Privacy policy

CUSTOMER PRIVACY
Privacy policy
This policy explains how MSS Gold collects, uses, shares, and protects personal information across our website, web application, and mobile applications.
Effective 20 October 2026
DATA CONTROLLER
MSS Jewelry W.L.L
Commercial registration
130443-1
Legal form
With Limited Liability Company
Registered address
Building 206, Road 362, Block 304, Manama Center, Kingdom of Bahrain
01
Who we are
MSS Gold is operated by MSS Jewelry W.L.L, commercially registered in the Kingdom of Bahrain under CR 130443-1. Our registered activities include online retail and the sale and trade of jewellery, gold, and precious jewellery.
02
Information we collect
The information we collect depends on how you use the service and may include:
Account and contact details, including your name, email address, mobile number, date of birth, nationality, CPR or passport number, and residential address.
Identity and compliance information. Our verification provider, Sumsub, collects identity documents, a facial image and liveness check, and screening results on our behalf. This is sensitive information that we use only to verify your identity and meet our legal obligations.
Financial and transaction records, including your gold orders and the transfer receipts you upload, the gold you hold, sales and the payout details you give us (such as your bank account), collections and delivery details, invoices, account statements, and records of earlier cash funding and withdrawals. When you pay online, our payment provider reports the payment method, the card brand, the first six and last four digits of the card, for some cards the country where it was issued, and whether the payment succeeded or was refunded; we keep these with your order. We never receive your full card number, expiry date or security code.
Photos and files you choose to upload, such as bank-transfer receipts, and photos of your identity document captured during verification.
Technical and security information, including device type and operating system, app version and the app update it is running, push-notification token, IP address and approximate (network-derived) location, authentication and security events, fraud signals, diagnostic logs, and session, local-storage or app-installation identifiers.
Communications, support requests, notification preferences, price alerts, savings goals and plans, and other information you choose to provide.
All of this information is linked to your account. What we do not collect:
We do not use advertising SDKs, and we do not track you across other companies' apps or websites.
If you choose to share your delivery location, we collect your device coordinates, reported accuracy and capture time with your permission and save them with your order. This is a one-time location capture, not background tracking. We do not request contacts, calendar, or health data.
Face ID or fingerprint unlock, if you enable it, is handled entirely by your device. We never receive your biometric data.
Camera access is used only to capture an identity document or a bank receipt when you start that step. Microphone access is used only if the identity-verification liveness check requires it.
03
How we use information
We use personal information to:
Create and secure your account and authenticate your access.
Provide gold purchases (including online payments and any refunds), sales and payouts, collection and delivery, savings reminders, invoicing, and account-record services.
Verify identity, perform KYC and AML checks, prevent fraud, and meet legal or regulatory obligations. This includes texting a code to your verified phone to confirm where MSS pays you for a sale.
Process customer requests, provide support, deliver service messages, and send alerts you request.
Maintain accurate financial records, reconcile transactions, protect the service, investigate misuse, and improve reliability.
We process information where it is necessary to provide the service, comply with legal obligations, protect our legitimate interests and those of our customers, or where you have provided consent.
04
How information is shared
We do not sell personal information. We disclose it only where necessary to operate the service, complete your requests, protect the platform, or comply with law. Recipients may include:
Service providers that process data for us under contract and only on our instructions: Clerk (sign-in and one-time codes), Twilio (text messages, including sign-in codes and the codes that confirm where MSS pays you for a sale), Convex (application hosting and database), Sumsub (identity verification and compliance screening), Resend (transactional email), Expo (push notifications and app updates), and Firebase Cloud Messaging (push notifications).
Tap Payments, our payment provider, for online card and wallet payments. We send Tap your name, email address, mobile number, and the order amount and reference so it can process the payment. You enter your card details on Tap's secure page, or approve the payment in Apple Pay, Google Pay or BenefitPay, and Tap handles them under payment card industry security standards and its own privacy policy.
If you type a question into the "Ask your own question" box on mssjar.com, the text of that question is sent to our AI service provider only to write the answer. We do not store it or link it to your account, so please do not include personal details.
Banks and payment partners where necessary to receive payment for your orders or to pay you for gold you sell, and delivery partners where you choose delivery of gold bars or cash.
Professional advisers, auditors, insurers, regulators, courts, law-enforcement bodies, or other authorities where required or permitted by law.
Our market-data provider supplies gold prices to us; we do not send it any information about you.
05
International processing
Our application data is hosted in the European Union, and some service providers, including our sign-in and identity-verification providers, process information in the European Union or the United States, and our payment provider may process payment information in other countries where it operates. When information leaves Bahrain we use contractual, organizational, and technical safeguards and require providers to protect it in accordance with applicable requirements.
06
Retention
We retain information only for as long as needed for the purposes in this policy, including providing the service, resolving disputes, maintaining audit and transaction records, preventing fraud, and meeting financial, anti-money-laundering, tax, or other legal obligations. Identity-verification, transaction, invoice and related compliance records are kept for the period required by Bahrain law after your account closes. Records with no continuing legal or operational purpose are deleted or anonymized when your account is closed.
07
Security
We apply access controls, authentication safeguards, encryption in transit, audit logging, data minimization, and operational controls designed to protect personal information. No online service can guarantee absolute security, so you should also protect your login methods and notify us promptly about suspected unauthorized access.
08
Your privacy rights
Subject to applicable law, you may ask to access, correct, update, or delete personal information, restrict or object to certain processing, or withdraw consent where processing relies on consent. We may need to verify your identity before responding, and legal retention duties may limit some requests.
To delete your account and personal data, open More → Account management → Close account in the app, or use the request form at mssjar.com/delete if you no longer have access to the app. MSS verifies that the request comes from the account holder, reviews any gold you still hold, open orders, or payouts due to you, confirms when closure is complete, and explains any records that must be retained under law. Your sign-in, profile, contact, preference, notification, and device records are deleted once closure is approved.
You can turn push notifications off at any time in your device settings, and price alerts and savings plans can be changed or removed in the app.
09
Cookies, local storage, and website analytics
The web application uses cookies or similar browser storage only where necessary for authentication, security, session continuity, user preferences, and reliable operation. Our public website uses privacy-preserving, cookie-free analytics that count page views and waitlist signups in aggregate and do not identify you. We do not use advertising cookies or third-party tracking.
10
Children
MSS Gold is intended for customers aged 18 or over. We do not knowingly offer accounts to children. Contact us if you believe a child has provided personal information to the service.
11
Contact and policy updates
Contact us with privacy questions or requests using the details below. We may update this policy when our services or legal obligations change. The effective date above identifies the current version.
info@mssgold.com
+973 1721 5101
MSS Jewelry W.L.L
CR 130443-1 · Building 206, Road 362, Block 304, Manama Center, Kingdom of Bahrain