Privacy Policy

Effective Date: 22 April 2026
PDPL Compliance: This policy is drafted in accordance with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (the "PDPL").

Contents

  1. Who we are
  2. Data we collect
  3. Why we collect it
  4. How we store it
  5. How long we keep it
  6. Who we share it with
  7. Barter-specific disclosure
  8. Your rights
  9. Cookies
  10. Children
  11. Changes to this policy
  12. Contact us

01 Who we are

Tabadal FZ LLC ("Tabadal", "we", "us", "our") is a UAE-based B2B barter marketplace operating at tabadal.ae. We connect verified Dubai businesses to exchange services on a non-cash basis. Our registered address is in Dubai, United Arab Emirates.

Tabadal operates exclusively as a platform for verified business entities holding valid UAE trade licenses. We do not provide services to individuals acting in a personal capacity.

For all privacy matters, contact us at legal@tabadal.ae.


02 Data we collect

We collect the following categories of information when you register, use the platform, or interact with our services:

Category Data points Collected when
Business identity Trade license number, business name, business type (DED / free zone), issuing authority Registration
Contact information Contact name (authorised signatory), business email address, WhatsApp number Registration
Financial reference data Tax Registration Number (TRN) for VAT-registered businesses Registration / Deal creation
Service information Industry sector, service descriptions, deal preferences, barter value ranges Profile setup / Listing creation
Technical data IP address, browser type, device type, pages visited, session duration Automatically on site visit
Usage data Deal requests sent/received, messages, deal confirmations, reviews submitted Platform activity
Waitlist data Business name, contact name, email, industry, trade interest Waitlist sign-up

We do not collect personal financial information such as bank account details, credit card numbers, or personal income data. Payment processing for subscription fees is handled by third-party processors (see Section 6).


03 Why we collect it

We process your data only for specified, explicit, and legitimate purposes under the PDPL:

We will not use your data for purposes incompatible with those listed above without seeking fresh consent or establishing another lawful basis under the PDPL.


04 How we store it

Data residency: Tabadal stores primary member data on servers located in the UAE or GCC where technically and commercially practicable. We prioritise UAE and GCC-based infrastructure providers for all core platform data including member profiles, deal records, and VAT documentation.

International transfers: Where sub-processors operate outside the UAE or GCC (for example, cloud infrastructure, analytics, or customer support tools), we ensure appropriate safeguards are in place. These may include:

A list of current sub-processors, including their locations, is available on request by emailing legal@tabadal.ae.

Security measures: We implement industry-standard technical and organisational measures including: TLS encryption in transit, AES-256 encryption at rest for sensitive fields, role-based access controls, regular penetration testing, and incident response procedures. No data transmission over the internet can be guaranteed 100% secure, but we take all reasonable steps to protect your information.


05 How long we keep it

Data type Retention period Reason
Active member data Duration of membership + 5 years after account closure UAE FTA VAT record-keeping requirement (5-year minimum per Federal Decree-Law No. 8 of 2017)
VAT invoice records 5 years from the date of the supply Mandatory UAE FTA obligation
Deal agreements Duration of membership + 5 years Legal dispute resolution; contractual obligation
Waitlist data Until you join the platform or request deletion Purpose fulfilled on joining; deleted on request
Usage / analytics data 13 months (rolling) Platform improvement; standard analytics window
Support communications 3 years from last interaction Quality assurance; dispute reference

After the applicable retention period, data is securely deleted or irreversibly anonymised. You may request early deletion subject to our legal obligations — see Section 8 (Your rights).


06 Who we share it with

We do not sell, rent, or trade your personal data to third parties. We share data only in the following limited circumstances:

All third-party processors are contractually bound to process your data only on our instructions and in compliance with the PDPL.


07 Barter-specific disclosure

"When you are matched with another business, your business name, trade license verification status, and service description will be visible to that counterparty. This is required for the service to function and you consent to this by joining Tabadal."

This disclosure is fundamental to how Tabadal works: businesses need to know who they are potentially trading with and what services are on offer. Accordingly, by registering as a Member, you explicitly consent to this limited disclosure to potential counterparties.

What is NOT shared at the matching stage:

Once a Deal is confirmed by both parties, contact details (business email and, if you choose to share it, WhatsApp number) are exchanged to facilitate delivery of the agreed services.

Deal records — including agreed service terms and the Barter Value — are retained by Tabadal for VAT and dispute resolution purposes. Both parties to a confirmed Deal receive a copy of all generated documentation.


08 Your rights

Under the UAE Federal Decree-Law No. 45 of 2021 (PDPL), you have the following rights in relation to your personal data:

To exercise any of these rights, email legal@tabadal.ae with the subject line "PDPL Rights Request" and your business name and registered email. We will respond within 30 calendar days of receiving your request. For complex requests, we may extend this by a further 30 days with prior notification.

If you are dissatisfied with our response, you have the right to lodge a complaint with the UAE data protection authority.


09 Cookies

We use cookies and similar tracking technologies on our website. Here is how we categorise them:

Cookie type Purpose Consent required
Essential cookies Session management, security (CSRF protection), load balancing, login state. The platform cannot function without these. No — strictly necessary
Analytics cookies Understanding how visitors use the site (pages visited, time on site, drop-off points). Used to improve the platform. Yes — opt-in consent
Preference cookies Remembering your settings (e.g. cookie preferences, display options). Yes — opt-in consent

On your first visit, we present a cookie consent banner. Essential cookies are active by default. Analytics and preference cookies are set only if you accept them. You may change your cookie preferences at any time by clicking "Cookie Settings" in the footer.

We do not use advertising or cross-site tracking cookies.


10 Children

Tabadal is a B2B platform exclusively for verified business entities. The authorised signatory of any business registering on the platform must be 18 years of age or older. We do not knowingly collect personal data from individuals under the age of 18.

If you believe that a minor has submitted personal data through our platform, please contact us immediately at legal@tabadal.ae and we will take prompt steps to delete such data.


11 Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.

For material changes — those that significantly affect your rights or how we use your data — we will provide at least 14 days' advance notice by email to the registered business email address on your account before the changes take effect. Non-material updates (such as clarifications, corrections, or formatting changes) may be made without prior notice.

The "Effective Date" at the top of this page reflects when the current version came into force. We recommend reviewing this policy periodically.

Continued use of the platform after a material change takes effect constitutes acceptance of the updated policy. If you do not accept the changes, you may close your account by emailing support@tabadal.ae.


12 Contact us

For all privacy-related enquiries, requests, and complaints:

Privacy & Legal

legal@tabadal.ae
Response within 30 days

Data Protection Officer

Designated DPO contact
legal@tabadal.ae

Registered Address

Tabadal FZ LLC
Dubai, United Arab Emirates

General Support

support@tabadal.ae
Account and platform queries