How we collect, use, and protect your personal information
"Personal Data" means information about an individual from which that person is either directly identified or can be identified. It does not include anonymised data where your identity has been permanently removed.
| Category | What This Means |
|---|---|
| Identity Data | Name, username, profile picture, age/date of birth (if provided). Birth dates are collected solely for Age Verification and regulatory compliance, and are not used for marketing or profiling. |
| Contact Data | Email address, telephone number(s). |
| Location Data | Approximate location if you enable this feature via your device settings. |
| Listings Data | Details about your listings, listings you viewed, favorites, and offers you made. |
| Marketing Data | Your preferences for receiving marketing communications. |
| Chat Data | Messages you exchange with other users through our chat feature. |
| Behavioural Data | Inferred information about your behaviour and interests based on Platform activity, often grouped into segments. |
| Technical Data | IP address (anonymized), browser type, device information, operating system. |
We also collect and use "aggregated data" (statistical or demographic data). Aggregated data may be derived from your Personal Data but does not directly identify you. For example, we may calculate the percentage of users in Dubai vs Abu Dhabi. If we combine aggregated data with Personal Data that could identify you, we treat it as Personal Data under this policy.
You do not have to provide Personal Data to us. However, where we need to process your Personal Data to grant you access to the Platform or comply with law, failure to provide it means we may not be able to provide services.
For example: We need your email address to create your account. Without it, you cannot register.
In addition to data you provide directly, we collect certain Personal Data from third-party sources:
| Third Party Source | Categories of Personal Data |
|---|---|
| Social Media Platforms | Identity Data (name, profile photo), Contact Data (email) |
| Analytics Providers | Behavioural Data, Technical Data (with consent only) |
| Advertisers | Behavioural Data, Technical Data (with consent only) |
Additional privacy information for specific listing types
The Master Privacy Policy above applies to all users. However, certain listing categories require us to collect additional sensitive data for regulatory compliance. Click below to learn how we handle data specific to your listing type.
If you list a property for sale or rent, click here to see how we handle your verification documents.
This addendum covers:
If you list a car or vehicle, click here to see how we handle VINs and registration documents.
This addendum covers:
Learn how we process government documents and share data with UAE authorities for regulatory compliance.
Categories covered:
💡 Note: These addendums are supplements to (not replacements for) the Master Privacy Policy. All general data protection rights described above apply equally to category-specific data.
Under UAE data protection laws, we must have a valid "legal basis" for processing your Personal Data. We rely on the following legal bases:
Processing necessary to provide you access to the Platform and fulfill our obligations to you.
Processing required to comply with legal or regulatory obligations under UAE law.
Processing based on your explicit, informed, and freely-given consent (e.g., marketing emails, analytics cookies).
| Purpose | Categories of Data | Legal Basis |
|---|---|---|
| Account Creation | Identity Data, Contact Data | Contractual Necessity |
| Platform Operation | All Data Categories | Contractual Necessity |
| Marketing Communications | Contact Data, Marketing Data | Consent |
| Analytics & Tracking | Behavioural Data, Technical Data | Consent |
| Fraud Prevention | Identity Data, Technical Data | Compliance with Law |
| Account Verification | Identity Data, Contact Data | Contractual Necessity |
to third parties for marketing purposes.
We may share your information with service providers who help us operate our platform, or when required by law.
You have the right to access, correct, or delete your personal information.
We ensure that your data is processed in a secure European Union (EU) cloud region with GDPR-compliant data protection standards, or in countries with adequate data protection levels.
We have appointed a Data Protection Officer to oversee compliance.
We implement appropriate security measures to protect your personal information against unauthorized access, alteration, or disclosure.
Under UAE PDPL, you have the following explicit rights regarding your personal data:
To exercise any of these rights, please contact us at [email protected] or use the 'Delete My Account' tool in your Settings.
If you have concerns about how we handle your Personal Data or wish to make a complaint, we want to hear from you:
First, please contact our Data Protection Officer at [email protected]. We will investigate and respond to your complaint as quickly as possible, typically within 30 days.
When contacting us, please include:
If you are not satisfied with our response, you have the right to file a complaint with the UAE Data Office, the supervisory authority for data protection in the United Arab Emirates.
UAE Data Office Contact:
We take all complaints seriously and are committed to resolving them promptly and fairly. Your feedback helps us improve our data protection practices and better serve our users.
Under Federal Decree-Law No. 45 of 2021 (UAE PDPL), we process your personal data based on the following legal grounds:
You provide explicit consent when creating an account, subscribing to services, or using social login. You can withdraw consent at any time through your account settings.
Processing is necessary to provide our marketplace services, manage your account, facilitate transactions, and fulfill our obligations to you.
We process data to comply with UAE laws, including tax requirements, anti-money laundering regulations, and responding to lawful requests from authorities.
We process data for fraud prevention, platform security, service improvement, and business analytics, balanced against your privacy rights.
We do NOT knowingly collect sensitive personal data (health information, biometric data, genetic data, religious beliefs, political opinions, sexual orientation, trade union membership, or criminal records) unless explicitly required by law and with your explicit consent. If you inadvertently provide such information, please contact us immediately for removal.
To provide secure, high-performance services—including our AI search features and marketplace verification—BuyOrSell24 processes and stores your core user data on secure infrastructure located in the European Union (EU).
What's stored in the EU:
While your primary data is hosted securely in the EU, we may still utilize global edge networks (like Cloudflare) to deliver content quickly to you in the UAE.
While your core data remains in the EU, some third-party services we use for analytics and authentication may process limited data outside the EU. When we transfer data internationally, we ensure appropriate safeguards are in place as required by UAE PDPL:
Cross-Border Data Transfer Compliance
We are committed to protecting your data regardless of where it is stored. Under Article 23 of the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), cross-border data transfers are permitted to jurisdictions that possess adequate data protection legislation.
The European Union is recognized as an adequate jurisdiction due to its strict General Data Protection Regulation (GDPR) frameworks. By creating an account, applying for jobs, or using our services, you explicitly consent to this cross-border transfer. To further protect your data, all international transfers to our third-party infrastructure providers are governed by strict Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs) to ensure your data receives a level of protection equivalent to UAE standards.
UAE Data Office Notification:
As required by UAE PDPL Article 23, we have notified the UAE Data Office of our data processing activities and international transfers. For details, contact: [email protected]
Under UAE PDPL, your consent must be freely given, specific, informed, and unambiguous. You have the right to withdraw consent at any time:
Unsubscribe via link in any email or update preferences in account settings
Revoke access via Facebook/Google account settings or disconnect in profile
Manage via cookie banner or browser settings for analytics and advertising cookies
To delete your account and all associated data, go to Account Settings → Delete Account, or email [email protected]. Upon deletion:
Important: Withdrawing consent or deleting your account may limit your ability to use BuyOrSell24 services. Some data must be retained for legal obligations (e.g., transaction records for tax purposes).
BuyOrSell24 uses limited automated processing for the following purposes:
No Purely Automated Decisions: We do not make decisions solely based on automated processing that produce legal effects or significantly affect you without human oversight.
When you choose to use Facebook Login or Google Login, we collect and process certain information from your social account to provide you with seamless authentication and an enhanced user experience.
Control Your Data: You have complete control over what data your social provider (Facebook or Google) shares with us. You can review and modify these permissions in your account settings at any time.
Revoke Access: You can disconnect BuyOrSell24 from your social account through your provider's App Settings (Facebook App Settings or Google Account Permissions). This will not delete your BuyOrSell24 account but will prevent future data sharing.
Delete Your Data: If you delete your BuyOrSell24 account, we will remove all data obtained from your social accounts within 30 days, except where required by law.
Security Note:
BuyOrSell24 follows Facebook Platform Policy and Google API Services User Data Policy. We use secure OAuth 2.0 protocol for all social login integrations and employ industry-standard security measures to protect data obtained through social authentication.
If you have questions about how we handle social login data or want to exercise your data rights, please contact us at [email protected]. For more information about provider data practices, visit Facebook's Privacy Policy or Google's Privacy Policy.
We use cookies to enhance your experience and analyze site usage.
Our service is not intended for children under 13. We do not knowingly collect personal information from children.
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page.
For privacy-related inquiries, data subject rights requests, or concerns about how we handle your personal data, please contact our Data Protection Officer:
Company: Dynamic Web Lab FZE LLC (Formation Number: 4426361)
Email: [email protected]
Address: Dubai, UAE
We use the following third-party services to provide and improve our platform. Each service processes data in accordance with their privacy policies and our data processing agreements:
For processing payments and preventing fraud, Stripe, LLC acts as an independent Data Controller of your personal data. This allows Stripe to monitor for fraudulent transactions, mitigate financial loss, and comply with international anti-money laundering (AML) and know-your-customer (KYC) obligations.
Personal and payment data related to our operations is stored and maintained with GDPR-compliant protections in the European Union. Customer and transaction data will be retained for a minimum of five (5) years to meet applicable financial record-keeping laws.
Since Stripe is a global entity, your data may be transferred outside the UAE. These transfers are protected by Stripe’s Data Processing Agreement (DPA) and international frameworks, ensuring your data receives a level of protection equivalent to UAE standards.
EU-Based Secure Hosting:
Your core personal data (accounts, listings, messages, contact forms, transactions) is stored exclusively on secure AWS servers located in the European Union (EU). All data transfers and processing comply with both UAE PDPL and EU GDPR standards, ensuring the highest level of protection through Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs).
We take data security seriously and have implemented measures to prevent unauthorized access to your personal data.
If you suspect unauthorized access to account, contact us immediately at [email protected] and change your password.
We strictly adhere to Storage Limitation. Personal data (e.g., birth dates) is deleted immediately once the purpose is exhausted. Financial/Transaction records are retained for 5 years as required by UAE financial regulations. All other data is erased upon account deletion.
