Privacy Policy

1. Who We Are

Engineerparts.com (“we”, “us”, “our”) is an online industrial marketplace and clearance desk for surplus stock, dead stock, industrial equipment, spare parts, tools and engineered parts, sold to retail and business buyers. The website is operated by [Insert Legal Entity Name], of [Insert Registered Office / Warehouse Address], United Arab Emirates, which is the controller of your Personal Data.

This policy explains how we collect, use, share and protect Personal Data when you visit www.engineerparts.com, buy clearance stock, submit a single-item or bulk-lot enquiry, subscribe to clearance alerts, contact us on WhatsApp, or interact with our advertising. It applies to visitors and buyers in the UAE, the wider GCC, the European Economic Area (EEA), the United Kingdom, the United States, India and elsewhere.

Contact for privacy matters: [Insert privacy email, e.g. privacy@engineerparts.com]

2. Information We Collect

“Personal Data” means information that identifies, or can reasonably be linked to, an individual, including a named contact at a business buyer.

A. Information you give us

• Enquiries, quotes and bulk-lot requests: full name, company name, email, phone number, country, approximate quantity or budget, product, category, SKU or lot references, and your message.
• Account and order data: when you create an account or check out as a guest, we collect billing and delivery addresses, order references and collection-appointment details.
• Payment data: payments are handled by third-party PCI-DSS-compliant gateways. We do not store full card numbers. We keep only transaction identifiers, invoice totals (AED or other currency) and billing confirmations needed for tax and accounting.
• Clearance alerts: your email address and subscription preferences.
• WhatsApp and direct communications: your phone number, profile name, lead or order reference, and any photos or documents you send (for example damage claims or specification requests).

B. Information collected automatically

• Device and connection data: IP address, browser type and version, operating system, device identifiers, referring URL, time zone and country setting.
• Behavioural analytics events: product views, catalogue searches, add-to-cart actions, purchases, enquiry submissions, WhatsApp button clicks and specification or document downloads.

We do not knowingly collect sensitive categories of personal data (such as health, biometric or government-ID data) through the website. Please do not include them in enquiries or WhatsApp messages.

3. How and Why We Use Your Information

We do not use your Personal Data for decisions based solely on automated processing that significantly affect you.

4. Cookies, Advertising and Tracking Technologies

We use cookies, pixels, web beacons and server-side tracking, including Google Tag Manager, Google Analytics 4, Google Ads, Meta Pixel and Conversions API, and the LinkedIn Insight Tag.

Remarketing. When you view a part, download a specification, add to cart or submit an enquiry, tags record the action so we can see which ads led to your visit and show you relevant surplus-stock ads elsewhere.

Hashed first-party data (Enhanced Conversions / CAPI). Where the law allows and your consent settings permit, we may share irreversibly hashed versions of your email address or phone number with Google and Meta to match enquiries and purchases to ad clicks.

Google Consent Mode v2. For visitors in the EEA, UK and Switzerland, advertising and analytics storage (ad_storage, ad_user_data, ad_personalization, analytics_storage) stays denied until you actively consent through our cookie banner.

Managing preferences. You can change or withdraw your choices at any time through [Cookie Settings link] or your browser settings. You can also opt out of personalised ads through:

• Google Ad Settings: myadcenter.google.com
• Meta Ad Preferences: facebook.com/adpreferences
• Digital Advertising Alliance (US): optout.aboutads.info
• Network Advertising Initiative: optout.networkadvertising.org

We honour Global Privacy Control (GPC) signals where required by law.

5. How We Share Your Information

We do not sell your Personal Data for money. We share it only as needed to run the business:

• Freight, courier and logistics partners for local delivery, collection appointments, customs clearance and palletised freight.
• Payment processors and financial institutions to authenticate payments, process refunds (typically within 5–14 working days) and prevent fraud.
• Hosting, CRM, analytics and messaging providers that store our catalogue and enquiry records and power our email and WhatsApp communications, under data processing agreements. WhatsApp is operated by Meta, which processes messages under its own terms.
• Advertising and marketing platforms (Google, Meta, LinkedIn, Microsoft) for ad measurement and audience targeting, subject to applicable consent rules.
• Authorities and advisers where required by law, court order or customs and tax regulators, and to professional advisers, or a buyer in a business transfer, under confidentiality obligations.

6. International Data Transfers

Engineerparts.com is operated from the UAE. If you use the site from elsewhere, your Personal Data will be transferred to and processed in the UAE and in other countries where our cloud and advertising providers operate.

Where required, we rely on safeguards such as:

• the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum for EEA and UK data; and
• contractual and other cross-border safeguards required by UAE Federal Decree-Law No. 45 of 2021 and the Saudi PDPL.

