Privacy Policy & Data Security

1. Who We Are

OKSAN GROUP FZ-LLC ("OKSAN", "we", "us") operates a circular economy platform in the United Arab Emirates. This policy explains how we handle personal data of customers, Vendors and visitors ("you") in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

2. Information We Collect

• Account details: name, email address and password credentials (managed by our authentication provider).
• Order details: delivery address, phone number, items purchased and order history.
• Vendor details: business and payout information provided during onboarding.
• Enquiries: information you submit through forms, such as B2B waste partnership requests or newsletter sign-ups.
• Technical data: device, browser and usage information collected through cookies and similar technologies.

3. How We Use Your Information

• To create and manage your account and process orders and payments.
• To arrange delivery and provide customer support.
• To pay Vendors and operate the marketplace.
• To send order updates and, where you have opted in, newsletters and marketing messages.
• To improve the Platform, prevent fraud and meet legal obligations.

4. Legal Basis for Processing

We process personal data where it is necessary to perform our contract with you, where we have your consent (for example, marketing emails), to comply with legal obligations, or for our legitimate interests in running and securing the Platform.

5. Payments

Payments are handled by a third-party payment processor. Your card details are entered directly with the processor and are never stored on OKSAN servers. We only receive confirmation of payment status and limited transaction information.

6. Sharing Your Information

We do not sell your personal data. We share it only with trusted parties who help us operate the Platform:

• Vendors, to the extent needed to fulfil your order (such as name and delivery details).
• Service providers for authentication, payments, hosting, delivery and communications.
• Authorities, where required by UAE law or to protect our legal rights.

7. Data Security

We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), secure authentication, role-based access controls and limited access to personal data on a need-to-know basis.

No online system is completely secure. If a data breach affecting your rights occurs, we will notify you and the relevant authorities as required by law.

8. Data Storage and Retention

We keep personal data only for as long as needed for the purposes described here, including to meet accounting, tax and legal requirements. When data is no longer required, we delete or anonymise it. Where data is transferred outside the UAE, we ensure appropriate safeguards are in place.

9. Cookies

We use cookies and similar technologies to keep you signed in, remember your cart and understand how the Platform is used. You can control cookies through your browser settings, though some features may not work properly without them.

10. Your Rights

Under UAE data protection law, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion or restriction of processing in certain circumstances.
• Object to processing or withdraw consent at any time, including unsubscribing from marketing.
• Request transfer of your data where applicable.

11. Children's Privacy

The Platform is not directed to children under 18, and we do not knowingly collect their personal data.

12. Changes and Contact

We may update this policy from time to time and will post the latest version on this page with a new "last updated" date.

To exercise your rights or ask questions about privacy, contact us via WhatsApp at +971 56 209 6221 or through our Instagram @oksan_group.