Privacy Policy

This Privacy Policy outlines how Carzle Portal ("Carzle", "we", "our", or "us") collects, uses, and protects your personal data in compliance with Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data (UAE PDPL). 1. Data Collection & Purpose We collect only the minimum data necessary to provide our automotive marketplace services: Direct Information: Name, phone number, and email address provided during account registration or when submitting inquiries. Lead Data: When you click "Call" or "WhatsApp" on a listing, we log the event, your city (via IP lookup), and share your contact details with the specific dealer to facilitate your inquiry. Technical Data: IP addresses are processed temporarily for security (e.g., preventing brute-force attacks) and anonymized for view counts. 2. Traffic Source Data When you view a listing, we record which channel referred you to Carzle — for example, a search engine, social media platform, or a direct link. We store this as a category (e.g. "Instagram", "Google", "Direct") and do not store the full referring URL. This data is used solely to help our dealer partners understand how buyers discover their listings. It is never sold or shared with third parties. --- 3. Advertising We use the Meta Pixel to understand how visitors interact with our website and to serve relevant advertisements on Facebook and Instagram. When you accept cookies, the Meta Pixel may collect your IP address, browser information, and pages you visit on carzle.ae. This information is processed by Meta Platforms, Inc. in accordance with their https://www.facebook.com/policy. You can manage your ad preferences at https://www.facebook.com/ads/preferences. --- 4. Lawful Basis for Processing We process your data based on: Consent: Explicit permission for marketing, cookies, and lead sharing. Contractual Necessity: Fulfilling your requests to contact sellers or manage your account. Legal Obligation: Complying with UAE regulatory requirements. --- 5. Data Sharing & Third Parties We do not sell your personal data. Limited data is shared only with audited partners: Dealers: Your contact info is shared only with the specific dealer you choose to contact. Twilio: For delivering transactional SMS (OTP) and email alerts. Stripe: For secure payment processing. We do not store raw payment credentials. Cloudflare: For secure, encrypted storage of vehicle media and documents. --- 6. Data Anonymization & Retention In accordance with Article 13 of the UAE PDPL: Lead Records: Anonymized after 24 months. We purge the IP, User Agent, and Phone Number, retaining only numerical counts for business reporting. Partner Inquiries: Retained for 24 months then permanently deleted. Location: Server-side logging for leads uses a local IP lookup to identify the city; no precise GPS data is stored without explicit consent. --- 7. Security Measures Data is stored on secure servers. We utilize: AES-256 Encryption for data at rest. Pseudonymization of historical logs. Regular security audits to maintain platform integrity. --- 8. Your Rights Under the UAE PDPL, you have the following rights: Right to Access: Request a copy of the data we hold about you. Data access requests are handled manually via email ([email protected]) within 30 days Right to Rectification: Correct any inaccurate or incomplete information. Right to Erasure: Request a full purge of your profile ("Right to be Forgotten"). Right to Withdraw Consent: Opt-out of non-essential processing at any time. To exercise these rights, contact [email protected]. We execute erasure requests within 30 days.