Privacy Policy

This Privacy Policy applies to people who use Tamamy's consumer marketplace, including visitors, buyers, and individual marketplace sellers. It covers tamamy.com and the related consumer services that link to this Policy. It does not cover the separate partner portal at partner.tamamy.com, which has its own privacy notice.

Tamamy - F.Z.C, licensed by Ajman Free Zones Authority under licence number 52837, is the controller of the personal data described in this Policy. Its registered address is Premises B.C. 1306839, Ajman Free Zone C1 Building, Ajman Free Zone, Makani 4442612247, Ajman, United Arab Emirates.

The data we collect depends on how you use the consumer marketplace. It may include:

We receive personal data directly from you, automatically when you use the service, from other marketplace users when they transact or communicate with you, and from providers involved in authentication, fraud prevention, payments, maps, delivery, and support. If you choose Google sign-in, we receive the account information and sign-in token needed to create or access your Tamamy account.

We process personal data to create and secure accounts; display and manage listings; enable messages, offers, follows, favourites, orders, payments, payouts, delivery, refunds, and disputes; provide customer support; detect fraud, abuse, prohibited content, and security incidents; enforce our Terms; improve service reliability and usability; send service communications; and meet legal, accounting, regulatory, and law-enforcement obligations.

Depending on the activity, processing is based on your consent or another ground permitted by applicable UAE law, including where processing is necessary to perform a contract with you, comply with a legal obligation, establish or defend legal claims, or protect the service and its users. Where we rely on consent, you may withdraw it without affecting processing already carried out lawfully.

We do not sell personal data. We disclose only what is reasonably necessary to payment and payout providers; delivery and logistics providers; cloud hosting, content delivery, communications, customer-support, authentication, mapping, security, and fraud-prevention providers; professional advisers and auditors; counterparties to a marketplace transaction; and regulators, courts, law-enforcement bodies, or other authorities when disclosure is required or permitted by law.

Where a provider processes personal data on our behalf, we require it to use the data for the agreed service and to follow appropriate data-protection and confidentiality terms. A provider's own notice may also apply when you interact with it directly, such as during payment or Google sign-in.

The marketplace is public by design. Your username, profile photo, biography, public seller statistics, listings, listing photos, prices, and other content you publish may be visible to anyone. Messages, bank details, full saved addresses, and exact pickup locations are not public; they are disclosed only when needed to provide a transaction, delivery, support, or safety function. Do not place private contact, payment, or location information in public listing text or photos.

Consumer checkout is completed through an external payment provider. Payment-card or digital-wallet credentials entered on the provider's page are handled by that provider under its own privacy and security terms. Tamamy receives the transaction status, amount, reference, and related response data needed to complete the order, prevent fraud, process refunds, and keep financial records. Bank details entered for seller payouts are used only to administer those payouts, verify the destination account where needed, prevent fraud, and comply with applicable financial and legal requirements.

Some providers may process or store data outside the UAE. Where personal data is transferred internationally, we use a transfer mechanism and safeguards required by the UAE Personal Data Protection Law, taking account of the destination country's level of protection and any applicable contractual or legal requirements.

We keep personal data only for as long as needed for the purpose for which it was collected, including while your account is active, and then for any additional period required to meet legal, tax, accounting, fraud-prevention, chargeback, dispute-resolution, or recordkeeping duties. Retention periods differ by data type and may be extended when a complaint, dispute, investigation, or legal hold is active. When data is no longer required, we delete or anonymise it using appropriate measures.

We use proportionate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, destruction, and misuse. Measures are reviewed in light of the sensitivity of the data, the processing risks, and available technology. No website, transmission, or storage system can be guaranteed completely secure, so you should use a unique password and keep account credentials confidential.

We assess suspected personal-data breaches, take steps to contain and remediate them, and keep the records required by law. We notify the competent UAE authority and affected individuals when and to the extent required by applicable law, taking account of the likely effect on privacy, confidentiality, and security.

Subject to the conditions and exceptions in applicable UAE law, you may ask for information about our processing; access or obtain a copy of your data; transfer certain data; correct inaccurate data; erase data; restrict or stop processing; withdraw consent; and object to certain decisions based solely on automated processing. We may need to verify your identity and may retain information where the law permits or requires it. To make a request, email [email protected] and describe the right you wish to exercise.

We send communications needed to operate your account and transactions, such as verification, security, order, payment, delivery, dispute, and policy notices. These are not marketing messages. We send promotional email or SMS only where permitted and with the consent required by applicable rules. You may opt out using the unsubscribe method in the message or by contacting us; opting out does not stop essential service communications.

The consumer website uses a session cookie for authentication and security, a language-preference cookie, and limited third-party technologies used only when relevant features are opened. It does not currently use advertising or behavioural-analytics cookies. See the Cookie Policy for the current, itemised disclosure and browser controls.

The consumer marketplace is not intended for anyone under 18, and we do not knowingly permit a child to create an account. If you are a parent or guardian and believe a child has provided personal data, contact [email protected] so we can investigate and take appropriate action.

We may update this Policy when the consumer service, our processing, or applicable law changes. The current version and effective date will remain posted here, and we will provide additional notice where a change materially affects your rights or where the law requires it.

For privacy questions or rights requests, contact [email protected]. For general account or marketplace support, contact [email protected].