7. Data Retention and Security

Retention. We keep enquiries, quotations and account records for as long as needed to fulfil your requests, maintain ongoing sourcing relationships and resolve disputes. Tax invoices, shipping documents and financial records are kept for the period required by UAE Federal Tax Authority and commercial law (at least five years). Marketing data is kept until you unsubscribe or withdraw consent. Cookie and advertising identifiers expire according to each provider's settings.

Security. We use industry-standard measures including SSL/TLS encryption, access controls and secured server environments. No system is completely secure, and we will notify you and regulators of a breach where the law requires.

8. Children

Our site is intended for business and trade buyers and is not directed at anyone under 18. We do not knowingly collect Personal Data from children. If you believe we have, contact us and we will delete it.

9. Regional Privacy Disclosures

A. United Arab Emirates (Federal Decree-Law No. 45 of 2021, “PDPL”)

Legal basis: your consent, performance of a contract (orders, quotes, freight) and compliance with UAE legal obligations.

Your rights: to be informed about and access your data, request portability, correction or erasure, restrict processing, and object to direct marketing and automated processing.

Free zones: if you are in the DIFC or ADGM, the DIFC Data Protection Law (No. 5 of 2020) or ADGM Data Protection Regulations 2021 may apply instead, with the same rights and complaint routes to the relevant Commissioner.

Complaints: you may complain to the UAE Data Office.

B. Saudi Arabia and other GCC states

Laws: we process data in line with the Saudi PDPL (Royal Decree M/19) and applicable local laws, including Bahrain Law No. 30 of 2018, Oman Royal Decree 6/2022 and Qatar Law No. 13 of 2016.

Marketing and transfers: we send promotional alerts only with your explicit opt-in, each with a one-click unsubscribe. Transfers to our UAE clearance desk are made to fulfil your sourcing requests, arrange freight and provide support.

Your rights: to be informed, access your data, receive it in a readable format, correct it, and request its destruction once the purpose has ended.

C. EEA, UK and Switzerland (GDPR / UK GDPR)

[Insert Legal Entity Name] is the controller. [Insert EU/UK representative details, if appointed under Art. 27.]

Legal bases: contract (Art. 6(1)(b)) for orders, quotes and freight; consent (Art. 6(1)(a)) for alerts and non-essential analytics and advertising cookies; legitimate interests (Art. 6(1)(f)) for B2B enquiry follow-up, fraud prevention and platform security; legal obligation (Art. 6(1)(c)) for tax, customs and accounting records.

Your rights: access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests or direct marketing. Where we rely on consent, you can withdraw it at any time without affecting earlier processing.

Complaints: to your local data protection authority or the UK Information Commissioner's Office (ico.org.uk).

D. United States (CCPA/CPRA and other state laws) and Canada (PIPEDA)

Categories collected in the last 12 months: identifiers (name, email, phone, IP address); commercial information (enquiries, SKUs viewed, purchases); internet activity (analytics events); and geolocation at country level. We collect these for the purposes in Section 3 and disclose them to the recipients in Section 5.

No sale; opt-out of sharing: we do not sell Personal Data for money. Sharing identifiers or browsing events with ad networks for targeted advertising may count as “sharing” for cross-context behavioural advertising. You can opt out through [Do Not Sell or Share My Personal Information link / Cookie Settings] or by emailing us.

Your rights: to know, access, correct and delete your data, and to opt out of sharing. Where you use an authorised agent, we may require proof of authority.

Non-discrimination: we will not penalise you for exercising your rights.

Canada: you may access and correct your data and withdraw consent, and may complain to the Office of the Privacy Commissioner of Canada.

E. India, Australia, Singapore and other jurisdictions

If you access the site from India (Digital Personal Data Protection Act, 2023), Australia, Singapore or elsewhere, we respect your statutory rights to access, correct and erase your data and to withdraw consent. Indian users may also nominate a representative and raise a grievance with us at the contact below before approaching the Data Protection Board of India.

10. How to Exercise Your Rights

To request a copy, correction or deletion of your records, or to opt out of marketing or targeted advertising, contact our Clearance Desk & Privacy Team:

• Contact form: www.engineerparts.com/contact (please quote your Lead Reference or Order Number)
• Email: [Insert privacy email]
• Post: [Insert full legal entity name and UAE address]

We may verify your identity by matching the email, phone number or order reference you provide against our records. We will respond to verifiable requests within 30 days, or sooner where local law requires. We may decline requests where the law allows or requires us to keep the data (for example tax records) and will explain why.

11. Changes to This Policy

We may update this policy to reflect changes in our operations, advertising technology or legal requirements. We will post the revised version with a new “Last updated” date and, for material changes, give notice by email or a prominent site banner. Where consent is required for a change, we will ask for it.