Privacy Policy

Effective Date – May 28, 2024

Your privacy is extremely important to DriveArabia. We are committed to protecting your Personal Data (as that term is defined further below). We want to be transparent with you about how we collect and use your Personal Data in making our website and mobile applications (“Platform”) available to you and tell you about your privacy rights and how the law protects you.

This Privacy Policy aims to give you information on how DriveArabia collects and processes your Personal Data through your use of this Platform.

By using the Platform, you agree to the collection, use and transfer of your Personal Data as set out in this Privacy Policy.

We may revise this Privacy Policy from time to time, with or without notice to you. If that happens, the new version of this Privacy Policy will be made available on this page.

This Privacy Policy may be published in different languages. If that is the case and there are any inconsistencies between versions, the English language version will prevail.

Who we are

MODERN RACER ONLINE LLC operates the Platform and is therefore the controller of your Personal Data (referred to as either “DriveArabia”, “we”, “us” or “our” in this Privacy Policy). Our address is 7th Floor, Building 3, Dubai Design District, Dubai, United Arab Emirates.

DriveArabia is part of the Dubizzle group of companies.

How to contact us

You can contact us by emailing: editor@drivearabia.com.

The Personal Data we collect directly from you is outlined in the table below.

“Personal Data” is information about an individual from which that individual is either directly identified or can be identified. It does not include ‘anonymised data’ (which is information where the identity of an individual has been permanently removed). However, it does include ‘pseudonymised data’ (which is information which alone doesn’t identify an individual but, when combined with additional information, could be used to identify an individual).

Category of Personal Data	What this means
Contact Data	Email address, telephone number(s).
Marketing Data	Your preferences in receiving marketing messages from us.
Call Data	Recordings of calls between you and our teams, which are recorded for monitoring and training purposes.
Behavioural Data	Inferred or assumed information relating to your behaviour and interests based on your activity on the Platform. This is most often collated and grouped into ‘segments’ on an aggregated basis.
Technical Data	Internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website or use our services.

Aggregated data

We also collect, use and share ‘aggregated data’,such as statistical or demographic data for a number of purposes. Aggregated data may be derived from your Personal Data, but once in aggregated form it will no longer constitute Personal Data as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Behavioural Data to calculate the percentage of users accessing a specific Platform feature. However, if we combine or connect aggregated data with your Personal Data so that it can directly or indirectly identify you, we treat the combined data as Personal Data which will be used in accordance with this Privacy Policy.

Special categories of personal data

We do not knowingly collect any ‘special categories of personal data’ about you (this includes, for example, details about your race or ethnicity, religious or philosophical beliefs, political opinions, information about your health, genetic and/or biometric data, and information about criminal offences and convictions).

What happens if you refuse to provide necessary Personal Data?

You do not have to provide any Personal Data to us. However, where we need to process your Personal Data either to grant you access to the Platform or to comply with applicable law, and you fail to provide that Personal Data when requested, we may not be able to provide you access to the Platform.

In addition to the Personal Data that we collect directly from you (as described in the section immediately above this one), we also collect certain of your Personal Data from third party sources. These sources are set out in the table below.

Third party sources	Categories of Personal Data
Social media platforms	Identity Data Contact Data
Our affiliates	Identity Data Contact Data Marketing Data
Analytics providers	Behavioural Data Technical Data
Advertisers	Behavioural Data Technical Data

We will only use your Personal Data for the purposes for which we collected it as listed below, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your Personal Data for an unrelated purpose, we will update this Privacy Policy and we will explain the legal basis which allows us to do so (please refer to the ‘Changes to this Privacy Policy’ section further below).

What is our ‘legal basis’ for processing your Personal Data? 

In respect of each of the purposes for which we use your Personal Data, applicable privacy laws require us to ensure that we have a ‘legal basis’ for that use. Most commonly, we will rely on one of the following legal bases:

• Where we need to process your Personal Data to meet our contractual obligations to you (for example, to provide you access to the Platform) (“Contractual Necessity”).

• Where we need to process your Personal Data to comply with our legal or regulatory obligations (“Compliance with Law”).

• Where we have your consent to process your Personal Data for a specific purpose (“Consent”).

We have set out below, in a table format, the legal bases we rely on when processing your Personal Data.

Purpose	Categories of Personal Data	Why we do this	Our legal basis
Operation of our services	Identity Data Contact Data Location Data Listings Data Chat Data Call Data	To operate the Platform and enable your use of the Platform, including by allowing you to interact with other users of the Platform.	Contractual Necessity
Analytics	Behavioural Data Technical Data	To understand how you and other users use the Platform and to segment our userbase into groups for marketing purposes.	Contractual Necessity
Marketing	Contact Data Marketing Data	To send you marketing messages, where you have agreed to receive them.	Consent
Troubleshooting	Technical Data	To track issues that might be occurring on our Platform and to address them.	Contractual Necessity
Fraud prevention	Identity Data Contact Data	To keep our Platform and associated systems operational and secure.	Compliance with Law

The table below describes who we may share your Personal Data with and why we share it.

We require all recipients of your Personal Data to implement appropriate security measures to adequately protect it, consistent with our policies and any data security obligations applicable to us. We do not permit our third-party service providers who process your Personal Data on our behalf to use it for their own purposes, and only permit them to process your Personal Data for specified purposes in accordance with our instructions.

Recipients	Why we share it
Service providers	Our service providers provide us with a range of services which are necessary for the operation of the Platform (for example, IT, system administration services, or marketing services), and may have access to your Personal Data as a result.
Affiliates	DriveArabia is part of the Dubizzle group of companies, which operates other consumer platforms and share technology with DriveArabia. Our affiliated companies may require access to your Personal Data as they help us operate the Platform and manage user data.
Professional advisers	Our lawyers, bankers, auditors, insurers and other advisers may require limited access to your Personal Data when they provide consultancy, banking, legal, insurance and accounting services to us.
Public authorities	Public authorities may require us to disclose user data to them under certain circumstances, where required by law (for example, in the event of a police investigation).
Acquirer(s)	We may share your Personal Data with third parties in the event of any reorganisation, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, so that any potential acquirer(s) may continue operating the Platform. Where that is the case, we will ensure that any such recipient(s) continue to use your Personal Data in accordance with this Privacy Policy.

Data transfers

We may transfer your Personal Data to jurisdictions outside of the country in which you are located that may not be deemed to provide the same level of data protection as your home country, as necessary for the purposes set out in this Privacy Policy. We will always ensure that any such cross-border transfers of your Personal Data comply with applicable requirements.

We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost or altered, or used or accessed in an unauthorised way.

We limit access to your Personal Data to those employees and other staff who have a business need to have such access. All such persons are subject to a contractual duty of confidentiality.

We have put in place procedures to deal with any actual or suspected Personal Data breach. In the event of any such breach, we have systems in place to mitigate any impact to your privacy and to work with relevant regulators.

We will only retain your Personal Data for as long as we reasonably need to use it for the purposes set out in this Privacy Policy, unless a longer retention period is required by applicable law (for example, for regulatory purposes).

Under some circumstances, we may anonymise your Personal Data so that it can no longer be associated with you. We may retain such anonymised data indefinitely.

Our data retention policies are reviewed at regular intervals and comply with all applicable requirements.

Your rights

Under some circumstances, you may have certain rights in relation to your Personal Data. For example, you may have the right to:

• Request access to your Personal Data. This allows you to receive a copy of the Personal Data we hold about you, and to check that we are lawfully processing it.

• Request the correction of your Personal Data. This allows you to ask for any incomplete or inaccurate information we hold about you to be corrected.

• Request the erasure of your Personal Data. This allows you to ask us to delete or remove your Personal Data from our systems where there is no good reason for us to continue processing it.

• Object to the processing of your Personal Data. This allows you to object to our processing of your Personal Data for a specific purpose (for example, for marketing purposes).

• Request the transfer of your Personal Data.  This allows you to request the transfer of your Personal Data in a structured, commonly-used, machine-readable format, either to you or to a third party designated by you.

• Withdraw your Consent. This right only exists where we are relying on your Consent to process your Personal Data. If you withdraw your Consent, we may not be able to provide you with access to the certain features of our Platform. We will advise you if this is the case at the time you withdraw your Consent.

Please note that not all of the rights listed above may be available to you, and some rights may only be exercisable in specific circumstances.

How to exercise your rights

If you want to exercise any of the rights described above, please contact us.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that your Personal Data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within one month of receipt. Occasionally, it may take us longer than a month if your request is particularly complex or if you have made a number of requests. In this case, we will notify you and keep you updated.

Although we will typically not charge a fee for exercising your rights described above, we reserve the right to charge a reasonable fee in some circumstances (for example, if your request is unreasonable or if you submit an excessive number of requests).

Complaints

If you would like to make a complaint regarding this Privacy Policy or our practices in relation to your Personal Data, please contact us. We will reply to your complaint as soon as we can.

If you are unsatisfied with our response to any issue that you raise with us, you may have the right to submit a complaint to the data protection authority in your jurisdiction.

You can ask us to stop sending you marketing messages at any time by following the ‘Unsubscribe’ link included at the bottom of any marketing email you receive from us.

This Platform is not intended to be used by minors, and we do not actively monitor the age of our users.

However, if you become aware that a minor has been using the Platform in breach of this restriction, please contact us if you would like us to remove their Personal Data from our systems.

This Platform may include links to third party websites and applications. Clicking on those links will take you off-Platform and may allow third parties to collect or share your Personal Data. We do not control these third-party websites and applications and are not responsible for their privacy practices. When you leave our Platform, we encourage you to read the privacy policy of every website and application you visit.

We reserve the right to update this Privacy Policy at any time, with or without notice to you.

Where that is the case, we will update this page to display the revised Privacy Policy and may also under certain circumstances notify you (for example, by email).

Any revisions to this Privacy Policy will be effective immediately once posted on this page.