism. Where the GDPR applies to personal data then any sharing of personal data within the OLX group of companies situated outside the EEA will always be subject safeguards as described in section 9 or to a data transfer agreement which clearly defines the obligations of the parties and ensures appropriate technical and organisational measures to protect your data.
Third Party Service Providers: We use third party service providers to help us deliver certain aspect of our Services for example, cloud storage facilities such as Amazon Web Services and Microsoft Azure. Service providers may be located inside or outside of the EEA and Pakistan.
We conduct checks on our third-party service providers and require them to respect the security of your personal data and to treat it in accordance with the law. We do not allow them to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
Advertising and analytics providers: In order to improve our Services, we will sometimes share your non-identifiable information with analytics providers that help us analyse how people are using our Platform/Service. We share your information with them in non identifiable form for monitoring and reporting the effectiveness of the campaign delivery to our business partners and for internal business analysis. For further details about our advertisers and analytics provider please refer to our Policy for Cookies and similar Technologies.
Law enforcement authorities, regulators and others: We may disclose your personal data to law enforcement authorities, regulators, governmental or public bodies and other relevant third parties to comply with any legal or regulatory requirements.
We may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy statement.
Publicly available information: When you post an item for sale using our Services, you may choose to make certain personal information visible to other OLX users. This may include your first name, last name, your email address, your location and your contact number. Please note, any information you provide to other users can always be shared by them with others so please exercise discretion in this respect.
Where do we store your data and for how long?
The data we collect about you may be stored and processed inside as well as outside the EEA and Pakistan in secure servers in order to provide the best possible user experience. For example – for fast website or mobile application build up.
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In case you have any queries in relation to the retention period of your data please contact us at email@example.com.
Technical and organizational measures and processing security
All the information we receive about you are stored on secure servers and we have implemented technical and organizational measures that are suitable and necessary to protect your personal data. OLX continually evaluates the security of its network and adequacy of its internal information security program which is designed to (a) help secure your data against accidental or unlawful loss, access or disclosure, (b) identify reasonably foreseeable risks to the security of the OLX network, and (c) minimize security risks, including through risk assessment and regular testing. In addition, we ensure that all payment data are encrypted using SSL technology.
Please note, despite the measures we have implemented to protect your data, the transfer of data through the Internet or other open networks is never completely secure and there is a risk that your personal data may be accessed by unauthorized third parties.
Links to third-party websites
For any additional information or to exercise your rights, please contact our Privacy Officer at firstname.lastname@example.org, or go to the Help Section in our Platform.
Our Lead Supervisory Authority in relation to GDPR related complaints is:
“Berliner Beauftragte für Datenschutz und Informationsfreiheit”
Friedrichstr. 219, Besuchereingang: Puttkamerstr. 16 – 18 (5. Etage), 10969 Berlin, Germany
Telefon: 030 13889-0, Telefax: 030 2155050
For Pakistani matters contact us
Changes to this Policy
("Notice of Change").
Your continued use of our Services following an amendment or Notice of Change indicates your or your guardian's acceptance (as the case may be) of any changes.