1. Who We Are and Scope of this Policy

International Trading EEC FZ-LLC ("Dubaibrokersite", "we", "us" or "our") operates the B2B platform available at dubaibrokersite.com (the "Platform"). For personal data processed for our own purposes, we act as the data controller.

This Privacy Policy explains how we collect, use, disclose, store and protect personal data when a person visits the Platform, represents a Member, creates or uses an Account, publishes or responds to a Broadcast, communicates with us, or requests a verification or inspection service.

The Platform is for businesses, but information about directors, owners, employees, representatives, trade references and other individuals may still be personal data.

2. Personal Data We Collect

Depending on how you use the Platform, we may collect:

2.1 Account and contact data

• name, business email address, telephone number, job title and preferred language;
• company name, type, address, country, website, business categories and profile information;
• username, password hash, authentication records, account settings and marketing preferences; and
• records showing that you accepted policies or consented to optional communications.

2.2 Business-verification and compliance data

• trade licence and company-registration details;
• tax or VAT information, proof of address and proof of authority;
• identity information where reasonably required to verify an authorised representative;
• beneficial ownership, sanctions-screening or fraud-prevention information where applicable;
• trade references and the results of verification enquiries; and
• verification status, risk indicators and internal review notes.

Please provide trade-reference details only where you are authorised to do so and have informed the relevant person that we may contact them.

2.3 Profile, listing and communication data

• company logos and public or member-visible profile details;
• WTB/WTS Broadcasts, product descriptions, grades, quantities, prices, locations, photographs and documents;
• messages, replies, enquiries and other communications sent through or in connection with the Platform; and
• complaints, incident reports, evidence, support requests and our responses.

2.4 Verification and inspection data

If a Verification Service is requested, we may collect appointment and site-access details, contact details of persons at the location, photographs, video, inspection notes, product identifiers, sample information, test results, reports and related communications.

2.5 Billing data

If you purchase a paid service, we may collect billing contacts, invoice address, tax information, purchase-order details, amount, currency, payment status and transaction references. If card or online payment options are introduced, full payment credentials should be processed by the disclosed payment provider and should not be stored by us unless expressly stated at the point of collection.

2.6 Technical, device and usage data

• IP address, device and browser type, operating system, language and time zone;
• login time, pages viewed, feature use, referring pages, error logs and security events;
• cookie identifiers and consent choices; and
• approximate location derived from IP address, where used for security or analytics.

2.7 Information from other sources

We may receive information from the business you represent, other Members, trade references, service providers, public company registers, sanctions lists, professional networking sites and other lawful public sources.

We do not ask users to provide unrelated national identification numbers, full payment-card numbers or unrelated sensitive personal information through ordinary Platform forms or Broadcasts. Do not publish personal identity documents, bank details or other sensitive information in a listing or Broadcast.

3. Why We Use Personal Data

We use personal data for the following purposes:

Where consent is required, it is voluntary and may be withdrawn at any time. Withdrawal does not affect processing already lawfully completed. If information is required to create an Account, verify a business or deliver a requested service, failure to provide it may mean that we cannot provide that feature.

4. Visibility of Profiles, Broadcasts and Content

4.1 The Platform is designed to connect businesses. Information placed in a company profile, directory, listing or Broadcast may be visible to registered Members and, where clearly indicated before posting, to visitors or recipients outside the Platform.

4.2 Do not include personal data in Content unless it is necessary, lawful and appropriate for the intended audience. Where possible, use business contact details rather than private contact details.

4.3 A recipient may copy or retain information that you deliberately share with them. Their independent use of that information is subject to their own legal responsibilities and is not controlled by us.

5. Who We Share Personal Data With

We may share personal data only where reasonably necessary with:

• other Members and intended recipients, to display your profile, deliver Broadcasts, enable replies and support legitimate B2B contact;
• Supabase Inc. (USA / EU) — authentication, database and file storage infrastructure. Data is processed under Supabase's Data Processing Agreement. See supabase.com/privacy;
• Amazon Web Services, Inc. (AWS, USA — data stored in eu-central-1, Frankfurt) — file storage (S3) for Broadcast documents, listing images and complaint records, and transactional email delivery (SES). See aws.amazon.com/privacy;
• Brevo SAS (formerly Sendinblue, France / EU) — email notification and marketing delivery. Data is processed under Brevo's Data Processing Agreement. See brevo.com/legal/privacypolicy;
• Google LLC (USA) — Google Tag Manager and Google Analytics (loaded only after analytics consent is granted) for site traffic measurement, and Google Maps for location display. Subject to the EU–US Data Privacy Framework. See policies.google.com/privacy;
• Sentry Inc. (USA) — application error monitoring and performance tracing. No personal browsing history is collected. Data may be stored in the EU depending on organisation settings. See sentry.io/privacy;
• Rollbar Inc. (USA) — server-side error monitoring and logging. See rollbar.com/privacy;
• verification and inspection providers, including authorised personnel or contractors needed for an agreed site visit or report;
• payment and billing providers, if a paid online payment method is made available (specific provider will be disclosed at the point of collection);
• professional advisers and insurers, subject to appropriate duties of confidentiality;
• courts, regulators, law-enforcement bodies and other authorities, where disclosure is legally required or reasonably necessary to protect rights, safety or the Platform; or
• a genuine corporate buyer, investor or successor, under confidentiality and appropriate data-protection safeguards in connection with a merger, financing, reorganisation or sale.

