Legal

Privacy Policy

Last updated: March 2026

1. Introduction

CollectDXB operates the website collectdxb.com (the "Platform"), a luxury goods consignment and e-commerce marketplace based in Dubai, United Arab Emirates. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our Platform, create an account, make a purchase, submit a consignment or sell request, or otherwise interact with our services.

By accessing or using CollectDXB, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the practices described herein, please do not use our Platform.

2. Information We Collect

Personal Information

When you register for an account, place an order, or submit a consignment or sell request, we may collect the following personal information:

  • Full name
  • Email address
  • Phone number
  • Shipping and billing address
  • Government-issued identification (when required for high-value transactions)

Payment Information

All payment transactions on CollectDXB are processed securely through Stripe, our third-party payment processor. We never store your credit card details on our servers. Stripe handles all sensitive payment data in compliance with PCI DSS (Payment Card Industry Data Security Standard) requirements.

Account Data

We collect information related to your account activity, including purchase history, consignment submissions, sell request details, wishlist items, and communication preferences.

Consignment and Sell Request Details

When you submit items for consignment, sell requests, we collect details about the items including brand, model, condition, photographs, serial numbers, and your preferred pricing or valuation expectations.

Usage Data

We automatically collect certain technical information when you visit our Platform:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on each page
  • Referring website or source
  • Search queries within the Platform

Cookies

CollectDXB uses cookies and similar tracking technologies to enhance your browsing experience, maintain your session, and analyse Platform performance. For more details, see Section 5 below.

3. How We Use Your Information

CollectDXB uses the information we collect for the following purposes:

  • Processing orders and payments — to fulfil your purchases, process refunds, and manage shipping and delivery
  • Managing consignments and sell requests — to evaluate submitted items, communicate offers, coordinate logistics, and process payouts to sellers
  • Communicating about transactions — to send order confirmations, shipping updates, consignment status notifications, and respond to your enquiries
  • Marketing communications — to send promotional emails, new arrival announcements, and personalised recommendations, only with your explicit consent
  • Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, unauthorised access, and other illegal activities
  • Platform improvement — to analyse usage patterns, optimise user experience, develop new features, and improve our services
  • Legal compliance — to comply with applicable UAE laws, regulations, and legal obligations

4. Information Sharing

CollectDXB does not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

  • Stripe (payment processing) — your payment information is shared with Stripe to process transactions securely. Stripe's privacy policy governs their use of your data.
  • Shipping and logistics partners — we share your name, address, and contact details with trusted delivery partners to fulfil orders and coordinate item pickups for consignments and sell requests.
  • Legal requirements — we may disclose your information when required by UAE law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of CollectDXB, our users, or the public.
  • Professional advisors — we may share information with our legal counsel, accountants, auditors, and other professional advisors as necessary for business operations.
  • Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Cookies & Tracking

CollectDXB uses cookies to provide a seamless and personalised experience on our Platform. Cookies are small text files stored on your device that help us recognise you and remember your preferences.

Essential Cookies

These cookies are strictly necessary for the Platform to function. They include session cookies to keep you logged in and CSRF tokens to protect against cross-site request forgery. These cannot be disabled.

Functional Cookies

These cookies remember your preferences, such as your selected currency (AED or USD), appearance settings, and language preferences, to provide a more personalised experience.

Analytics Cookies

We may use analytics cookies to understand how visitors interact with our Platform. This data helps us identify popular pages, detect usability issues, and improve overall performance.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, please note that disabling essential cookies may prevent you from using certain features of the Platform, such as maintaining your shopping cart or staying logged in.

6. Data Security

CollectDXB takes the security of your personal information seriously. We implement a range of technical and organisational measures to protect your data, including:

  • SSL/TLS encryption — all data transmitted between your browser and our servers is encrypted using industry-standard SSL/TLS protocols
  • Secure server infrastructure — our servers are hosted in secure environments with restricted physical and digital access
  • PCI compliance through Stripe — all payment processing is handled by Stripe, which maintains PCI DSS Level 1 certification, the highest level of security compliance
  • Access controls — access to personal data is restricted to authorised personnel on a need-to-know basis, with role-based permissions enforced across our systems
  • Regular security audits — we conduct periodic reviews and audits of our security practices to identify and address potential vulnerabilities
  • Two-factor authentication — we offer two-factor authentication (2FA) for user accounts to provide an additional layer of security

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining the highest practicable standards.

7. Data Retention

CollectDXB retains your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Account data — retained for as long as your account remains active. If you request account deletion, we will remove your personal data within 30 days, subject to legal retention requirements.
  • Transaction records — retained for a minimum of five (5) years in accordance with UAE commercial law and tax regulations.
  • Marketing preferences — retained until you withdraw your consent or unsubscribe from marketing communications.
  • Usage data — anonymised and aggregated usage data may be retained indefinitely for analytical purposes.

You may request the deletion of your personal data at any time by contacting us. However, we may be legally required to retain certain information, in which case we will inform you of the applicable retention period.

8. Your Rights

Depending on your jurisdiction and applicable data protection laws, you may have the following rights regarding your personal information:

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — request correction of any inaccurate or incomplete personal data
  • Right to erasure — request deletion of your personal data, subject to legal retention obligations
  • Right to data portability — receive your personal data in a structured, commonly used, machine-readable format
  • Right to opt out of marketing — unsubscribe from marketing communications at any time using the link provided in our emails or by contacting us directly
  • Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at hello@collectdxb.com. We will respond to your request within 30 days.

9. International Transfers

CollectDXB is based in Dubai, United Arab Emirates, and your personal data is primarily processed and stored within the UAE. However, in the course of providing our services, your data may be transferred to and processed in countries outside the UAE, including:

  • Payment processing — Stripe may process your payment data in jurisdictions where their servers are located
  • Cloud infrastructure — our hosting and cloud service providers may operate servers in multiple international locations
  • Email and communication services — transactional and marketing emails may be routed through international service providers

Where international transfers occur, we ensure that appropriate safeguards are in place, including contractual obligations and security measures, to protect your personal data in accordance with applicable data protection standards.

10. Children's Privacy

CollectDXB's services are not directed at individuals under the age of 18. We do not knowingly collect, solicit, or maintain personal information from children or minors. If we become aware that we have inadvertently collected personal data from a person under 18, we will take prompt steps to delete such information from our records.

If you are a parent or guardian and believe that your child has provided personal information to CollectDXB, please contact us immediately at hello@collectdxb.com so that we can take appropriate action.

11. Changes to This Policy

CollectDXB reserves the right to update or modify this Privacy Policy at any time. When we make changes, we will revise the "Last updated" date at the top of this page and, where appropriate, notify you via email or a prominent notice on our Platform.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the updated terms.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us:

  • Email: hello@collectdxb.com
  • Location: Dubai, United Arab Emirates
  • Website: collectdxb.com

We are committed to resolving any privacy-related issues promptly and transparently. We aim to respond to all enquiries within 30 days of receipt.