Privacy Policy

This Privacy Policy applies to personal data processed through Tamamy's partner website, accounts, onboarding, business verification, storefronts, Marketplace, Motors, Property and Jobs posts, orders, payouts, teams, messages, reports, complaints, support, and related partner operations in the UAE. Tamamy is the controller when it decides why and how that personal data is processed.

It covers natural persons, including business owners, authorised representatives, team members, sole traders, applicants, customers, and other people whose information a Partner submits. It should be read with the Partner Terms and Conditions and the Legal Notice.

• Account and contact data: name, username, email, phone number, profile image, account role, authentication provider, and communication preferences.
• Identity and verification data: Emirates ID or passport information, trade licences, authorised-signatory and beneficial-owner details, verification results, and supporting documents.
• Business and tax data: business name, licence number, issuing authority and expiry date, registered address, Emirate, activity, VAT registration and TRN, storefront details, post types, and team membership.
• Payment and payout data: bank-account and IBAN details, verification documents, payment-provider references, payment status, commissions, refunds, chargebacks, reserves, and payout records. Tamamy does not intend to store full card credentials handled by a payment provider.
• Platform content and activity: listings, media, vacancies, applications, orders, delivery and pickup information, messages, reviews, complaints, reports, disputes, support requests, and actions taken in the account.
• Device, network, and security data: IP address, user agent, browser and device information, session and cookie data, timestamps, request and security logs, CAPTCHA results, and suspected fraud or abuse indicators.
• Inferences and decisions: verification, fraud, risk, moderation, eligibility, and enforcement outcomes derived from the information above.

Please do not provide personal data that Tamamy does not request. Partners must have authority and a lawful basis before submitting information about another person.

We receive data directly from you and your organisation; from account owners and team administrators; from customers, applicants, couriers, payment and verification providers; from public or lawfully accessible registers and sanctions sources; and automatically when a device interacts with Tamamy. We may also generate operational, risk, and moderation information from your use of the Platform.

• Create and secure accounts, authenticate users, recover access, and administer team permissions.
• Verify identity, authority, business licensing and licence validity, tax and payout information, and eligibility to publish.
• Operate storefronts, Marketplace, Motors, Property and Jobs posts, applications, orders, delivery, payments, refunds, disputes, and payouts.
• Communicate account, transaction, safety, verification, policy, and support information.
• Prevent fraud, money laundering, sanctions breaches, abuse, unsafe content, security incidents, and violations of law or the Partner Terms.
• Moderate content, investigate complaints, enforce platform rules, preserve evidence, and protect Tamamy, Partners, users, and the public.
• Maintain, troubleshoot, analyse, and improve reliability, usability, safety, and performance.
• Comply with accounting, tax, consumer, employment, data-protection, court, regulator, and law-enforcement obligations.

Tamamy processes account, verification, publishing, transaction, support, and security data where needed to enter into or perform the Partner Terms; comply with UAE legal, tax, consumer, court, regulator, and law-enforcement obligations; protect public interests, people, and the Platform; or establish, exercise, or defend legal claims. We process data for fraud prevention, service reliability, and product improvement only where that processing is lawful, necessary, and proportionate. Where consent is required, such as for optional direct marketing or another clearly identified use, we request it separately and retain evidence of the choice. Consent may be withdrawn without affecting processing already carried out, and withdrawal does not prevent processing supported by another lawful basis.

• Authorised people in your organisation, according to the account permissions selected by the owner or administrator.
• Customers, applicants, Partners, couriers, and other users where sharing is necessary for a listing, application, order, delivery, message, complaint, report, or dispute.
• Cloud hosting, storage, content-delivery, database, email, security, CAPTCHA, support, verification, analytics, and communications providers acting under appropriate restrictions.
• Licensed payment, banking, payout, fraud-prevention, and financial-compliance providers, including the payment provider used for a transaction.
• Content-moderation technology providers when content must be reviewed for safety and policy compliance.
• Professional advisers, insurers, auditors, prospective transaction parties, courts, regulators, tax authorities, law enforcement, and other recipients where disclosure is lawful and necessary.

We do not sell personal data.

Store names, logos, public business information, listing and vacancy content, seller identity, ratings, reviews, and other information marked for publication may be visible publicly. Order, application, message, identity, bank, and verification records are not public, but are shared with authorised recipients when needed for the relevant transaction or process. Do not place unnecessary personal data in public descriptions or media.

Tamamy and its service providers may process or store personal data outside the UAE. Before a cross-border transfer, Tamamy will use a transfer mechanism and safeguards permitted by applicable UAE law, taking account of the destination, recipient, purpose, security, and enforceable protections. Information may also be transferred where another statutory exception applies. You may ask for information about the safeguards relevant to your data through the privacy contact below.

We keep personal data only for the period reasonably necessary for the purposes described here. Retention depends on account activity, transaction and payout completion, licence and verification cycles, tax and accounting rules, anti-fraud and financial-compliance obligations, complaint and dispute periods, legal holds, limitation periods, safety, and the need to evidence accepted legal terms. When data is no longer required, we delete, anonymise, or securely isolate it, subject to backup and legal-retention processes. Tamamy maintains a documented retention schedule for these categories and reviews retained data when an account closes or a purpose ends.

Tamamy uses proportionate technical and organisational measures designed to protect personal data, including access controls, authentication, role-based permissions, secure transmission, monitoring, logging, backup, vendor controls, and incident procedures. Partners must protect credentials and devices, restrict team access, and report suspected compromise promptly. No online system can guarantee absolute security.

Tamamy investigates suspected loss, unauthorised access, disclosure, alteration, or destruction of personal data; contains and documents the incident; and takes corrective action. Where UAE law requires it, Tamamy will notify the competent UAE data authority and affected people without undue delay, including the available information about the incident, likely impact, and protective steps. Suspected compromise can be reported through the Help and reports form.

Subject to UAE law and applicable exceptions, you may request information about processing; access or receive a copy of personal data; request transfer, correction, erasure, or restriction; object to certain processing or certain automated decisions; withdraw consent; and complain to the competent UAE data authority. We may verify identity and authority before acting and may retain data where the law permits or requires it.

Send a request to [email protected] or use the Help and reports form. Explain the account and right involved so we can respond securely. This address is also Tamamy's contact point for data-protection matters. Tamamy will appoint a Data Protection Officer if and while the legal criteria for mandatory appointment apply.

Tamamy may use automated rules and artificial-intelligence services to detect fraud, unsafe or prohibited content, duplicate media, account risk, and policy violations. These tools may flag, restrict, or route content for review. Where applicable law gives you a right to object to or request human review of a decision producing serious legal or similarly significant effects, contact us through the privacy address above.

The partner website uses essential cookies or browser storage to maintain authentication, security, and session continuity. Cloudflare Turnstile is used on authentication forms to distinguish legitimate activity from abuse and may process device and network signals.

If you allow marketing cookies, we use Meta Pixel and Conversions API to measure visits to our landing and signup pages, completed registrations, submitted business applications, and listing submissions. Meta receives event names and times, page addresses, browser information, and browser or ad-click identifiers (_fbp and _fbc). Browser connections also expose your IP address to Meta. We do not include form contents, passwords, verification codes, identity documents, payment information, or listing contents in these conversion events. This helps us understand and improve our ads.

Marketing tracking stays off until you opt in. Your choice is remembered for 180 days; attribution cookies last up to 90 days. You can decline marketing cookies without losing access to the platform, and withdraw consent through Cookie settings. Withdrawal stops future marketing events; it does not recall events already sent. Meta processes information under its Privacy Policy.

If you allow analytics cookies, we use Google Analytics to understand visits and navigation across the partner website. Google receives page names, page addresses without query strings or fragments, browser and device information, and cookie identifiers. Browser connections expose your IP address to Google. We do not send form contents or account, listing, payment, or identity-document details in page-view events. Google advertising features are disabled in this integration.

Analytics stays off until you opt in, including if you previously allowed Meta marketing cookies. We remember your Analytics choice for 180 days, and Analytics cookies expire after up to 180 days from their last update. You can withdraw consent through Cookie settings, which stops future collection and removes accessible Analytics cookies. Google processes information under its Privacy Policy. Learn more about how Google uses information from sites that use its services.

The partner platform is intended for adults authorised to act for a business and is not directed to children. Do not submit a child's personal data unless it is lawful, necessary for an authorised platform purpose, and accompanied by every protection and permission required by UAE law.

We may update this Policy to reflect legal, product, security, or operational changes. The updated version and effective date will be published here, and material changes will be communicated through the Platform or registered contact details where appropriate. We will request consent before materially changed processing only where consent is the required legal basis.

Privacy questions and rights requests: [email protected]. General support: [email protected]. The operator's registered address and licence details are published in the Legal Notice.