User Privacy Notice

USER PRIVACY NOTICE

Last Updated: September 2026

Dibdaa LLC ("Dibdaa", "we", "us" or "our") respects your privacy and is committed to handling personal information responsibly.

Dibdaa LLC is incorporated in Sharjah Media City (Shams) Free Zone, United Arab Emirates and operates the Dibdaa online marketplace, including the website, related subdomains, marketplace services and other services we make available from time to time (collectively, the "Platform").

This Privacy Notice explains how we may collect, use, store, disclose and otherwise process personal information when you visit, register with or use the Platform.

By using Dibdaa, you acknowledge the practices described in this Privacy Notice.

1. INFORMATION WE MAY COLLECT

The information we collect depends on how you use Dibdaa.

Account and Profile Information

When you create or maintain a Dibdaa account, we may collect information such as:

• your name;
• email address;
• mobile telephone number;
• account and profile information;
• location or address information;
• profile photograph, where provided;
• communication preferences; and
• information required to create, secure or administer your account.

Listing and Marketplace Information

When you buy, sell, make an offer, bid in an auction, operate a store or otherwise use Dibdaa, we may collect information relating to:

• items you list, view, buy or sell;
• photographs and descriptions uploaded to listings;
• prices, offers and bids;
• transaction history;
• delivery and collection information;
• seller return conditions;
• disputes and Resolution Center cases;
• messages or information provided in connection with a transaction;
• ratings, reports or other marketplace activity; and
• information associated with Dibdaa Premium or other marketplace services.

Payment and Wallet Information

Dibdaa may collect and process information necessary to facilitate marketplace payments, refunds, wallet activity and the release of funds.

Payments may be processed using third-party payment service providers such as Stripe.

Where payment information is entered directly into a third-party payment provider's secure payment environment, Dibdaa does not necessarily receive or store the complete payment-card details. The relevant payment provider processes that information subject to its own terms and privacy practices.

We may nevertheless receive information relating to a payment, such as the transaction amount, payment status, transaction reference, refunds and other information necessary to administer the transaction.

Delivery and Collection Information

Where you select a delivery service available through Dibdaa, information necessary to arrange or support delivery may be provided to the applicable third-party delivery provider.

Dibdaa currently integrates with third-party delivery providers including Aramex and PostaPlus.

This information may include:

• sender and recipient names;
• telephone numbers;
• collection and delivery addresses;
• item information;
• package weight and dimensions;
• delivery instructions; and
• transaction or tracking information.

The delivery provider may separately process personal information in accordance with its own privacy terms.

Communications and Customer Support

We may collect information when you:

• contact Dibdaa;
• submit an enquiry;
• report another user or listing;
• use the Resolution Center;
• raise a dispute;
• respond to a survey;
• provide feedback; or
• otherwise communicate with us.

This may include copies of messages, photographs, documents or other information you provide.

Technical and Usage Information

When you access Dibdaa, certain technical information may be collected automatically, including:

• IP address;
• browser type;
• device type;
• operating system;
• pages viewed;
• approximate location derived from technical information;
• referring pages;
• date and time of access;
• session information; and
• information concerning how you interact with the Platform.

We may use this information to operate, secure, analyse and improve Dibdaa.

2. HOW WE USE PERSONAL INFORMATION

We may use personal information where reasonably necessary to operate Dibdaa and provide our services, including to:

• create and manage user accounts;
• enable users to buy and sell items;
• publish and manage listings;
• facilitate Buy Now, Make Offer and Auction transactions;
• operate Dibdaa Premium storefronts;
• facilitate payments, wallet activity and refunds;
• arrange or support delivery and collection options;
• communicate transaction information;
• provide customer support;
• administer disputes and Resolution Center cases;
• investigate reports, suspected fraud or misuse;
• apply and enforce marketplace rules;
• protect users and the Platform;
• prevent, detect and investigate fraudulent or suspicious activity;
• improve our website, services and user experience;
• analyse Platform usage and performance;
• communicate important service information;
• send marketing communications where permitted and subject to applicable preferences;
• comply with legal and regulatory obligations;
• establish, exercise or defend legal claims; and
• enforce our User Agreement and other policies.

We may also use aggregated or anonymised information for analytics, marketplace insights and service improvement where the information no longer identifies an individual.

3. MARKETPLACE INFORMATION SHARED WITH OTHER USERS

Dibdaa is a marketplace connecting buyers and sellers.

Certain information may therefore need to be displayed to or shared with other users for marketplace transactions to operate.

For example, a seller's store or profile information and listing information may be visible publicly, while additional information may be exchanged between a buyer and seller when reasonably necessary to complete a transaction, delivery, collection or return.

Users must use information obtained through Dibdaa only for legitimate purposes connected with the relevant transaction and must not misuse another user's personal information.

4. WHEN WE MAY SHARE INFORMATION

Dibdaa does not sell your personal information as a business model.

However, we may disclose personal information where reasonably necessary to operate the Platform, including to:

Service Providers

We may use third parties that provide services such as:

• payment processing;
• payment and wallet infrastructure;
• website hosting and cloud infrastructure;
• delivery and logistics;
• email and communications;
• analytics;
• fraud prevention;
• security;
• customer support; and
• technical and professional services.

These providers may process information to the extent necessary to provide their services.

Buyers and Sellers

Information may be shared between parties to a transaction where reasonably necessary to facilitate payment, collection, delivery, returns, dispute resolution or another marketplace function.

