Privacy Policy

Last updated: 6 November 2026

1. Controller

Enabler-S FZE LLC (licence no. 262495840888, BC-889144, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates) is the controller of the personal data processed through BidBuddy in the UAE, in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL"). Privacy contact: [email protected].

2. Data we collect

• Account and order data: name, email, mobile number, delivery address, order history, invoices.
• Payment data: payment status and a reference from our payment provider. Full card numbers are handled only by the licensed payment provider, never stored by us.
• Support data: messages, chat transcripts, return and complaint details.
• Technical data: IP address, device and browser type, pages viewed, and cookies (see section 8).
• Seller data (sellers only): trade licence, owner identity document, VAT registration, bank/IBAN details, collected to verify sellers and pay them.

3. Why we use it, and on what basis

• To create your account, process and deliver orders, take payment, handle returns and provide support — necessary to perform our contract with you.
• To issue invoices and keep tax and accounting records, prevent fraud and money laundering, and respond to lawful requests — to comply with our legal obligations.
• To secure and improve the Platform and prevent abuse — our legitimate interests, balanced against your rights.
• To send marketing messages and to use analytics and advertising cookies — only with your consent, which you can withdraw at any time.

4. Who we share it with

• The verified supplier that dispatches your order (name, phone, delivery address), only to deliver it. Suppliers must keep this data confidential and use it for nothing else.
• Delivery partners, the payment service provider, email/SMS/WhatsApp messaging providers, and IT hosting and support providers, each bound by confidentiality and data-protection obligations.
• Government and regulatory authorities where required by UAE law.

We do not sell your personal data.

5. Transfers outside the UAE

Some of our service providers, including hosting, may process data outside the UAE. We transfer personal data only where permitted by the PDPL — for example to countries with adequate protection, or under contractual safeguards that require the recipient to protect the data to the PDPL standard.

6. How long we keep it

We keep account data while your account is open. Invoices and transaction records are kept for at least 5 years, as required by UAE tax law. Seller verification records are kept for 5 years after the seller relationship ends. Marketing preferences are kept until you withdraw consent. Data is then deleted or anonymised.

7. Your rights

Subject to the PDPL, you may: obtain information about and a copy of your data; have inaccurate data corrected; have data erased where it is no longer needed; restrict or object to processing, including direct marketing; receive your data in a structured format; and withdraw consent at any time. Email [email protected]; we respond within 30 days. You may also complain to the UAE Data Office.

8. Cookies

We use strictly necessary cookies (sign-in, cart, region and language, security) that the Platform needs to work. Analytics and advertising cookies (Google Analytics / Google Tag Manager) are set only if you accept them in the cookie banner. You can change your choice at any time using "Cookie settings" in the footer.

9. Security

We use encryption in transit (HTTPS), access controls and restricted storage for documents such as seller identity papers. No system is perfectly secure; if a breach is likely to affect your rights we will notify you and the competent authority as required by law.

10. Children

The Platform is not directed at children under 18, and we do not knowingly collect their data without parental consent.

11. Changes

We will post any update here with a new date, and tell you directly about significant changes.