Privacy Policy

This is a general template and should be reviewed by a lawyer.

This policy explains how HajzyNow (the Site) handles your data when you use it in Iraq, whether you are a customer booking an appointment or a business owner managing a page.

Data we collect: when you book we store your name, phone number, the service, the time and the booking code. When a business registers we store its email, phone number, business name, map location and a hashed password. When you write a review we store the rating and comment. Customers do not need an account.

How we use data: to complete bookings and tell the business about them, to show businesses and reviews, to manage subscriptions, to prevent abuse and to contact you about your booking or account. A customer's name and phone number are shared only with the business they booked.

Payments: customers pay at the venue and booking amounts do not pass through the Site. Business owners pay the platform subscription through Wayl, which processes payment details with its provider. We do not store card or wallet details.

Notifications: if you allow browser notifications we send alerts about your booking, your place in a queue or an upcoming appointment. You can turn them off at any time in your browser settings.

Cookies and device storage: we use a cookie for your language, a session cookie for business owners after login, and we keep your booking codes and favorites on your device (local storage) so the My bookings page can show them. We do not use advertising cookies.

Retention: we keep bookings, phone numbers and reviews for as long as needed to run the service and keep business and platform records, and we keep periodic backups for a limited time. After a business account is closed we may keep some records for accounting and disputes.

Your rights: you may ask to see, correct or delete your data by contacting us through the contact details shown in the footer. We will delete or anonymize data that we have no legitimate reason to keep.

Security: we protect data with encrypted connections, hashed passwords and limited access, but no transmission or storage is completely secure and we cannot guarantee absolute security.

Changes: we may update this policy from time to time, and continued use of the Site means you accept the updated version.

To contact us or to request deletion of your data: