Privacy Policy

PRIVACY POLICY — ART SADEEM

Last updated: 4 June 2026

1. INTRODUCTION
This Privacy Policy explains how Art Sadeem (“Art Sadeem”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects your personal data when you use our website at artsadeem.com, our mobile applications, and related services (together, the “Platform”). It applies to buyers, sellers, instructors, visitors, and account holders. By using the Platform, you agree to the practices described in this Policy.

2. WHO WE ARE (DATA CONTROLLER)
Art Sadeem operates the artsadeem.com online marketplace for original artworks, art tools, books, courses, and cultural experiences. For any privacy question, request, or complaint, you can contact us at:
Email: [email protected]
Website: https://artsadeem.com

3. UAE DATA PROTECTION
Where we process personal data in the United Arab Emirates onshore, we aim to comply with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations. Where other regimes apply to our processing (for example, free-zone rules), we apply the regime relevant to that processing. We also have regard to UAE e-commerce and consumer-protection laws applicable to online marketplaces.

4. INFORMATION WE COLLECT
4.1 Account data: name, email address, phone number, hashed password, profile details, language preference, and role (buyer, seller, instructor, admin).
4.2 Transaction data: orders, cart and checkout activity, amounts, currency, shipping and billing addresses, order status, and payment metadata (we do not store full card numbers — see Section 7).
4.3 Seller and onboarding data: display name, identity and verification details, payout/bank details, tax information where required, and listing content.
4.4 Content you provide: artwork and product images, titles, descriptions, reviews, messages, and support requests.
4.5 Technical data: IP address, device and browser type, operating system, app version, device identifiers, push-notification tokens, cookies, log files, and analytics/diagnostic data.
4.6 Communications: messages you send us and records of your interactions with support.

5. HOW WE USE YOUR DATA (PURPOSES AND LEGAL BASES)
We process personal data to:
- create and manage your account and provide the Platform (performance of a contract);
- list, browse, and sell items, and operate carts, checkout, and orders;
- process payments and seller payouts, and prevent and detect fraud;
- verify sellers and meet legal, tax, accounting, and regulatory obligations;
- provide customer support and send service messages (e.g. order, security, and account notices);
- secure, maintain, debug, and improve the Platform (legitimate interests);
- send push notifications and, where you have consented, marketing communications (consent — you can opt out at any time).

6. COOKIES AND SIMILAR TECHNOLOGIES
We use strictly necessary cookies to operate the Platform (e.g. session, security, and cart) and, where permitted, analytics or preference cookies to understand usage and improve the service. You can control cookies through your browser settings; some features may not function without essential cookies.

7. PAYMENTS
Card and online payments are processed by third-party payment providers, including Stripe and PayPal. When you pay, your card details are submitted directly to the payment provider and handled under their security standards (PCI-DSS); we receive transaction metadata (such as status, amount, and a reference) but not your full card number. Please review the privacy notices of Stripe (https://stripe.com/privacy) and PayPal (https://www.paypal.com/privacy) for how they process your data.

8. SHARING AND DISCLOSURE
We share personal data only as needed with:
- payment processors (Stripe, PayPal) to take payments and pay sellers;
- cloud hosting, infrastructure, and storage providers that run the Platform;
- communication providers (email and push-notification services, e.g. Google Firebase Cloud Messaging) to deliver messages;
- identity/sign-in providers where you choose to use them (e.g. Google Sign-In);
- error-monitoring and analytics providers used to keep the Platform reliable and secure;
- sellers and buyers, to the extent needed to fulfil an order (e.g. shipping details);
- professional advisers, auditors, and authorities where required by law or to protect rights, property, or safety.
We do not sell your personal data.

9. INTERNATIONAL TRANSFERS
Some of our providers may process data outside the United Arab Emirates. Where data is transferred internationally, we use appropriate safeguards as required by applicable law to protect your information.

10. DATA RETENTION
We retain personal data for as long as needed for the purposes described in this Policy, including to provide the Platform and to meet legal, tax, accounting, dispute-resolution, and regulatory requirements. When data is no longer needed, we delete or anonymise it where reasonably possible.

11. YOUR RIGHTS
Subject to the PDPL and other applicable law, you may request to access, correct, delete, restrict, or port your personal data, withdraw consent, or object to certain processing. To exercise your rights, contact us at [email protected]; we may need to verify your identity before acting on a request. You may also lodge a complaint with the UAE Data Office or other competent authority where applicable.

11A. ACCOUNT AND DATA DELETION
You can request deletion of your Art Sadeem account and associated personal data at any time, using either method below:

Option 1 — In the app or website:
1. Sign in to your account.
2. Go to Profile / Account settings.
3. Select "Delete account" and confirm.

Option 2 — By email:
Send an email to [email protected] from your registered email address, with the subject "Delete my account".

What is deleted: your account, profile information, preferences, uploaded content (such as listings, images, and reviews), and other personal data linked to your account.

What may be retained: we may keep certain records for as long as required by law — for example, transaction, order, payment, tax, and accounting records, and information needed for fraud prevention, dispute resolution, or to comply with legal obligations. Such retained data is kept only for the legally required period and then deleted or anonymised.

Timing: we action verified deletion requests within 30 days. Some backups may persist for a short additional period before being overwritten.

12. SECURITY
We implement technical and organisational measures appropriate to the risk, including encryption in transit, hashed passwords, access controls, and regular backups. However, no method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

13. CHILDREN
The Platform is not directed to children below the age required to enter into a contract in the United Arab Emirates. We do not knowingly collect personal data from such children. If you believe a child has provided us data without appropriate authority, contact [email protected] and we will take appropriate steps.

14. THIRD-PARTY LINKS
The Platform may contain links to third-party sites or services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices.

15. CHANGES TO THIS POLICY
We may update this Policy from time to time. We will post the updated version with a new “Last updated” date, and significant changes may be notified through the Platform.

16. CONTACT US
For any privacy questions, requests, or complaints, contact:
Art Sadeem
Email: [email protected]
Website: https://artsadeem.com