Privacy Policy

This Privacy Policy explains how Nadbook ("we", "us", the "Platform") collects, uses, stores, and protects your personal data. We process personal data in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL) and its implementing regulations.

The Platform is operated by [LEGAL ENTITY NAME], holding UAE trade licence [LICENCE NUMBER], [EMIRATE]. For any privacy request, contact us at [privacy@yourdomain.ae].

1. Data we collect

• Account data: name, email address, and password (stored hashed by our authentication provider).
• Seller application data: company / brand name, services offered, years of UAE experience, emirate, trade licence number (if provided), and portfolio links.
• Setup Concierge inputs: the business idea, target market, capital range, office model, visa count, and founder citizenship you enter. These generate a shareable Startup Kit that is retained for 90 days.
• Usage data: pages viewed and basic technical logs needed to operate and secure the service.

2. Why we use it

We use personal data to operate the marketplace, review seller applications, connect buyers with sellers, generate Startup Kits, provide support, and meet legal obligations. We do not sell your personal data.

3. Legal basis

We process data on the basis of your consent, the performance of our agreement with you, and our legitimate interests in running a safe, curated marketplace — consistent with the PDPL.

4. Sharing

Seller profile information you choose to publish is visible to buyers. We use trusted processors (hosting and authentication / database providers) who process data on our instructions. We may disclose data where required by UAE law or a competent authority.

5. Retention

We keep personal data only as long as needed for the purposes above or as required by law. Startup Kits expire 90 days after creation. You may request deletion of your account data at any time.

6. Your rights

Under the PDPL you have the right to access, correct, delete, and restrict the processing of your personal data, to withdraw consent, and to object to certain processing. To exercise any right, email [privacy@yourdomain.ae]. You may also lodge a complaint with the UAE Data Office.

7. Security

We apply technical and organisational measures appropriate to the risk, including encrypted transport and access controls. No method of transmission is fully secure, but we work to protect your data.

8. Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.