ON THE MAP.

Privacy policy

Your public listing and private contact details are treated differently.

This policy explains what On the Map collects, why it is used and how to exercise your rights under Bahrain's Personal Data Protection Law.

Version 1.2. Last updated: 4 October 2026.

1. Data controller

Wisdom Digi Cyber Solutions W.L.L, Commercial Registration 153479-1, Bldg 1239, Road 531, Block 905, Riffa, Kingdom of Bahrain, operates On the Map and is responsible for the personal data described here.

Privacy requests: info@wisdigi.com or +973 7711 0285.

2. What we collect

  • Listing data: selected hexagon, listing type (personal or business), display name, emoji, short message, optional link and, for businesses, an optional logo and registration details.
  • Private contact data: the email address entered with a submission and later order communications.
  • Transaction data: order reference, payment reference, amount, currency, payment method (for example card, BenefitPay or Apple Pay), payment status and refund records. Card and account details are entered on secure checkout at pay.digi.bh and handled by our payment provider, Tap. We never receive or store card numbers, we do not ask you to email them, and we never publish payment data.
  • Technical and safety data: IP address in security logs, a shortened one-way hash used for abuse control, request time, browser information and server error logs.
  • Communications: messages, corrections, complaints and evidence you send to support or during business verification.

3. Public information

Nothing is published until a person has approved it. An approved display name, emoji, message, business status and logo, hexagon code, approval date and destination link are intentionally published on the open internet. Search engines, visitors and social networks may copy or index them. Your submission email, IP information and payment records are not published.

Do not submit private information in a display name or message. If you submit another person's personal data, you must have a lawful reason and their permission where required.

4. Why we use data

  • To review your request and take steps toward an order you asked us to arrange.
  • To fulfil the listing contract, publish the content and provide support.
  • To verify businesses, prevent duplicate submissions, fraud and abuse, and protect the service.
  • To keep financial and legal records and respond to lawful authorities.
  • To establish, exercise or defend legal claims.

We do not use your order email for unrelated marketing unless you separately choose to receive it. We do not sell personal data.

5. Who receives data

Access is limited to authorised Wisdom Digi personnel and service providers needed to operate hosting, email, security and payment functions. Payments are processed by Tap through pay.digi.bh, which receives the details needed to take and refund your payment and returns to us only the payment reference, amount, method and status. Those providers may process only the information needed for their role. We may disclose information where required by law, a court or a competent authority, or when necessary to protect legal rights and safety.

The pages currently request font files from Google Fonts. As with most externally loaded resources, that provider receives technical request data such as your IP address and browser information. User-submitted links are separate websites with their own privacy practices.

6. Storage, transfers and security

The primary application data is hosted in Bahrain. Some email, font, security or payment providers may process data outside Bahrain. Where a cross-border transfer occurs, we use an available lawful transfer basis and appropriate safeguards required by Bahrain law.

We use access controls, TLS encryption in transit, restricted administrative tools, content validation and limited publication of fields. No online system can be guaranteed absolutely secure.

7. Retention

We retain submission and order data only while it is reasonably needed for review, publication, customer support, security, accounting, dispute handling and legal obligations. Approved public listing data remains while the listing is active. Financial records may be retained for the period required by applicable law. Security logs and rejected requests are removed or anonymised when no longer reasonably needed.

8. Your choices and rights

Subject to the conditions and exceptions in applicable law, you may ask for access to your personal data, correction, blocking or erasure; object to certain processing; withdraw consent where consent is the basis; or complain about how data is handled. Withdrawing consent does not undo earlier lawful processing and may prevent us from continuing an optional feature.

Email a request from the address used for the submission and include the hexagon code. We may need to verify identity before acting. You may also contact Bahrain's competent Personal Data Protection Authority.

9. Children

Purchases and submissions are for adults aged 18 or over. We do not knowingly request personal data from children. A parent or guardian who believes a child submitted data should contact us for review and removal.

10. Changes

We will update the date and version when this policy changes. Material changes affecting how active customer data is used will be communicated where reasonably possible.