隐私政策

Depending on how you use the Platform, Mazal may collect the following data:

Identity data

• Name.
• Emirates ID number or passport details.
• Date of birth (where required).
• Nationality.

Company data

Where a company account is created, we may collect:

• Company name.
• Trade licence.
• Authorised representative details.
• Any other information required to complete verification.

Contact data

• Email address.
• Phone number.
• City of residence.
• Any other contact methods you provide during registration.

Plate data

May include:

• Plate details.
• Ownership-transfer details.
• Traffic-file details.
• Registration data linked to the plate.

Account data

• Login information.
• Account settings.
• User preferences.
• Platform usage history.

Marketplace data

May include:

• Plates you have listed.
• Asking prices.
• Offers.
• Counteroffers.
• Purchases.

Financial data

May include:

• Purchases.
• Sales.
• Wallet balance.
• Auction deposit amounts.
• Withdrawal requests.
• Fees.
• Settlement data.

Auction data

May include:

• Bids.
• Deposit amounts.
• Bidding history.
• Auction outcomes.

Arqami data

May include:

• Plates added to Arqami.
• Subscription status.
• Monthly valuations.

Valuation data

May include:

• Valuation requests.
• Valuation certificates.
• Valuation results.

Private Deals data

Where the service is available, we may collect data related to its use.

Communications with Mazal

May include:

• Support messages.
• Email.
• WhatsApp.
• Phone calls.
• SMS.
• In-app conversations.

Technical data

May include:

• Device type.
• Operating system.
• IP address.
• Usage logs.
• Security data.
• Performance data.

Mazal applies KYC procedures when an account is created.

The following may be used:

• Emirates ID.
• Passport.
• Company documents.
• Any additional documents Mazal requests to verify the user's identity.

If a UAE resident registers using a passport, the Emirates ID must be uploaded within thirty (30) days; otherwise Mazal may suspend the account.

Before a plate is listed on the Marketplace or entered into an Auction, ownership of the plate is transferred to Mazal's traffic file.

This data is used to:

• Verify that the ownership transfer has been completed.
• Activate the add-plate service.
• Operate Marketplace and Auction services.

Mazal does not approve the sale prices set by users on the Marketplace.

Mazal uses personal data for the following purposes:

• Creating and managing accounts.
• Identity verification.
• Operating Marketplace services.
• Operating Auctions.
• Managing the Wallet.
• Managing the Arqami service.
• Providing valuation services.
• Processing purchases and payments.
• Managing the escrow account.
• Carrying out ownership-transfer procedures.
• Processing withdrawal requests.
• Providing technical support and customer service.
• Sending account or transaction-related notifications.
• Sending marketing messages where the user has consented or where the system permits.
• Developing and improving Platform performance.
• Detecting fraud and preventing misuse.
• Complying with applicable laws and instructions.

Mazal does not sell personal data to any third party.

However, data may be shared where needed with:

• Banks.
• Payment service providers.
• The Roads and Transport Authority (RTA).
• Competent government authorities.
• Technology service providers.
• Hosting service providers.
• Legal or financial advisers.
• Regulatory or judicial authorities where there is a legal obligation.
• Parties related to a transaction, to the extent necessary to complete it.

Mazal uses payment information and financial data necessary to complete purchases and sales through the Platform.

When any purchase is completed:

• Paid amounts are held in the escrow account until plate ownership transfer is completed.
• Seller proceeds are transferred to the Wallet after ownership-transfer and settlement procedures are completed.

Mazal does not store bank-card details where they are processed by approved payment service providers.

Mazal processes data related to Wallet use, including:

• Wallet balance.
• Deposits.
• Withdrawals.
• Deposit refunds.
• Sale proceeds.
• Financial transaction history.

This data is used to manage financial transactions on the Platform, provide support services, and comply with legal and regulatory requirements.

If you use Arqami or valuation services, Mazal may collect and process the following data:

• Plates added to Arqami.
• Monthly valuation results.
• Standalone valuation requests.
• Valuation certificates.
• Valuation issue and expiry dates.

This data is used to provide the requested services and improve the user experience.

Mazal may use cookies and similar technologies to:

• Remember user settings.
• Improve the user experience.
• Analyse Platform performance.
• Measure service usage.
• Improve Platform speed and stability.
• Detect faults and technical issues.

Users may manage cookie settings through their browser or device settings, noting that disabling some cookies may affect the performance of certain Platform services.

Mazal may contact users through:

• Email.
• SMS.
• WhatsApp.
• In-app notifications.
• Push notifications.
• Phone calls.

This communication is used to:

• Confirm registration.
• Verify identity.
• Send transaction-related notifications.
• Account updates.
• Security alerts.
• Respond to support requests.
• Marketing messages, where the user has consented to receive them or where permitted by applicable rules.

Users may unsubscribe from marketing messages at any time, while account, security or transaction messages will continue where necessary to provide the service.

Mazal retains personal data for as long as necessary to provide its services, meet its legal and regulatory obligations, or protect its rights and those of its users.

When the data is no longer needed, or when the statutory retention period ends, it is deleted, destroyed or anonymised in accordance with Mazal's approved procedures, unless the law requires longer retention.

Mazal commits to taking appropriate technical, administrative and organisational measures to protect personal data from:

• Unauthorised access.
• Unlawful use.
• Loss.
• Alteration.
• Unauthorised disclosure.
• Destruction.

Nevertheless, no electronic system can be guaranteed 100% secure, and the user acknowledges that transmitting data over the internet inherently involves some risk.

Data may be processed or transferred inside or outside the United Arab Emirates where necessary to operate the Platform, provide services, or use approved service providers.

Mazal commits to taking appropriate steps to ensure an adequate level of data protection when transferring data, in accordance with applicable laws and regulations.

Under applicable laws, a user may, where legally available, request:

• Access to their personal data.
• Correction of inaccurate data.
• Updates to their data.
• Deletion of their data, where retention is not legally required.
• Objection to certain types of processing.
• Withdrawal of consent to processing that is based on their consent.

Mazal may request additional information to verify the requester's identity before carrying out any such request.

Mazal may suspend, restrict or close a user's account if:

• Incorrect or misleading information was provided.
• Identity-verification procedures could not be completed.
• The Platform Terms and Conditions were breached.
• Fraudulent or unlawful activity is suspected.
• Compliance with laws or requests from competent authorities so requires.

Mazal may retain some data after account closure where retention is necessary for legal compliance, protection of rights, or dispute resolution.

The Platform may include links or services provided by third parties, such as payment service providers, government authorities or social-media platforms.

Mazal is not responsible for those parties' privacy policies or practices, and users are advised to review their privacy policies before using their services.

Mazal's services are not directed to persons under eighteen (18) years of age.

If Mazal becomes aware that personal data of a child has been collected without a legal basis, appropriate steps will be taken to delete that data or restrict its processing.

Mazal may amend or update this Privacy Policy at any time to reflect operational, technical or legal changes.

The updated version will be published on the Platform with the last-updated date, and continued use of the Platform after publication constitutes acceptance of the amended Policy, unless the law requires otherwise.

If you have any questions or requests relating to this Privacy Policy or the processing of your personal data, you may contact Mazal through the official communication channels shown on the Platform.

• Mazaal For Auctions Organizing Co. L.L.C.
• Dubai, United Arab Emirates