Privacy Policy

Kattegat is operated by Hidden Diversion Recreational Services("Kattegat", "we", "us"), based in Dubai, United Arab Emirates. We run a direct marketplace connecting event and hospitality sellers ("sellers") with clients ("buyers").

This policy covers personal data processed when you browse the website, join the waitlist, create an account, use the mobile apps, communicate with support, or interact with marketplace features such as listings, requirements, chat, payments, referrals, and verification.

We collect information you provide, information generated by using Kattegat, and information from processors that help us deliver the service.

Account & identity

• Account details including date of birth, home country, current country, and current city. Date of birth is kept private and is not displayed on public profiles.
• Name, username, email, phone, business name, avatar, and password (stored via our auth provider).
• Public IDs issued at registration: BID (buyer) and/or SID (seller). Your internal account ID is a UUID; BID/SID are permanent public references.
• Role / dual-identity state (buyer, seller, or both on one account).

Profile, listings & marketplace content

• Seller portfolio media, bios, social links (where your plan allows), and listing fields driven by our category taxonomy.
• Category/subcategory, location/coverage text, pricing structures, and schema-driven listing answers.
• Buyer requirements (title, description, budget, dates, location, attachments) and seller applications / pitches.
• Quotes, invoices, bookings, client CRM notes (seller tools), and related statuses.

Verification & programmes

• Identity or business verification materials submitted for seller checks.
• Founding Member, Kattegat Vetted, referral, and Recommend & Earn application or lead details.
• Waitlist submissions (name, email, Instagram, optional LinkedIn / UAE phone, role).

Communications

• Chat messages, Contact Agent requests, admin/support conversations, and notification preferences.
• Reviews and ratings (when the reviews feature is enabled), including text and star ratings.

Payments & commercial records

• Subscription and purchase history, plan entitlements, and payment status metadata. Card numbers are tokenised and processed by Stripe (or a future payment provider); we do not store full PAN data.
• Seller-provided bank details displayed on invoices so buyers can pay sellers directly. Kattegat does not use those details to receive or settle invoice funds.
• Company-funded referral and recommendation reward ledger and payout-request records. Historical invoice ledger records may be retained for reconciliation, refunds, disputes, accounting, and amounts already owed from the retired card-payment flow.

Device, security & usage

• App version, device type, push tokens, session metadata, and coarse analytics / error reports.
• IP address and related security signals used for rate limiting, fraud prevention, and abuse detection.
• City/emirate or coverage text you enter for discovery. not continuous precision GPS tracking.

• Operate marketplace features: profiles, search/discovery ranking, listings, requirements, quotes, bookings, invoices, and chat.
• Authenticate users, maintain sessions, and protect accounts.
• Moderate listings, requirements, reviews, and reported content.
• Run Contact Agent / Vetted / Kattegat Vetted workflows and assign operators where needed.
• Process subscriptions and related billing events via webhooks and entitlement sync.
• Send transactional messages (email / push / in-app) such as booking or moderation outcomes; marketing only where allowed.
• Operate referral, Founding Member, and Recommend & Earn programmes.
• Detect fraud, self-referral abuse, fake reviews, and policy violations.
• Improve reliability, performance, and product quality.
• Meet UAE legal, tax, accounting, and dispute-resolution obligations.

We do not sell your personal information. We share it only as needed to run Kattegat:

• Other users. public profile and listing content is visible in discovery; chat counterparts see messages; buyers/sellers see information required to negotiate and fulfil engagements.
• Service providers. including database and authentication (Supabase), media hosting/CDN (Cloudinary), payments (Stripe), caching (Upstash Redis), email/push providers, and error monitoring where configured.
• Kattegat operators. admin/staff accounts with role-based access may view user data to support moderation, Vetted cases, payouts, and safety. Sensitive actions are audit-logged.
• Legal & advisors. where required by law, regulation, court order, or to protect rights, safety, and integrity of the platform.
• Business transfers. in a merger, acquisition, or asset sale, subject to continued protection consistent with this policy.

Search, browse, and Home feeds may order listings/sellers using signals such as plan priority (Starter / Premium / Kattegat Vetted), ratings and review volume, recency, and newcomer boosts. Weights can be tuned by administrators. This is marketplace ranking, not automated decision-making that creates legal effects outside the platform display order.

We keep personal data while your account is active and as needed to provide the service. You can delete your account in the Kattegat mobile app or by email. Exact in-app steps are documented on Delete Your Account.

On deletion we deactivate the account and remove or clear profile identifiers such as username, phone, and avatar. Certain financial, booking, safety, and dispute records are retained as required under UAE rules and to protect other users. details on the Delete Account page.

• Access and update most profile fields in-app (Profile → Edit profile / Settings).
• Request a copy of your account data by emailing us.
• Request account deletion as described on the Delete Account page.
• Manage notification permissions on your device and in Settings → Notifications.
• Opt out of marketing emails via unsubscribe links (transactional mail may still be required).

Kattegat is a commercial marketplace and is not directed at children. You must be at least 18 to create an account.

We are based in Dubai, UAE. Some processors may store or process data in other countries. We use providers with appropriate security and contractual safeguards.

We use industry-standard controls including encrypted transport (HTTPS), access-controlled databases, row-level security where applicable, webhook idempotency for payments, and staff role-based access with audit logging. No system is perfectly secure. use a strong unique password and protect your devices.

We use essential cookies and local storage so the site works: session, security, and your cookie preference. These stay on even if you reject marketing cookies.

If you accept, we also load analytics and advertising tags (Google Analytics 4 / Google Tag Manager, Meta Pixel, LinkedIn Insight Tag, and TikTok Pixel) to measure traffic sources, page views, seller interest, drop-off, and campaign performance. You can reject those tags; browsing still works.

We may update this policy as Kattegat evolves. We will change the "Last updated" date and, for material changes, notify you in-app or by email where practical.

Privacy questions: seller@kattegat.app.

Also see our Terms of Service.