Privacy Policy

01Who we are

UAE Sourcing (uaesourcing.ae) is a brand and project of Noor Al Sharq Global Trading FZE LLC, a company licensed by Sharjah Publishing City Free Zone under trade licence no. 4432508.01. Our registered address is Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates.

Noor Al Sharq Global Trading FZE LLC is the controller of the personal data described in this policy, meaning it decides why and how that data is used. In this policy, “we” and “us” mean that company, which offers the UAE Sourcing service.

For any question or request about your personal data, email hello@uaesourcing.ae.

02What this policy covers

This policy covers the personal data we handle when you visit uaesourcing.ae, ask us for a quote, buy from us, supply to us, or work with us on inspection, shipping or customs clearance.

We follow Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the PDPL). It applies to controllers based in the UAE, including when the people whose data they handle are outside the UAE. Among its exclusions are companies in free zones that have their own data protection legislation, such as the DIFC and ADGM. We apply the PDPL to our business.

Personal data means information about a person who can be identified. Information about a company on its own is not personal data, but the names and contact details of the people who work there are.

Some of the detail is still to come. To our knowledge, the PDPL’s Executive Regulations have not yet been issued, and in June 2026 the UAE announced that the functions of the UAE Data Office are being transferred to the new federal Artificial Intelligence and Data Authority. We will update this policy as these points are settled.

Our Buyers portal is not live yet; when it opens it will have its own privacy notice explaining what it collects and why, before you are asked to share anything.

03What we collect

We collect only what we need to source, inspect, ship and deliver goods. Most of it comes directly from you or your company.

• Website visitors: the site has no accounts, analytics or trackers, and no form that sends data to us. The quote form only prepares a message in your browser; the site does not store or send anything you type. If you choose to send that message by email or WhatsApp, we receive what you send. The site is hosted by Vercel Inc. in the USA, which serves its pages from a global network and automatically keeps standard technical logs (such as IP address, browser type and pages requested) for a limited period, for security and to keep the site running.
• Clients and buyers: name, job title, company name and trade licence details, phone, email and WhatsApp number, delivery and shipping addresses, the products and specifications you ask for, customs and import details (for example the importer’s customs code, tax registration number and the documents customs requires), quotes, orders, invoices and payment records, and our messages with you.
• Suppliers and manufacturers: names, job titles and contact details of your staff, company and licence or registration details, bank and payment details we need to pay you, product information, quotes, contracts and invoices, and production and inspection photos or videos (which may show people at the workplace).
• Logistics, inspection and customs partners: names, job titles and contact details of your staff, company and licence details, and the shipping, inspection and customs documents we exchange (such as bills of lading, packing lists, inspection reports and customs declarations).

We do not ask for sensitive personal data, such as health, religious or biometric data; please do not send it to us. If a customs authority requires an identity document, we use it only for that purpose.

04Why we use it and on what legal basis

The PDPL allows personal data to be processed with the person’s consent, or without consent in the cases listed in Article 4. Unlike some foreign laws, the PDPL has no general “legitimate interests” ground, so we rely on the following:

• Preparing quotes, placing orders, arranging inspection, shipping and customs clearance, delivering, and handling after-sales issues: needed to perform a contract you are party to, or to take steps you ask for before entering into one (Article 4(9)).
• Meeting legal duties, such as tax, VAT invoicing, customs and import rules, and requests from UAE authorities: needed to fulfil obligations set by other UAE laws (Article 4(10)).
• Bringing or defending legal claims, for example in a dispute over goods or payment (Article 4(3)).
• Working with the staff of suppliers and partners: we use business contact details to perform our contracts with their companies. Where the PDPL requires consent for this, we will ask for it, and it can be withdrawn at any time.
• Sending news or offers about our services: only with your consent, and you can ask us to stop at any time (Article 17).
• Website analytics, if we ever add them: only with your consent through the cookie banner.
• Withdrawing consent: wherever we rely on consent, you can withdraw it at any time by emailing us. This does not affect processing carried out before you withdrew it (Article 6).

05Sending data outside the UAE

Sourcing is international, so some personal data has to leave the UAE. We send it only to those who need it to make, check, move or clear your goods, and only the part they need:

• Manufacturers and suppliers in China, Syria, Türkiye, Vietnam, the USA and other countries we source from: your product requirements and, where needed, your company name, a contact person and delivery or labelling details (for example for white-label or packaging work).
• Inspection companies in those countries: order details and the contact details needed to arrange and report on inspections.
• Freight forwarders, shipping lines, airlines, couriers and customs brokers outside the UAE: consignee name, contact details, delivery address and the shipping and customs documents each shipment needs.
• Our email, messaging (including WhatsApp) and file-storage providers, whose servers may be outside the UAE.
• Our website host, Vercel Inc., in the USA (its servers may also be in other countries): the standard technical logs described above, under its data processing terms.

06Legal basis and safeguards for these transfers

The PDPL allows transfers to countries whose data protection laws give adequate protection, or with which the UAE has a data protection agreement, as approved by the UAE Data Office (Article 22). To our knowledge no such approvals have been published, so we rely on Article 23. Our main basis is that the transfer is needed to enter into or perform our contract with you, or a contract with a third party (such as a factory, inspector or forwarder) made in your interest. Among other cases, Article 23 also allows transfers with your explicit consent, where needed to establish or defend rights before the courts, and, where the destination has no data protection law, under a contract that binds the recipient to the PDPL’s standards.

