Privacy Policy
United Arab Emirates · Version 1.0 · Last updated 1 January 2026
2.1 Introduction
Alkhiidma ("Company", "we", "us") is committed to protecting the privacy of our Users in accordance with Federal Decree Law No. 45 of 2021 Regarding the Protection of Personal Data ("PDPL") and, where applicable, the DIFC Data Protection Law No. 5 of 2020. This Privacy Policy explains how we collect, use, disclose, and protect personal data in connection with the Platform.
2.2 Personal Data We Collect
We collect the following categories of personal data: identity data including full name, Emirates ID information, and passport information; contact data including email address and mobile number; business data including company name, trade licence number, and trade licence documentation; verification data including KYC documentation and identity verification records; transaction data including transaction history, listing data, and platform communications; technical data including device information, IP address, browser type, and login records; usage data including platform interaction data and feature usage; anonymised and pseudonymised analytics data; and user-generated content including material listings, images, and messages.
2.3 Lawful Bases for Processing
We process personal data on the following lawful bases under the PDPL: contractual necessity, where processing is required to provide Platform services; legal obligation, where processing is required to comply with applicable UAE law including AML/CFT requirements; legitimate interests, including analytics, fraud prevention, and Platform security; and consent, where we request explicit consent for certain communications.
2.4 Use of Personal Data
We use personal data to create, verify, and manage User accounts; to facilitate marketplace transactions and communications; to conduct KYC, identity verification, and fraud prevention; to comply with UAE legal and regulatory obligations; to improve Platform functionality and user experience; to send transactional, operational, and where consented, marketing communications; to conduct analytics and market research; and to resolve disputes and enforce these Terms.
2.4A Marketing Communications and Data Ownership
We send marketing communications only where you have given your prior consent, and you may withdraw that consent and opt out at any time, including via the unsubscribe mechanism in each communication or by contacting privacy@alkhiidma.com, in accordance with applicable UAE law (including Cabinet Resolution No. 56 of 2024 on the Telemarketing Regulations). Consistent with the E-Commerce Law, applicable UAE data protection legislation governs the use, classification, and ownership of User information and data, and we apply such legislation to any consumer or User data processed through the Platform.
2.5 Third-Party Data Processors
We may share personal data with trusted third-party processors acting on our behalf, including Amazon Web Services and Microsoft Azure for cloud infrastructure; MyFatoorah for payment processing upon introduction of payment services; Google Analytics for platform analytics; Meta Pixel for advertising measurement; identity verification providers for KYC purposes; and CRM systems for customer relationship management. All third-party processors are engaged under data processing agreements providing protections equivalent to those required under the PDPL. Where data is transferred outside the UAE, we do so only where permitted under the PDPL, including to jurisdictions recognised as providing an adequate level of protection, under appropriate contractual safeguards, or with your consent, and we implement appropriate safeguards as required.
2.6 Data Retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected or as required by applicable UAE law. Upon expiry of the applicable retention period, data will be securely deleted or anonymised.
2.7 Your Rights
Subject to applicable UAE law, you have the right to request access to, rectification or erasure of, and portability of your personal data; to restrict or object to processing; and to withdraw consent where processing is consent-based. Requests may be submitted to privacy@alkhiidma.com. We will respond within the timeframes required by the PDPL.
2.8 Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration, consistent with the PDPL and applicable data security standards. We maintain a secure technology infrastructure and process payments through a licensed payment service provider using secure payment methods, consistent with the E-Commerce Law and applicable TDRA and Central Bank of the UAE cybersecurity requirements. However, no system or transmission can be guaranteed to be fully secure, and to the fullest extent permitted by applicable UAE law we give no warranty that our measures will prevent all unauthorised access or loss.
2.9 Personal Data Breaches
In the event of a personal data breach that poses a risk to the privacy, confidentiality, or security of personal data, we will notify the UAE Data Office and affected data subjects to the extent and within the timeframes required under the PDPL and its implementing regulations, and will take appropriate measures to investigate, mitigate, and remedy the breach. To the fullest extent permitted by applicable UAE law, any notification of a breach is made for compliance purposes and is not an admission of fault or liability by the Company.
2.10 Minors
The Platform is not directed at persons under the age of eighteen (18). We do not knowingly collect personal data from minors. If we become aware that we have done so, we will delete that data promptly.
2.11 Updates to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified to Users at least fourteen (14) days before taking effect. Continued use of the Platform constitutes acceptance of the revised Policy.
2.12 Contact
For all privacy-related enquiries, please contact our Data Protection Officer at privacy@alkhiidma.com.
