Privacy Policy
This Privacy Policy explains how SpareRadar ("we", "us") collects, uses, shares, and protects personal data when you use the SpareRadar platform. We process personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, "PDPL") and, where it applies to visitors in the EU/EEA, the General Data Protection Regulation (GDPR).
Data controller
The data controller is the operator identified on our Contact page. For any privacy request, contact [email protected].
Data we collect
| Category | Examples |
|---|---|
| Identity & contact | Mechanic / seller / business name, phone number, email address |
| Authentication | Email or phone used for magic-link sign-in; sign-in session token |
| Business profile | Emirate / location, garage or shop name, trade-license number and expiry, makes & models served, delivery coverage, operating hours |
| Transactional | Part requests, offers, counter-offers, negotiation history, matches |
| Pre-launch waitlist | Email, WhatsApp / phone (optional), emirate, and whether you are a mechanic or seller — collected via the waitlist form to notify you about the launch |
| Technical | Locally-stored sign-in identity (browser localStorage), basic request metadata |
Legal basis
- Performance of a contract — to operate the marketplace and connect mechanics with sellers.
- Legitimate interests — to keep the service secure and prevent abuse.
- Consent — where you opt in to optional communications; you may withdraw consent at any time.
- Legal obligation — where we must retain records to comply with UAE law.
How we use data
- Authenticate you via one-time magic links (no passwords stored).
- Route part requests to relevant sellers and surface offers to mechanics.
- Operate negotiations, matches, and notifications.
- Maintain platform security and integrity.
- Measure and improve how our website and service are used (analytics).
Sharing & processors
We do not sell personal data. We share limited data with these processors:
- Resend — delivery of transactional sign-in emails.
- Cloudflare — DNS, CDN, and network protection for our public domain.
- Google (Google Analytics) — aggregate website usage analytics.
- Microsoft (Clarity) — product analytics, including heatmaps and session replays, to understand how the site is used and improve it.
Counterparty contact details (e.g. a seller's phone) are revealed to the other party only after a match is confirmed, to enable the transaction.
Retention
We keep personal data only as long as needed to provide the service and meet legal obligations. Account and profile data is retained while your account is active; transactional records may be retained longer where required for record-keeping. You may request deletion at any time (see below).
Your rights
Subject to the PDPL and, where applicable, the GDPR, you may request to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data ("right to erasure").
- Restrict or object to certain processing.
- Receive a copy of your data in a portable format.
To exercise any right, email [email protected]. We will respond within the timeframes required by applicable law.
Cookies & analytics
We use browser localStorage to keep you signed in, and analytics cookies from Google Analytics and Microsoft Clarity to understand and improve how the site is used. See our Cookie notice for the full list and how to opt out.
Changes to this policy
We may update this policy from time to time. The "Last updated" date above reflects the latest revision.