We do not sell personal data. We do not disclose personal data to advertisers for their independent direct marketing without the required permission.

6. International Transfers

Our Members and service providers may be located in different countries. As a result, personal data may be accessed from or transferred outside the United Arab Emirates and outside the country in which it was collected.

Where a transfer is restricted by applicable law, we will use a permitted transfer mechanism and appropriate contractual, organisational or technical safeguards. Depending on the relevant law, this may include an adequacy decision, approved contractual clauses, explicit consent in a legally permitted situation, or another statutory exception.

Users in the EEA or United Kingdom may contact us for information about the safeguards relevant to their personal data.

7. Retention

We retain personal data only for as long as reasonably necessary for the purpose collected, including service delivery, security, dispute handling and legal, regulatory, accounting or reporting requirements.

Our working retention schedule is:

We may retain information longer where litigation, an investigation, a preservation request or another legal duty requires it. We may keep aggregated or irreversibly anonymised information without a fixed period because it no longer identifies an individual.

8. Security

We use reasonable technical and organisational safeguards designed to protect personal data against unauthorised access, alteration, disclosure, loss and destruction. Measures may include access controls, authentication, encryption in transit, logging, backups, vendor controls, staff confidentiality and incident-response procedures.

No internet service can guarantee absolute security. Users must protect credentials, restrict Account access to authorised personnel and promptly report suspected compromise to [email protected].

If a personal-data breach occurs, we will assess it and notify the competent authority and affected individuals where required by applicable law.

9. Your Rights

Depending on your location and applicable law, you may have the right to:

• receive information about our processing and obtain access to your personal data;
• receive a copy of certain data in a portable format;
• correct inaccurate data and complete incomplete data;
• request deletion where the data is no longer required or processing is unlawful;
• request restriction of processing in legally specified circumstances;
• object to processing based on particular grounds, including direct marketing;
• withdraw consent at any time where processing relies on consent;
• object to or request human review of certain solely automated decisions; and
• complain to the competent data-protection authority.

To exercise a right, contact [email protected] and describe your request. We may request information reasonably necessary to verify identity, authority and the relevant Account. We will respond within the period required by applicable law. Rights may be limited where an exception applies, including protection of another person's rights, legal privilege, fraud prevention, record-retention duties or legal claims.

We do not currently intend to make decisions producing legal or similarly significant effects about individuals solely by automated means. If that changes, we will provide the information and controls required by applicable law.

10. Marketing and Platform Communications

10.1 Service, security, policy and Account messages are not marketing and may be sent where necessary to operate the Platform.

10.2 Newsletters and promotional communications should be sent only where the recipient has made the required choice or another lawful basis clearly applies. Marketing consent must not be bundled with acceptance of the Terms.

10.3 You may opt out using the unsubscribe link in the message, changing available Account preferences, or emailing [email protected]. Opting out of marketing does not stop essential service messages.

10.4 Members using Platform contact information must independently comply with applicable marketing and privacy laws and must respect opt-outs.

11. Cookies and Similar Technologies

We use or may use:

• strictly necessary technologies for login, security, network management, load balancing and recording privacy choices;
• functional technologies for language and user preferences; and
• analytics technologies to understand traffic and improve the Platform.

Non-essential analytics or advertising technologies must remain disabled until the user has given the consent required in their jurisdiction. Declining non-essential cookies must not prevent ordinary access to the Platform.

Users can change their choice through the cookie settings control and can also manage cookies through their browser. Deleting cookies may remove saved preferences.

12. Children

The Platform is exclusively for businesses and authorised adult representatives. It is not directed to children, and we do not knowingly permit a person under 18 to create or operate an Account. If you believe a child has supplied personal data, contact us so that we can investigate and delete it where appropriate.

13. Third-Party Sites

The Platform may link to third-party websites or services. Their privacy practices are controlled by them, not by us. Review their privacy information before providing personal data.

14. Changes to this Policy

We may update this Privacy Policy to reflect changes in law, technology or our services. The current version will be posted with a new effective date. Where a change materially affects registered users, we will provide reasonable notice by email or through the Platform where practicable. We will request new consent where required.

15. Contact Details

Data controller / Platform operator