Legal and Regulatory Requirements

We may disclose information where we reasonably believe disclosure is necessary to:

• comply with applicable law;
• respond to a lawful request from a court, regulator, government authority or law-enforcement agency;
• protect our legal rights;
• investigate suspected fraud or unlawful activity;
• protect the rights, property or safety of Dibdaa, our users or others; or
• establish, exercise or defend legal claims.

Business Transfers

If Dibdaa undergoes a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

5. THIRD-PARTY PAYMENT SERVICES

Payments available through Dibdaa may be provided or processed using third-party payment providers.

Payment providers operate their own systems and may collect information directly from users. Their processing of personal information may therefore also be governed by their own privacy notices and terms.

Dibdaa does not store complete payment-card details where those details are collected and processed directly by the applicable payment provider.

6. DELIVERY PROVIDERS

Delivery options available through Dibdaa may be fulfilled by independent third-party delivery providers, including currently Aramex and PostaPlus.

Where you select such a service, information necessary to provide the delivery service may be transmitted to the relevant provider.

Those providers may process information independently in accordance with their own privacy practices and legal obligations.

7. COOKIES AND SIMILAR TECHNOLOGIES

Dibdaa may use cookies and similar technologies to operate and improve the Platform.

These technologies may be used to:

• keep users signed in;
• remember preferences;
• maintain Platform functionality;
• understand how the Platform is used;
• measure performance;
• detect suspicious or fraudulent activity; and
• improve the user experience.

Some cookies may be provided by third-party services used by Dibdaa.

Where required, users may be provided with choices regarding non-essential cookies. Browser settings may also allow cookies to be restricted or deleted, although doing so may affect certain Platform functions.

8. MARKETING COMMUNICATIONS

Where permitted, Dibdaa may send users information concerning marketplace features, promotions, services or other updates.

You may unsubscribe from marketing communications using the unsubscribe option provided in the relevant communication or by contacting us.

We may still send essential service or transactional communications concerning your account or transactions even where you have opted out of marketing communications.

9. SECURITY

Dibdaa takes reasonable administrative, organisational and technical measures designed to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.

However, no website, electronic communication, database or internet transmission can be guaranteed to be completely secure.

Users are responsible for maintaining the confidentiality of their account credentials and should notify Dibdaa promptly if they believe their account has been accessed or used without authorisation.

10. DATA RETENTION

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to:

• provide Dibdaa services;
• maintain transaction and accounting records;
• resolve disputes;
• prevent fraud and abuse;
• enforce our agreements;
• meet legal, regulatory, tax and accounting requirements; and
• establish, exercise or defend legal claims.

Different categories of information may therefore be retained for different periods.

Where information is no longer reasonably required, we may delete or anonymise it, subject to applicable legal requirements.

11. INTERNATIONAL DATA PROCESSING

Some of Dibdaa's service providers or technology infrastructure may process or store information outside the United Arab Emirates.

Where personal information is transferred internationally, Dibdaa will take steps appropriate under applicable law in relation to the transfer and protection of that information.

12. YOUR PRIVACY RIGHTS

Subject to applicable law and any relevant exceptions, you may have rights concerning your personal information, which may include rights to:

• obtain information about how your personal information is processed;
• request access to certain personal information;
• request correction of inaccurate information;
• request deletion of information in certain circumstances;
• request restriction or cessation of certain processing where applicable;
• object to certain processing where applicable;
• request transfer of information where applicable; and
• withdraw consent where processing is based on consent.

The availability of a particular right may depend upon the circumstances and applicable law.

Certain information may need to be retained even after a request is made, for example where retention is necessary for legal, regulatory, fraud-prevention, transaction-record or dispute-resolution purposes.

Requests may be submitted using the contact information below.

The UAE's federal personal-data framework provides data-subject rights and regulates processing of personal data.

13. CHILDREN AND MINORS

Dibdaa is not intended for individuals under 18 years of age.

We do not knowingly permit individuals under 18 to create Dibdaa accounts or knowingly collect personal information from them for the purpose of providing marketplace services.

If we become aware that an account has been created or personal information has been submitted contrary to this requirement, we may take appropriate action, including restricting or closing the account and deleting information where appropriate and legally permitted.

14. THIRD-PARTY WEBSITES AND SERVICES

Dibdaa may contain links to websites, applications or services operated by third parties.

Dibdaa does not control the privacy practices of those third parties. Their collection and processing of personal information is governed by their respective privacy notices and terms.

Users should review those policies before providing personal information to a third party.

15. ACCOUNT CLOSURE

You may request closure of your Dibdaa account in accordance with the functionality made available through the Platform or by contacting us.

Closing an account does not necessarily result in the immediate deletion of all information associated with the account.

We may retain information where reasonably necessary for completed transactions, payment records, disputes, fraud prevention, legal obligations, accounting requirements or the establishment, exercise or defence of legal claims.

16. CHANGES TO THIS PRIVACY NOTICE

Dibdaa may update this Privacy Notice from time to time to reflect changes to our services, technology, business practices or legal requirements.

The latest version will be published on the Platform together with the updated date.

Where an update materially affects how we process personal information, we may provide additional notice where appropriate or required by law.

Users are encouraged to review this Privacy Notice periodically.

17. CONTACT US

If you have a question about this Privacy Notice, wish to exercise an applicable privacy right or have a concern regarding how your personal information is handled, please contact:

Dibdaa LLC
Sharjah Media City (Shams) Free Zone
United Arab Emirates

Email: [email protected]