Privacy Policy

01 Who we are

Tabadal FZ LLC ("Tabadal", "we", "us", "our") is a UAE-based B2B barter marketplace operating at tabadal.ae. We connect verified UAE businesses to exchange services on a non-cash basis. Our registered address is in Dubai, United Arab Emirates.

Tabadal operates exclusively as a platform for verified business entities holding valid UAE trade licenses. We do not provide services to individuals acting in a personal capacity.

For all privacy matters, contact us at legal@tabadal.ae.

02 Data we collect

We collect the following categories of information when you register, use the platform, or interact with our services:

We do not collect personal financial information such as bank account details, credit card numbers, or personal income data. Payment processing for subscription fees is handled by third-party processors (see Section 6).

03 Why we collect it

We process your data only for specified, explicit, and legitimate purposes under the PDPL:

• Membership verification: To confirm that applicants hold a valid UAE trade license issued by DED or a recognised free zone authority, and that the contact is an authorised signatory of the business.
• Matching: To identify and suggest relevant barter opportunities between Verified Members, based on service offerings, sector, and deal preferences.
• VAT invoice generation: To generate compliant UAE VAT invoice templates for completed deals, using the TRN and business name provided. This is required under UAE Federal Decree-Law No. 8 of 2017 on VAT.
• Email communications: To send transactional emails (deal updates, match notifications, account alerts) and, where you have opted in, product updates and platform announcements.
• Platform improvement: To analyse usage patterns, fix bugs, improve matching algorithms, and develop new features. This processing uses aggregated and, where possible, anonymised data.
• Legal compliance: To comply with UAE law including AML/CTF obligations, FTA requirements, and court or regulatory orders.

We will not use your data for purposes incompatible with those listed above without seeking fresh consent or establishing another lawful basis under the PDPL.

04 How we store it

Data residency: Tabadal stores primary member data on servers located in the UAE or GCC where technically and commercially practicable. We prioritise UAE and GCC-based infrastructure providers for all core platform data including member profiles, deal records, and VAT documentation.

International transfers: Where sub-processors operate outside the UAE or GCC (for example, cloud infrastructure, analytics, or customer support tools), we ensure appropriate safeguards are in place. These may include:

• Standard contractual clauses approved by the UAE data protection authority;
• Data processing agreements with certified processors;
• Processing only in jurisdictions deemed adequate under UAE law.

A list of current sub-processors, including their locations, is available on request by emailing legal@tabadal.ae.

Security measures: We implement industry-standard technical and organisational measures including: TLS encryption in transit, AES-256 encryption at rest for sensitive fields, role-based access controls, regular penetration testing, and incident response procedures. No data transmission over the internet can be guaranteed 100% secure, but we take all reasonable steps to protect your information.

05 How long we keep it

After the applicable retention period, data is securely deleted or irreversibly anonymised. You may request early deletion subject to our legal obligations: see Section 8 (Your rights).

06 Who we share it with

We do not sell, rent, or trade your personal data to third parties. We share data only in the following limited circumstances:

• Matched counterparty businesses: When you are matched with another Member for a potential trade, we share your business name, trade license verification status, and service description with that counterparty. We do not share personal financial data, your TRN, or your WhatsApp number until you choose to initiate direct contact. See Section 7 for the full barter-specific disclosure.
• Payment processors: Subscription fees are processed by third-party payment providers (e.g. Stripe or equivalent UAE-supported processor). These providers process card details directly and are PCI-DSS compliant. Tabadal does not store full payment card data.
• Analytics providers: We use analytics tools (such as Google Analytics or privacy-respecting alternatives) to understand platform usage. These tools may receive pseudonymised technical data such as IP addresses and page interactions. Analytics cookies are served only with your consent (see Section 9).
• Email service providers: Transactional and marketing emails are sent via third-party email platforms. These providers process your email address and name for delivery purposes only.
• Legal and regulatory authorities: We will disclose data to UAE courts, regulators (including the UAE FTA, DED, or data protection authority), or law enforcement where we are legally required to do so.
• Business transfers: In the event of a merger, acquisition, or asset sale, member data may be transferred to the acquiring entity, subject to equivalent privacy protections and prior notice to affected members.

All third-party processors are contractually bound to process your data only on our instructions and in compliance with the PDPL.

07 Barter-specific disclosure

This disclosure is fundamental to how Tabadal works: businesses need to know who they are potentially trading with and what services are on offer. Accordingly, by registering as a Member, you explicitly consent to this limited disclosure to potential counterparties.

What is NOT shared at the matching stage:

• Your Tax Registration Number (TRN)
• Your WhatsApp or personal contact number
• Your bank or payment details
• Your trade license document (number and issuing authority are shared; the document itself is not)
• Details of your other deals or trade history (only your aggregate rating is visible)

Once a Deal is confirmed by both parties, contact details (business email and, if you choose to share it, WhatsApp number) are exchanged to facilitate delivery of the agreed services.

Deal records: including agreed service terms and the Barter Value: are retained by Tabadal for VAT and dispute resolution purposes. Both parties to a confirmed Deal receive a copy of all generated documentation.

08 Your rights

Under the UAE Federal Decree-Law No. 45 of 2021 (PDPL), you have the following rights in relation to your personal data:

• Right of access: You may request a copy of all personal data we hold about you and your business, including the categories of data, the purposes for processing, and any recipients.
• Right to correction: You may request that inaccurate or incomplete data is corrected. Some data (e.g. trade license number) can be updated directly in your account settings; other corrections require identity verification.
• Right to deletion ("right to be forgotten"): You may request deletion of your personal data. We will comply where we have no overriding legal obligation to retain the data (for example, VAT records must be kept for 5 years under UAE law: see Section 5). On deletion of your account, your public profile and listings will be removed immediately; underlying records will be anonymised and retained only as required by law.
• Right to data portability: You may request a structured, machine-readable export of your data (business profile, deal history, reviews received) to transfer to another service.
• Right to withdraw consent: Where processing is based on your consent (e.g. marketing emails, analytics cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing for purposes that do not require your consent, where you have grounds relating to your particular situation.

If you are dissatisfied with our response, you have the right to lodge a complaint with the UAE data protection authority.

09 Cookies

We use cookies and similar tracking technologies on our website. Here is how we categorise them:

On your first visit, we present a cookie consent banner. Essential cookies are active by default. Analytics and preference cookies are set only if you accept them. You may change your cookie preferences at any time by clicking "Cookie Settings" in the footer.

We do not use advertising or cross-site tracking cookies.

10 Children

Tabadal is a B2B platform exclusively for verified business entities. The authorised signatory of any business registering on the platform must be 18 years of age or older. We do not knowingly collect personal data from individuals under the age of 18.

If you believe that a minor has submitted personal data through our platform, please contact us immediately at legal@tabadal.ae and we will take prompt steps to delete such data.

11 Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.

For material changes: those that significantly affect your rights or how we use your data: we will provide at least 14 days' advance notice by email to the registered business email address on your account before the changes take effect. Non-material updates (such as clarifications, corrections, or formatting changes) may be made without prior notice.

The "Effective Date" at the top of this page reflects when the current version came into force. We recommend reviewing this policy periodically.

Continued use of the platform after a material change takes effect constitutes acceptance of the updated policy. If you do not accept the changes, you may close your account by emailing support@tabadal.ae.

12 Contact us

For all privacy-related enquiries, requests, and complaints: