Privacy policy

What we collect before launch

• Early-access list: your name and your mobile number or email, the language you used, and your consent.
• Founding Families: your name, mobile number, optional email, the emirate you live in, your family size if you give it, the language you used, your consent, and which post or ad brought you to the page.
• Merchant interest: your shop's name, your name, mobile number, optional email, area, department, whether you hold a trade licence, any note you add, and your consent.
• Basic technical data our hosting provider records for security, such as your IP address and browser type.

What we will collect after launch

• Your account details, delivery addresses and order history.
• Family account details that the account owner adds, including each member's budget and permissions.
• Payment confirmations from our payment gateway. Card numbers are entered on the gateway's secure page and never reach our servers.

Why we use it

• To tell you when ESmart Buy opens, to invite Founding Families to the soft opening, or to call you back about selling on the platform.
• After launch: to deliver your orders, run your family account and membership, provide customer service, and meet our legal and tax duties.
• We never sell your personal data, and we do not use it for marketing unless you have agreed.

Who we share it with

Only with the service providers that run the platform for us (hosting, database, messaging, payment and delivery partners), each bound to protect it, and with authorities where the law requires. Merchants receive only what they need to fulfil your order.

Advertising and measurement

If you press Accept on the cookie banner, the Meta pixel (Facebook and Instagram) records your visit and your sign-up, so we can see which of our ads work and show our ads to people who have visited. When you sign up we may also send Meta a scrambled (hashed) copy of your mobile number and email, so it can match the sign-up to an ad without reading them. If you press Decline, nothing about you is sent to Meta. You can change your choice at any time under Cookie settings at the bottom of every page.

Where it is kept and for how long

Before launch, sign-up data is held by our cloud provider. The live platform is hosted in the United Arab Emirates. We keep sign-up data until launch and for twelve months after, or until you ask us to delete it; order and tax records are kept for as long as UAE law requires.

Your rights

• Ask for a copy of the personal data we hold about you.
• Ask us to correct it or delete it.
• Withdraw your consent to being contacted at any time.
• Write to hello@esmartbuy.ae; we reply within 30 days.

Security

Data is encrypted in transit (https) and at rest, access is limited to the people who need it, and security incidents are reported as UAE law requires.