Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily provide when using our Services, including:

• Account Information: Full name, email address, phone number, company name, and role when you register for an account.
• Listing Information: Business details, financial data, descriptions, images, and documents you upload when creating a listing.
• Communication Data: Messages exchanged with other users, support inquiries, and contact form submissions.
• Payment Information: Billing details and payment method information processed through our secure payment gateway. We do not store full credit card numbers on our servers.
• AI Tool Inputs: Data you provide when using our AI tools, such as business preferences, financial inputs, and market criteria.

1.2 Information Collected Automatically

When you access or use our Services, we automatically collect certain technical information, including:

• Device Information: Hardware model, operating system and version, browser type and version, and device identifiers.
• Usage Data: Pages visited, features used, time spent on the platform, click patterns, and search queries.
• Location Data: General location based on IP address (city and country level). We do not collect precise GPS coordinates unless you explicitly grant permission.
• Log Data: Server logs including IP address, access times, referring URLs, and user agent strings.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including: authentication providers (when you use social login), payment processors, business verification services, and public government databases for business registration verification. We combine this information with data we already have to improve our Services.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and maintain our platform, including processing transactions, displaying listings, and generating AI-powered insights.
• Account Management: To create and manage your account, verify your identity, and provide customer support.
• Communication: To send you service-related notifications, respond to inquiries, and deliver newsletters or marketing communications (with your consent).
• Improvement: To analyze usage patterns, test new features, and improve the functionality and user experience of our platform.
• Security: To detect, prevent, and address fraud, unauthorized access, and other illegal activities, and to protect the rights and safety of our users and the public.
• Personalization: To tailor content, listings, and recommendations to your interests and preferences based on your browsing and usage history.
• Compliance: To comply with applicable UAE laws, regulations, and legal processes, and to respond to lawful requests from public authorities.

We process your personal data only when we have a legal basis to do so, including: your consent, contractual necessity, legitimate interests, and legal obligations.

3. Data Storage and Security

Your personal data is stored on secure servers located in the United Arab Emirates and may also be processed on servers in other jurisdictions where our service providers operate. We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit using TLS/SSL protocols (AES-256 encryption).
• Encryption of sensitive data at rest using AES-256 encryption.
• Regular security audits and vulnerability assessments by third-party security firms.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Secure authentication mechanisms including two-factor authentication for administrative access.
• Regular data backups stored in encrypted form at geographically distributed locations.

We retain your personal data for as long as your account is active or as needed to provide you Services. If you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal, accounting, or regulatory purposes.

While we strive to protect your personal information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest commercially reasonable standards of data protection.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Services and hold certain information. Cookies are small data files placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Services.

We use the following types of cookies:

• Essential Cookies: Required for the operation of the platform, including authentication, security, and session management.
• Functional Cookies: Remember your preferences and settings to provide a personalized experience.
• Analytics Cookies: Help us understand how visitors interact with our platform, allowing us to improve our Services.
• Marketing Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns.

5. Sharing with Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We share data with trusted third-party service providers who assist us in operating our platform, processing payments, sending communications, and performing analytics. These providers are contractually obligated to protect your data.
• Business Transactions: In connection with any merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.
• Legal Requirements: We may disclose your information when required to do so by law, in response to valid legal process, or to protect the rights, property, or safety of BusinessFinder.ae, our users, or the public.
• With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.
• Between Users: When you interact with other users on the platform (e.g., contacting a seller), certain information such as your name and contact details may be shared as necessary to facilitate the interaction.

6. Your Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete personal data.
• Right to Erasure: You can request deletion of your personal data, subject to legal retention requirements.
• Right to Restrict Processing: You can request that we limit how we use your data in certain circumstances.
• Right to Data Portability: You can request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to our processing of your personal data for direct marketing or based on our legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you can withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

7. UAE Data Protection Compliance

BusinessFinder.ae operates within the United Arab Emirates and is committed to compliance with applicable UAE data protection laws and regulations, including:

• Federal Decree-Law No. 45 of 2021: On the Protection of Personal Data, which establishes the legal framework for the processing of personal data in the UAE.
• DIFC Data Protection Law (DIFC Law No. 5 of 2020): Applicable to data processing activities within the Dubai International Financial Centre.
• ADGM Data Protection Regulations 2021: Applicable within the Abu Dhabi Global Market.

In accordance with UAE data protection requirements, we ensure that:

• Personal data is processed lawfully, fairly, and transparently.
• Data is collected for specified, explicit, and legitimate purposes.
• Data processing is limited to what is necessary for the stated purposes.
• Appropriate technical and organizational measures are in place to protect personal data.
• Cross-border data transfers comply with UAE regulatory requirements.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: