Privacy Policy

Last updated: April 9, 2026

1. Introduction

This Privacy Policy describes how E.A.S.P FZE ("Company", "we", "us", or "our"), operating PartsBay.ae ("Platform"), collects, uses, stores, and protects your personal data.

This policy is issued in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE Data Protection Law") and its implementing regulations.

By using the Platform, you acknowledge the practices described in this Privacy Policy. Where required by applicable law, we will request your consent for specific processing activities.

2. Data Controller

The data controller responsible for your personal data is:

E.A.S.P FZE

UAQ Free Trade Zone

Umm Al Quwain, United Arab Emirates

Trade License No. 8065/2

For data protection inquiries, please contact us at: support@partsbay.ae

3. Personal Data We Collect

We collect the following categories of personal data:

Account and Profile Data:

•- Full name

•- Email address

•- Phone number (including Telegram handle, if provided)

•- Account credentials (password stored in hashed form only)

•- User type (buyer/seller)

•- Preferred language

Seller Profile Data (may be visible to authenticated users on the Platform):

•- Business or shop name

•- Business location and, where provided, other business profile information

•- Trade license information

•- Product listings, descriptions, and pricing

•- Product images and media

Buyer-Initiated Contact Data (shared with sellers when a buyer initiates contact or a transaction inquiry):

•- Buyer name or display name

•- Telegram handle (if provided by the buyer)

•- System identifiers necessary for messaging functionality

Communication Data:

•- Messages sent through the Platform's chat system

•- Message attachments, metadata, and timestamps

•- Support requests and correspondence

Order and Offer-Related Data:

•- Offer details, including offered prices and counteroffers

•- Order records, including product details, quantities, and pricing

•- Delivery method selections and preferences

•- Order and offer status updates

•- Transaction-related metadata

Support, Moderation, and Compliance Data:

•- Support tickets and correspondence

•- Dispute records and related communications

•- Moderation actions and decisions

•- Compliance-related records

Technical and Security Data:

•- IP address

•- Browser type and version

•- Device information

•- Session tokens and authentication data

•- Cookies and similar technologies (see Section 7)

4. Purpose of Data Collection

We collect and process your personal data for the following purposes:

•- Account Management: Creating and managing your user account

•- Platform Operation: Facilitating listings, discovery, negotiations, offers, orders, and communication between buyers and sellers

•- Communication: Enabling in-platform messaging between users, sending service notifications

•- Operational Notifications: Sending service-related notifications about your account, listings, orders, offers, and Platform activity

•- Search & Discovery: Powering product search and recommendations

•- Security: Detecting and preventing fraud, abuse, and unauthorized access

•- Legal Compliance: Complying with UAE laws, regulations, and legal obligations

•- Service Improvement: Maintaining, troubleshooting, securing, and improving the functionality and usability of the Platform

•- Support: Responding to your inquiries and providing customer support

5. Legal Basis for Processing

In accordance with UAE Federal Decree-Law No. 45/2021, we process your personal data on the following legal bases:

•- Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., specific data processing activities where consent is required)

•- Contract Performance: Where processing is necessary for the performance of a contract with you (e.g., providing Platform services upon registration)

•- Legal Obligation: Where processing is necessary to comply with applicable UAE laws and regulations

•- Other Lawful Bases / Exceptions Permitted by Law: Where processing is otherwise permitted or required under applicable law, including lawful exceptions to consent requirements where available

6. Data Sharing & Third-Party Processors

We share your personal data with the following categories of third-party service providers who process data on our behalf:

All third-party processors are contractually bound to process your data only as instructed by us and to implement appropriate security measures.

We do not sell your personal data to third parties.

We may also disclose your personal data if required by law, regulation, legal process, or governmental request.

User-to-User Data Disclosure:

The Platform facilitates listings, offers, orders, and communication between users. As part of its normal operation:

•- Seller contact details (such as name, phone number, Telegram handle, and shop name) may be visible to authenticated users on the Platform.

•- When a buyer initiates contact with a seller or makes a transaction inquiry, the seller may see the buyer's name, Telegram handle, and system identifier.

•- Once users exchange contact details or communicate through off-platform channels (phone, Telegram, etc.), any further processing of personal data by the other party is outside the Platform's control and is not governed by this Privacy Policy.

Users are responsible for how they use the personal data of other users obtained through the Platform.

