Privacy policy

Version 1.0 · Effective 30 October 2026 · Last updated 30 October 2026

1. Who we are

This policy is issued by SecondChance Collective (“SecondChance”, “we”, “us”), which operates the marketplace at secondchancejo.com from Amman, Hashemite Kingdom of Jordan. We are the controller of the personal data described here, which means we decide why and how it is processed. It is written to meet Jordan’s Personal Data Protection Law No. 24 of 2023 (“the PDPL”).

Questions, requests and complaints about your data: secondchancejo.co@gmail.com. We answer within one working day and complete requests within 30 days.

2. What this policy covers

It covers everyone who visits secondchancejo.com or uses a SecondChance account: buyers, sellers and visitors who are just browsing. It explains what we collect, why, who we share it with, how long we keep it, and the rights you have over it.

3. What we collect

Information you give us

• Account details — your name, username, email address, mobile number, password (stored only in scrambled form by our authentication provider), city and area, and optionally a profile photo, a short bio and your date of birth.
• Consent records — when you accepted our Terms and policies at sign-up, and whether you agreed to receive marketing.
• Seller verification — if you apply to become a verified seller: your full legal name, national ID number, a photo of your ID, a selfie, and your payout details (IBAN and bank name, or CliQ alias).
• Listings — the photos, video, descriptions, size, colour, material, condition and price of what you sell, your answers about the original receipt and packaging, and your authenticity confirmation.
• Orders and payments — what you bought or sold, the name, mobile number, city, area and note you give at checkout, the payment method (CliQ transfer or cash on delivery), CliQ transfer references, amounts, discounts, refunds, platform fees and payouts. We never ask for or store card numbers or online-banking passwords — CliQ transfers are made in your own banking app.
• Conversations and cases — order messages, reports, return and dispute requests with the photos you attach, reviews and ratings, and emails you send us.
• Newsletter — your email address if you subscribe.

Information collected automatically

• Sign-in and security records — when you sign in, the method used, and the technical details that come with any web request (IP address, browser and device type). One-time codes we send you are stored briefly so they can be checked.
• Activity on the marketplace — listing view counts and saved items, so sellers can see interest and you can find your favourites again. These are counts, not a profile of you.
• Browser storage — a small number of items kept on your own device to keep you signed in and remember your settings. Our Cookie Policy lists every one.

We do not knowingly collect sensitive personal data (such as health, religion or political views), and we ask you not to include it in listings or messages.

4. Why we use it, and on what basis

Under the PDPL we process personal data with your consent, which you give when you create an account and accept our policies, and where processing is needed to carry out the service you asked for or to meet a legal obligation. Specifically, we use your data to:

• Run your account and let you sign in securely, including sending one-time codes.
• Publish and review listings, including checking photos and evidence before a listing goes live.
• Process orders: reserve the piece, share contact details between buyer and seller so the handover can be arranged, confirm CliQ transfers, record cash-on-delivery handovers, and calculate platform fees, refunds and payouts.
• Keep the marketplace safe: verify sellers, investigate reports, counterfeits, fraud and abuse, and enforce our Terms.
• Handle returns and disputes fairly, using the evidence both sides provide.
• Send you service messages in the site and by email — order updates, payment confirmations, review requests. These are part of the service and cannot be switched off while an order is open.
• Send marketing such as the newsletter — only if you opted in, and you can opt out at any time.
• Meet legal duties such as keeping accounting records and answering lawful requests from Jordanian authorities.

We do not use your data for automated decisions that have legal or similarly significant effects on you. Every listing rejection, account suspension and dispute decision is made by a person.

5. Who we share it with

• The other party to your order. When an order is placed, the seller sees the buyer’s name, mobile number, city, area and note, and the buyer can see the seller’s username and area. Use these details only to complete that order.
• Other members, publicly. Your username, city and area, the date you joined, your listings, and the ratings and reviews you give or receive are visible on the site.
• Service providers who run the platform for us, under contracts that only let them use the data to provide their service: Supabase (database, sign-in and file storage), Vercel (website hosting), Brevo (email delivery) and Google Fonts (font delivery, which receives your IP address when a page loads).
• Banks. CliQ transfers pass through your bank and ours under their own terms. We see the name, amount and reference that come with a transfer.
• Rights holders and authentication experts, where needed to investigate a suspected counterfeit — limited to the listing, photos and order details concerned.
• Authorities, when Jordanian law requires it or to report a suspected crime.
• Professional advisers such as lawyers and accountants, under a duty of confidentiality, and a buyer of the business if SecondChance is ever sold, who must keep this policy’s promises.

We never sell personal data and we do not share it with advertisers.

6. Data stored outside Jordan

Our service providers run their systems on cloud infrastructure that may be located outside Jordan, for example in the European Union or the United States. Where personal data is transferred outside the Kingdom, we do so only as the PDPL allows: to providers that protect it to an adequate standard, under contracts that limit their use of it, with encryption in transit, and with your consent given when you accept this policy.

7. How long we keep it

• Account details — for as long as your account is open, then deleted or anonymised within 90 days of closure, except where listed below.
• Seller verification documents (ID photo, selfie, national ID number) — while you are a seller, then deleted within 90 days of your seller account closing or your application being declined, unless they are needed for an open investigation.
• Orders, payments, refunds, fees and payouts — seven years after the order closes, to meet accounting and tax requirements and to deal with legal claims.
• Listings, photos and reviews — while live, and for up to two years after a piece sells or is removed, so that returns, disputes and counterfeit reports can still be checked.
• Messages, reports, returns and disputes — three years after the case is closed.
• Sign-in and security records — twelve months. One-time codes expire within minutes and are deleted within 30 days.
• Newsletter — until you unsubscribe.

8. Your rights

Under the PDPL you can:

• Know and access — be told what we hold about you and get a copy. You can download it yourself any time from Account → Settings → Download my data.
• Correct — fix anything inaccurate or incomplete. Most of it you can edit directly in Account → Settings.
• Delete — ask us to erase your data. We will, except what the law requires us to keep or what is needed for an open order, dispute or investigation; we will tell you what we kept and why.
• Object or restrict — ask us to stop or limit a particular use of your data.
• Withdraw consent — at any time, including unsubscribing from marketing using the link in any email. Withdrawing consent to the core processing in this policy means closing your account, and does not affect what was done before.
• Complain — to us first, and if you are not satisfied, to the Personal Data Protection Council and the data protection unit at the Ministry of Digital Economy and Entrepreneurship.

To use any of these rights, email secondchancejo.co@gmail.com from the address on your account. We may ask you to confirm your identity before acting. There is no charge.

9. How we protect it

• All traffic to the site is encrypted (HTTPS).
• Database access is controlled row by row: members can only read their own orders, payouts and verification documents.
• ID documents are kept in private storage that only authorised staff can open, through short-lived links.
• Staff access is role-based, limited to what each person needs, and logged.
• Order prices, fees and payment status can only be changed by the platform, not by members.

If a breach of personal data could cause you serious harm, we will tell you within 24 hours of discovering it, with the steps you can take, and notify the data protection unit within 72 hours, as the PDPL requires.

10. Age limit

SecondChance is for people aged 18 and over. We do not knowingly collect data from anyone younger; if we learn that we have, we delete it.

11. Changes to this policy

If we change how we use personal data, we will update this page and its effective date. For significant changes we will also tell you in the site or by email before they take effect.

12. Contact

SecondChance Collective, Amman, Jordan · secondchancejo.co@gmail.com