Privacy Policy

Last updated: 5 October 2026

1. WHO IS RESPONSIBLE FOR YOUR DATA

Artsadeem Trading (ارت سديم للتجارة), a sole establishment licensed in Dubai under Professional Licence No. 1615127, Office 43-44, Dubai Municipality Building, Al Fahidi, Bur Dubai, Dubai, United Arab Emirates, operates artsadeem.com and the Artsadeem apps (the "Platform") and is the controller of your personal data.

Privacy contact: [email protected] — +971 50 363 2373.

We process personal data in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and Federal Decree-Law No. 14 of 2023 on Trading by Modern Technological Means.

2. DATA WE COLLECT

2.1 Account: name, email address, password (stored only as a secure hash), language preference, and, if you sign in with Google, your Google name, email and profile picture.

2.2 Orders: items bought, amounts, delivery name, address, city, country, postal code and phone number, order history and messages about your orders.

2.3 Payments: payment status, amount and a payment reference. Card details are entered directly with Stripe or PayPal; we never see or store your full card number.

2.4 Sellers: public profile (shop name, biography, city, country, portfolio and social links); identity details for verification — full legal name, date of birth, ID type, ID number and expiry date, and copies of the Emirates ID (both sides) or passport; for businesses, the trade licence (number, issuing authority, expiry date and copy) and VAT registration number (TRN) if any; pickup address and mobile number for the courier; bank account details for payouts (account holder, bank name, IBAN); listings, sales and payout records. Identity numbers are stored encrypted, documents are kept in private storage that only our team can open, and none of these identity details are shown on the Platform.

2.5 Content you provide: listings, photos, reviews, messages between users, support requests, dispute evidence and course projects.

2.6 Technical data: IP address, browser and device type, pages requested and error logs, collected for security and to keep the Platform working; push-notification tokens if you use the mobile app.

3. WHY WE USE YOUR DATA (AND OUR LEGAL BASIS)

- To create and run your account and provide the Platform (performance of our contract with you).

- To process Orders, payments, shipping, returns, refunds and Seller payouts (contract).

- To verify Sellers and prevent fraud, spam and abuse (legitimate interests and legal obligations).

- To send service messages such as order confirmations, shipping updates, security and account notices (contract).

- To answer support requests and complaints (contract and legal obligations).

- To keep accounting, tax and commercial records and respond to lawful requests from authorities (legal obligations).

- To send marketing messages, only if you have opted in; you can withdraw consent at any time (consent).

4. WHO WE SHARE DATA WITH

We share personal data only where needed for the purposes above:

- Sellers: the delivery name, address and phone of Buyers who ordered from them, so they can fulfil the Order.

- Aramex (shipping): names, addresses, phone numbers, parcel contents and value, to collect and deliver parcels and clear customs.

- Stripe and PayPal (payments): payment details you enter with them, the amount and order reference.

- Cloudflare (website security, content delivery and anti-spam checks on our forms): technical data such as IP address and browser data.

- Zoho (email delivery): the email address and content of emails we send you.

- Google (only if you choose "Sign in with Google", or for push notifications in the mobile app).

- Professional advisers, auditors, courts and authorities, where required by law.

We do not sell your personal data and we do not use advertising or tracking networks.

5. ARTIFICIAL INTELLIGENCE

AI features on the Platform (such as listing and price suggestions and the exhibition guide) run on Artsadeem's own servers. Your data is not sent to external AI providers and is not used to train third-party AI models.

6. WHERE YOUR DATA IS STORED

The Platform and its database are hosted on Artsadeem's own servers in the United Arab Emirates, and backups are kept on our own storage in the UAE. Stripe, PayPal, Cloudflare, Zoho and Google may process data outside the UAE; such transfers are made only as needed to provide their service and under contractual and security safeguards, as permitted by the PDPL.

7. HOW LONG WE KEEP DATA

- Account and profile data: while your account is open; deleted or anonymised after you close it, except as below.

- Orders, invoices, payments, payouts and related correspondence: 5 years after the transaction, as required by UAE commercial and tax record-keeping rules.

- Seller identity details, verification documents, licences and bank details: while the seller account is active and up to 5 years after it closes.

- Dispute files: until the dispute is closed plus the record-keeping period above.

- Server and security logs: kept for a short period and overwritten automatically, normally within 90 days. Backups: overwritten within 30 days.

8. COOKIES

We use only cookies that are necessary for the Platform to work: the session cookie (keeps you signed in and holds your cart), a security token against forged requests, and preference cookies for your language and display currency. Cloudflare may set security cookies to protect the site from bots, and Stripe and PayPal set their own cookies on their payment pages to prevent fraud. We do not use advertising or analytics cookies. You can delete cookies in your browser, but signing in and checkout need the necessary cookies.

9. YOUR RIGHTS

Under the PDPL you can ask us to: give you access to and a copy of your personal data; correct inaccurate data; delete your data; restrict or object to certain processing; receive your data in a structured, machine-readable format; and withdraw a consent you gave. Contact [email protected] from your account email. We may need to verify your identity and will answer within 30 days. If you are not satisfied, you can complain to the UAE Data Office.

10. DELETING YOUR ACCOUNT

You can delete your account at any time: sign in, open Profile / account settings, choose "Delete account" and confirm — or email [email protected] from your registered email with the subject "Delete my account". We delete your profile, preferences and content within 30 days. Records we must keep by law (section 7) are kept for the required period and then deleted.

11. SECURITY

We protect data with encrypted connections (HTTPS), hashed passwords, encrypted storage of sensitive settings, access controls, firewalls, monitoring and regular backups. If a personal data breach puts your rights at risk, we will notify you and the competent authority as required by law.

12. CHILDREN

The Platform is intended for people aged 18 or over. Younger users may only use it with the consent and supervision of a parent or guardian. We do not knowingly collect data from children without that consent; contact us if you believe we have.

13. MARKETING

We do not currently send marketing emails. If we start, we will send them only to users who have opted in, and every message will include an unsubscribe link. Service messages about your orders and account (and the unread-notifications digest, which you can switch off in your account settings) are not marketing.

14. CHANGES

We may update this policy. The current version and its date are always published on this page, and significant changes are announced on the Platform.

15. CONTACT

Artsadeem Trading — Office 43-44, Dubai Municipality Building, Al Fahidi, Bur Dubai, Dubai, UAE — [email protected] — +971 50 363 2373.