Safeguards: we share the minimum needed, use company contact points rather than personal ones where we can, ask our partners to keep the data confidential and use it only for your order, and do not send identity documents abroad unless a customs process requires it.

Data protection standards in these countries may differ from the UAE’s. If you would rather your personal details not go to a particular country, tell us before you order and we will tell you whether we can still deliver.

07Who we share data with

We share personal data only with those who need it for the purposes above. We never sell personal data, and we never rent it out or trade it for anyone’s marketing.

• Manufacturers, suppliers and inspection companies, to make and check your goods.
• Freight forwarders, shipping lines, couriers, warehouses and customs brokers, to move and clear your goods.
• UAE customs authorities, the Federal Tax Authority and other UAE authorities, where the law requires.
• Banks and payment providers, to make and receive payments.
• Professional advisers such as accountants, auditors and lawyers, who must keep it confidential.
• Email, messaging and storage providers that process data on our behalf.
• Our website host, Vercel Inc., which processes technical logs on our behalf.
• Courts and other authorities, when the law requires it or to protect our legal rights.

08How long we keep it

We keep personal data only as long as we need it for the purpose we collected it for, then delete it or make it anonymous (Article 5).

• Enquiries that do not lead to an order: deleted once there is no longer a reason to follow up.
• Order, invoice, payment, shipping and customs records: for as long as UAE law requires. For corporate tax, the Federal Tax Authority requires records to be kept for at least seven years after the end of the tax period they relate to. Other tax, customs and commercial laws may set their own periods.
• Supplier and partner records: while we work together, and afterwards for the periods the law requires.
• Information about a dispute or claim: until it is finally resolved.

09Keeping data secure

We use technical and organisational measures suited to the risk, as Article 20 of the PDPL requires. Only people who need personal data for their work can access it, and each partner receives only what its task requires.

The website does not store or send anything you type into the quote form. Messages you send by email or WhatsApp pass through those services, so please include only what your request needs.

No system is completely secure. If a breach puts personal data at risk, we will notify the UAE Data Office (or the authority that takes over its role) and inform the people affected, as Article 9 requires, and explain what we are doing about it.

10Your rights

Under the PDPL you have the following rights over your personal data:

• Information: ask what personal data we hold about you, why we use it, who receives it (including outside the UAE), how long we keep it and how it is protected. This is free of charge (Article 13).
• Portability: receive the data you gave us in a structured, machine-readable format, or have it sent to another organisation where technically possible, when we process it by automated means based on your consent or a contract (Article 14).
• Correction and erasure: have inaccurate data corrected or completed without undue delay, and have data erased when we no longer need it, when you withdraw consent, when you object to the processing or we have no legitimate reason to continue it, or when the processing breaks the law (Article 15).
• Restriction: have processing restricted while you dispute the accuracy of your data, or where it goes beyond the agreed purpose or breaks the law (Article 16).
• Stopping processing: object to, and have us stop, processing for direct marketing, for statistical surveys that are not in the public interest, or that breaks the PDPL’s processing rules (Article 17).
• Automated decisions: object to decisions resulting from automated processing, including profiling, that have legal consequences or seriously affect you. We do not make decisions of this kind (Article 18).
• Withdrawing consent: withdraw any consent you have given, at any time (Article 6).

11How to use your rights or complain

To use any of these rights, email hello@uaesourcing.ae. We may first ask you to confirm your identity, and we will reply without undue delay.

Requests for information are free under Article 13, and we do not charge for the other requests either. The PDPL allows some requests to be declined: for example, an information request that is excessively repetitive or would affect other people’s privacy (Article 13), or an erasure request that conflicts with laws we must follow, such as tax record-keeping rules (Article 15). If we decline, we will tell you why.

If you believe we have broken the PDPL, you can complain to the UAE Data Office (Article 24). In June 2026 the UAE announced that the Data Office’s functions are being transferred to the federal Artificial Intelligence and Data Authority, and the new complaints process has not yet been announced. You are always welcome to contact us first so we can try to put things right.

12Cookies and your consent

Today the site sets no cookies, uses no analytics and loads no third-party trackers. Our fonts and scripts are served from our own site.

On your first visit, a banner asks whether you allow analytics. Your answer is saved in your browser’s local storage so we do not ask again. Saving it is strictly necessary for the banner to work; the saved setting contains no personal information and is not sent to us.

If we add an analytics tool in future, we will name it in this policy and ask for your choice again before it loads. It will run only if you click Accept, and declining will not change how the site works.

You can change your choice at any time with the “Cookie settings” link at the bottom of every page, or by clearing this site’s data in your browser.

13Children

UAE Sourcing is a service for businesses. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you think a child has sent us personal data, contact us and we will delete it.

14Changes to this policy

We will update this policy when our services or the law change, for example when the PDPL Executive Regulations are issued or the new authority’s role is confirmed. The date at the top shows when it was last updated.

15Contact us

Noor Al Sharq Global Trading FZE LLC (UAE Sourcing), Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates.

Email: hello@uaesourcing.ae

This policy is published in Arabic and English. If the two versions differ, the Arabic version prevails.