Privacy Policy
Effective 1 September 2026 · under UAE Federal Decree-Law No. 45 of 2021 (PDPL)
1. What we collect
In plain language: Your phone, name, car, addresses, and what you search and order.
Account data (phone number, name), vehicle data (make, model, year, and optionally VIN or a Mulkiya scan), delivery addresses, requests, orders, messages with suppliers, ratings, and app usage. Suppliers additionally provide a trade licence, Emirates ID, and shop location.
2. How we use it
To match requests to suppliers, filter parts to your car, coordinate delivery and returns, prevent fraud, provide support, and — for suppliers on Pro — generate demand and pricing insights from aggregated, de-identified search data.
4. What we never do
In plain language: We don't sell your data. Full stop.
We do not sell personal data, do not share your phone number with suppliers before you accept a quote, and do not use Mulkiya scans for anything beyond reading your vehicle details.
5. Retention
Account data is kept while your account is active and for 5 years after closure where required for tax and consumer-protection records. Messages are retained for 24 months. You may request earlier deletion of anything not legally required.
6. Your rights
Under the PDPL you may access, correct, export, or delete your data, and object to processing. In the app: Profile → Settings. We respond within 30 days.
7. Security and where your data lives
Data is encrypted in transit and at rest. Our database and file storage are hosted by Supabase in the ap-south-1 region (Mumbai, India); there is no Middle East region available on that platform. Storing your data outside the UAE is a cross-border transfer under the PDPL, and by using Ghiyar you consent to it. Access is role-limited and logged.
Report security concerns to security@ghiyar.xyz.
8. Contact
Data Protection Officer, Ghiyar Technologies FZ-LLC, Dubai, UAE · privacy@ghiyar.xyz