qabbad
Your information

Privacy without the fog.

This notice explains what Qabbad needs to operate the marketplace, why we need it and the choices available to you.

Launch draft · Last updated 25 June 2026

1. Who controls your data

Qabbad is operated by Lewk's World, the trading name of Luke Fenech, a sole trader registered in Malta under registration number MT28882428, with a contact address in Mtarfa, Malta. Lewk's World is the controller of personal data processed through qabbad.com. Privacy and data enquiries can be sent to info@qabbad.com.

2. Information we collect

  • Account details such as email address, display name, phone number and authentication identifiers.
  • Customer request details including locality, job description, timing, answers, photos and videos.
  • Provider details including business information, services, areas, availability, profile content and verification records.
  • Quotes, bookings, messages, reviews, notifications and support correspondence.
  • If you connect WhatsApp: the confirmed WhatsApp number, your channel choices, consent/withdrawal timestamps and delivery status. Qabbad records bot commands such as START, STATUS and STOP for consent and security, but does not retain ordinary inbound message bodies in its webhook log.
  • Security and technical information such as IP address, device, browser, audit events and essential cookies.

3. Why we use it

We process information where it is necessary to:

  • Provide the requested account, matching, quotation, messaging and booking services.
  • Protect users, prevent abuse, investigate reports and keep an audit trail.
  • Meet legal obligations and respond to lawful requests.
  • Improve Qabbad where our legitimate interests do not override your rights.
  • Send optional marketing only where consent or another lawful basis applies.
  • Send optional WhatsApp service updates only after you connect the number yourself. Transactional groups and Qabbad news/offers have separate controls, and WhatsApp is independent from email and push.

4. Who receives it

A customer request is shown only to providers whose verified service and coverage match it. Once a provider quotes, both sides can use job messaging. We use carefully selected service providers for hosting, authentication, storage, email, app distribution, push delivery, Google sign-in and operational monitoring. Current launch providers include Supabase, Vercel, Resend, Expo/EAS, Google Cloud/Google OAuth and Meta/WhatsApp for users who choose WhatsApp updates, and, when the native apps are distributed, Apple and Google app store services. We do not sell personal data.

5. Storage and retention

Qabbad keeps data only as long as necessary for the service, safety, disputes, accounting and legal obligations. At launch, account data is kept while the account is active and normally deleted or anonymised within 90 days of a valid deletion request unless it must be retained. Unclaimed anonymous request sessions are reviewed after 30 days. Closed job requests, quotes, bookings, messages, provider review records, reports and related support records may be kept for up to 6 years where needed to evidence the marketplace transaction, investigate safety issues, comply with law or defend legal claims. Security and operational logs are normally kept for up to 12 months; client error and push-delivery logs are reviewed after 90 days unless tied to an incident.

WhatsApp one-time connection codes expire quickly and are cleaned after seven days. Delivery and consent-command logs are normally kept for up to 12 months for retries, opt-out evidence and troubleshooting. You can stop future WhatsApp messages in your dashboard or by replying STOP; Qabbad keeps the minimum suppression record needed to honour that choice.

Newsletter details are kept until unsubscribe or withdrawal, after which suppression records may be retained so we do not email that address again. More detail is maintained in Qabbad's internal data protection schedule.

6. International transfers

Qabbad is based in Malta, but its technology providers may process personal data in the EU/EEA, United Kingdom, United States or other locations depending on their infrastructure. Where personal data is transferred outside the EU/EEA, Qabbad relies on provider data-processing terms, adequacy decisions, EU Standard Contractual Clauses or equivalent safeguards where required.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent where consent is used. You may also complain to Malta's Information and Data Protection Commissioner. Qabbad currently serves Malta and Gozo.

WhatsApp consent can be withdrawn immediately by replying STOP or by choosing Stop WhatsApp updates in your Qabbad account. Turning off WhatsApp does not turn off email or mobile push, which have their own controls.

8. Children

Qabbad is intended for adults who can enter contracts. We do not knowingly offer accounts to children.