Privacy Policy

Last Updated: 11 Novembre 2025

1. Introduction

This Privacy Policy (the “Policy”) sets out how Klozy Group, a company established and registered in Dubai, United Arab Emirates (“Klozy,” “we,” “us,” or “our”), collects, uses, discloses, and safeguards personal data obtained through its mobile application, website and associated services (together, the “Platform”).

We are committed to respecting the privacy and data protection rights of our users and to ensuring full compliance with applicable laws, including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), the EU General Data Protection Regulation (GDPR) where applicable, and relevant international standards.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with its terms, you should discontinue the use of our services immediately.

2. About Klozy and Contact Information

Klozy operates as a digital marketplace based in Dubai, designed to facilitate the buying and selling of goods through a secure and user-friendly interface. The Platform includes a private chat system allowing buyers and sellers to communicate directly, and integrates Stripe, Google Pay, and Apple Pay for payment processing.

For any inquiries, data requests, or complaints concerning the processing of your personal data, you may contact our privacy mailbox at contact@klozy.store

3. Personal Data We Collect

When you interact with our Platform, we collect information that you provide directly, information gathered automatically through your device, and information obtained from trusted third parties.

Data you provide directly may include your name, email address, telephone number, delivery or billing details, and payment information processed through our payment partners. You may also provide content such as chat messages, listings, product descriptions, or media uploaded to the Platform.

Data collected automatically through services such as Firebase includes your device identifier, model, operating system, platform (iOS, Android, Web), device language, country and city, IP address, screen resolution, and session-related statistics such as app version, installation date, number of sessions, and duration of use.

We also collect technical and analytic data to understand how the Platform performs, detect malfunctions, and improve user experience.

In addition, we may receive data from third-party providers that support our operations, including Stripe, Google Pay, Apple Pay, Firebase, Algolia, RevenueCat, Mux, and EMX Delivery API.

4. Purposes of Processing

We process personal data strictly for legitimate and defined purposes. These include the creation and management of user accounts, enabling secure transactions between buyers and sellers, facilitating communication through the in-app chat, processing and delivering orders, and providing technical support.

We also use data to maintain the integrity and security of the Platform, prevent fraud or misuse, and ensure compliance with our contractual and legal obligations. Technical data collected via Firebase and other integrations are primarily used for diagnostics, performance analytics, and product improvement.

We do not use your data for targeted marketing or behavioral profiling without your explicit consent.

5. Legal Basis for Processing

Our processing activities are grounded in one or more of the following legal bases:

• Contractual necessity, when processing is required to provide the services you request;
• Legal obligation, when processing is required to comply with UAE or international laws;
• Legitimate interest, when processing is necessary for the proper functioning, security, and improvement of our Platform; and
• Consent, where you have explicitly granted permission, for example regarding optional features or marketing communications.
6. Data Sharing and Third-Party Access

We may share certain personal data with trusted third-party service providers who act on our behalf and under our instructions. These partners assist us in providing payment processing, analytics, search indexing, delivery logistics, and system hosting.

Our key service providers include Stripe, Google Pay, Apple Pay, Firebase, RevenueCat, Algolia, Mux, and EMX Delivery API. Each provider is contractually bound to process data in compliance with strict confidentiality and security requirements.

We never sell, rent, or disclose personal data to unaffiliated third parties for marketing purposes.

7. Data Retention

Personal data are retained only for as long as necessary to fulfill the purposes described in this Policy or as required by applicable law. Unless otherwise specified, Klozy retains personal data for up to thirty-six (36) months following the user’s last activity.

Data may be retained for a longer period when necessary to comply with legal obligations, enforce our rights, resolve disputes, or prevent abuse. Upon expiry of the retention period, all personal data will be securely deleted or anonymized so that it can no longer identify the individual concerned.

8. Your Rights

Under applicable data-protection laws, you have several rights concerning your personal data. You may request access to the data we hold about you, ask for corrections of inaccurate or incomplete information, or request deletion of your account and associated data.

You may also request the restriction of processing in specific cases, obtain a copy of your data in a structured, machine-readable format, or object to processing carried out on the basis of legitimate interests.

Where processing relies on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

Requests to exercise these rights can be sent to contact@klozy.store, and we will respond in accordance with legal requirements. You also have the right to lodge a complaint with the UAE Data Office or another competent authority.

9. Security of Data

We employ appropriate technical and organizational measures to ensure the protection of your personal data against unauthorized access, alteration, disclosure, or destruction.

These measures include encryption of data during transmission using SSL/TLS protocols, two-factor authentication mechanisms such as email and phone verification, reCAPTCHA verification, restricted access to personal data on a need-to-know basis, and continuous monitoring for vulnerabilities.

While we strive to protect your data, no system can guarantee absolute security. Users are responsible for maintaining the confidentiality of their login credentials and promptly reporting any suspected breach.

10. International Data Transfers

Because some of our service providers operate outside the UAE, your personal data may be transferred to and processed in other jurisdictions, including within the European Union or the United States.

Whenever we transfer data internationally, we implement adequate safeguards—such as Standard Contractual Clauses (SCCs), data-transfer agreements, or reliance on jurisdictions that ensure an equivalent level of protection—to guarantee that your personal data remain secure and protected.

11. Children’s Privacy

Our Platform is intended for adults. We do not knowingly collect or process personal data from individuals under 21 years of age. If you believe that a minor has submitted data to us, please contact us immediately at contact@klozy.store, and we will promptly delete such information from our systems.

12. Cookies and Tracking Technologies

We may use cookies and similar technologies to enable essential functionalities, enhance user experience, and analyze Platform performance. Some cookies are strictly necessary for the operation of the Platform, while others are used to remember preferences or gather aggregate statistics.

You can manage or disable cookies through your browser or device settings; however, certain features of the Platform may not function properly if cookies are disabled.

13. Data Breach Notification

In the unlikely event of a data breach that could affect your rights or freedoms, we will notify you without undue delay and will also inform any relevant supervisory authority, in compliance with legal obligations.

14. Changes to This Policy

We reserve the right to modify or update this Policy from time to time to reflect changes in law, technology, or our business operations. Any updated version will be published on the Platform and will bear a new “Last Updated” date. We encourage users to review this Policy periodically to stay informed about our practices.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of personal data, please contact:

Klozy – Privacy Department

contact@klozy.store

Dubai, United Arab Emirates