Privacy Policy

EmiratesB2B ("we", "our", "us") operates the emiratesb2b.ae platform. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and applicable international data protection standards.

By using our platform, you agree to the collection and use of information as described in this policy.

We collect the following categories of data:

**Account data** — name, email address, phone number, company name, and trade license document (for suppliers).

**Listing data** — product names, descriptions, prices, images, and inventory information submitted by suppliers.

**Usage data** — pages visited, search queries, inquiry history, and session information collected automatically.

**Communications** — messages sent through the platform's inquiry or RFQ system.

We use the data we collect to:

- Verify supplier identities and trade licenses - Display supplier listings to buyers on the marketplace - Facilitate buyer-to-supplier inquiries and RFQ submissions - Send transactional emails (inquiry alerts, OTP codes, account confirmations) - Improve platform features and detect fraud or policy violations - Comply with UAE regulatory obligations

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

We share data only in the following circumstances:

**Between users** — a supplier's business name, emirate, and listed products are publicly visible. A buyer's name and contact details are shared with a supplier only when the buyer initiates an inquiry.

**Service providers** — we use Supabase (database and authentication), Vercel (hosting), Cloudflare (CDN and R2 storage), and Resend (email). These providers process data on our behalf under data processing agreements.

**Legal requirements** — we may disclose data when required by UAE law, court order, or government authority.

We retain personal data for as long as your account is active or as needed to provide services. If you request account deletion, we will delete your data within 30 days, except where we are required to retain it by law (e.g., financial records required under UAE commercial law).

Trade license documents are retained for a minimum of 5 years to comply with UAE regulatory requirements.

We implement industry-standard security measures including:

- Encrypted data transmission (TLS 1.3) - Row-level security on all database tables - OTP-based authentication (no passwords stored) - Access controls limiting data access to authorized staff

No system is completely secure. We encourage you to use strong, unique email addresses and to contact us immediately if you suspect unauthorized access to your account.

Under the UAE PDPL, you have the right to:

- **Access** — request a copy of the personal data we hold about you - **Correction** — request that inaccurate data be corrected - **Deletion** — request deletion of your personal data (subject to legal retention obligations) - **Objection** — object to certain uses of your data

To exercise any of these rights, contact us at privacy@emiratesb2b.ae. We will respond within 30 days.

We use essential cookies for authentication (session management) and preference storage (theme, language). We do not use tracking or advertising cookies.

You can disable cookies in your browser settings, but this will prevent you from logging in to the platform.

We may update this Privacy Policy from time to time. We will notify registered users by email of any material changes. Continued use of the platform after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests, contact:

**EmiratesB2B Privacy Team** Email: privacy@emiratesb2b.ae Address: Dubai, United Arab Emirates