Service Provider	Purpose	Data Processed
Supabase	Database hosting, authentication	Account data, listings, messages
Cloudinary	Image storage and optimization	Product images, user avatars
Algolia	Search functionality	Product listings, search queries
Stream Chat	In-platform messaging	Chat messages, user profiles

7. Cookies & Tracking Technologies

The Platform uses cookies and similar technologies to:

•- Maintain your session and authentication state

•- Remember your preferences (language, display settings)

•- Support the security and operation of the Platform

Types of cookies we use:

•- Essential Cookies: Required for the Platform to function (authentication, session management, security)

•- Preference Cookies: Remember your settings and preferences (language, display options)

Third-party infrastructure providers used by the Platform may use cookies or similar technologies where necessary for service operation, security, session continuity, or performance.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from using certain features of the Platform.

8. Diagnostics, Monitoring, and Authorized Access

Diagnostics and Monitoring:

We and our service providers may use diagnostics, error monitoring, logging, tracing, and replay-like tools to detect issues, investigate incidents, maintain security, improve reliability, troubleshoot errors, and protect the Platform.

Such tools may process technical interaction data, event data, device and browser data, and incident-related information. These tools may be operated by us or by third-party service providers acting on our behalf.

Where reasonably possible, sensitive fields and unnecessary personal data are masked, excluded, or otherwise limited in such tools and logs. Reasonable measures are taken to reduce unnecessary collection of personal data through these tools.

Authorized Access:

Authorized personnel may access messages, logs, notifications, and related records where reasonably necessary for support, moderation, fraud prevention, security, dispute handling, legal compliance, or enforcement of Terms. Such access is limited to authorized personnel and permitted operational purposes.

Service-related notifications (e.g., account security, order updates, offer status changes) may be sent to you as part of the Platform's normal operation. These are not marketing communications.

9. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

General retention principles:

•- Active accounts: Your data is retained for the duration of your active account.

•- Deleted or closed accounts: Upon account deletion or closure, your data will be processed for deletion within a reasonable period. Certain data may be retained beyond this period where necessary for legal compliance, fraud prevention, dispute resolution, or backup integrity purposes, as permitted by applicable law.

•- Communication logs: Chat messages and related metadata are retained for a reasonable period after the last activity, for safety, compliance, and dispute resolution purposes.

•- Security and abuse logs: Technical and security-related data is retained for as long as reasonably necessary for compliance, fraud prevention, and dispute resolution.

Some communications, audit records, dispute-related records, operational logs, and compliance-related records may be retained for extended periods, including up to 5 years in some cases, where reasonably necessary for safety, fraud prevention, dispute handling, legal compliance, backup integrity, security, or enforcement purposes.

You may request deletion of your data subject to applicable legal retention requirements. Please contact us at support@partsbay.ae to make such a request.

10. Your Data Subject Rights

Under UAE Federal Decree-Law No. 45/2021, you have the following rights regarding your personal data:

•- Right of Access: You have the right to request a copy of the personal data we hold about you

•- Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data

•- Right to Erasure: You have the right to request deletion of your personal data, subject to legal retention obligations

•- Right to Restrict Processing: You have the right to request that we limit how we use your data

•- Right to Data Portability: You have the right to receive your data in a structured, commonly used, machine-readable format

•- Right to Object / Request Cessation of Processing: You may request cessation, restriction, or objection to certain processing activities where such right is available under applicable law

•- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time

To exercise any of these rights, please contact us at support@partsbay.ae. We will respond to your request within 30 days.

11. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

•- Encryption of data in transit (TLS/SSL)

•- Secure authentication mechanisms

•- Access controls and authorization policies

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

In the event of a personal data breach that prejudices the privacy, confidentiality, or security of data subjects, we will notify the UAE Data Office without undue delay, and where feasible, within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights, we will also notify affected users without undue delay.

12. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.

If we become aware that we have collected personal data from a child under 18, we will take steps to delete such data promptly. If you believe that a child has provided us with personal data, please contact us at support@partsbay.ae.

13. International Data Transfers

Your personal data may be transferred to and processed in countries outside the United Arab Emirates where our third-party service providers operate.

When transferring data internationally, we ensure that appropriate safeguards are in place in accordance with UAE Data Protection Law, including:

•- Using cross-border transfer mechanisms and safeguards permitted under applicable law, which may include adequacy decisions where available, contractual protections, or the data subject's consent where appropriate

We take reasonable steps to ensure that your personal data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of material changes by posting the updated policy on the Platform with a revised "Last Updated" date. For significant changes, we will make reasonable efforts to provide additional notice via email or through the Platform.

Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

E.A.S.P FZE

UAQ Free Trade Zone

Umm Al Quwain, United Arab Emirates

Trade License No. 8065/2

Email: support@partsbay.ae

Phone: +971 56 247 2906

If you are not satisfied with our response, you have the right to lodge a complaint with the UAE Data Office or the relevant data protection authority.

You can reach the UAE Data Office at: https://www.dataoffice.gov.ae