Privacy, Cookies & Data Protection

Last updated: July 2026

1. Who we are

This policy explains how [Registered legal entity name. E.g. Gold Souq FZ-LLC] ("Gold Souq", "we", "us"), of [Registered address, Emirate, United Arab Emirates], handles personal data through the Gold Souq website and services. For the purposes of data-protection law we are the "controller" of that data. If you have any question or wish to exercise a right, contact us at privacy@goldsouk.ae.

2. The data we collect

Gold Souq is designed to need very little personal data. We collect:

• Information you give us. Such as your name, email, phone and message when you use a contact, enquiry, review, newsletter or business-account form.
• Information collected automatically. Such as IP address, approximate region, device and browser type, pages viewed and referring links, via cookies and similar technologies.
• Account data. If you manage a business listing, the credentials and listing details you provide.

We do not intentionally collect payment card numbers or special-category data (such as health, religion or biometrics) through this website.

3. How and why we use it

We use personal data to respond to your enquiries, provide the newsletter or updates you request, operate and secure the Service, understand and improve how the site is used, manage business listings, and comply with law. For visitors in the EEA/UK, our legal bases are: your consent (e.g. newsletter, non-essential cookies); our legitimate interests in running and improving a safe, useful service; performance of a contract (e.g. a business account); and compliance with a legal obligation.

4. Cookies and similar technologies

Cookies are small files stored on your device. We use:

• Essential cookies that keep the site working and remember your preferences (for example, your language). These do not need consent.
• Analytics cookies that count visits and measure performance so we can improve the site.

On your first visit you can accept or decline non-essential cookies from the consent banner, and you can change or withdraw that choice at any time through the banner or your browser settings. Blocking some cookies may affect how the site works.

5. Sharing your data

We do not sell your personal data. We share it only with: service providers who process it on our behalf under contract (such as hosting, email delivery and analytics); a listed business, only when you choose to send an enquiry to it; and authorities or advisers where required by law or to protect our rights. Providers may only use the data to perform their service for us.

6. International transfers

We are based in the UAE and our providers may process data in other countries. Where personal data is transferred across borders, we take steps to ensure an appropriate level of protection, such as using providers under suitable contractual safeguards (including, for EEA/UK data, Standard Contractual Clauses where applicable).

7. Retention

We keep personal data only as long as needed for the purpose it was collected for, or as required by law. Enquiry messages are kept while we handle them and any follow-up; newsletter details until you unsubscribe; business-account data while the account is active. We then delete or anonymise it.

8. How we protect it

We apply reasonable technical and organisational measures to protect the limited data we hold, and we minimise what we collect by design. No website or transmission is perfectly secure, so we cannot guarantee absolute security, but we work to keep your data safe and to limit access to it.

9. Your rights (everyone)

Subject to applicable law, you may ask us to access, correct, update or delete the personal data we hold about you, object to or restrict certain processing, withdraw consent, or receive a copy of it. To exercise a right, email privacy@goldsouk.ae or use the contact page. We will respond within the time the law requires, and we will not charge you or treat you differently for exercising a right.

10. Data compliance, United Arab Emirates

We handle personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and its implementing regulations. This means we process data lawfully and fairly, for specified purposes, keep it accurate and secure, and respect the rights described above. Where a UAE free-zone data-protection regime applies to your dealings with us, we follow that regime as well.

11. If you are in the EEA or UK (GDPR)

If the EU or UK General Data Protection Regulation applies to you, you also have the rights to: access; rectification; erasure ("right to be forgotten"); restriction of processing; data portability; objection (including to processing based on legitimate interests and to direct marketing); and to withdraw consent at any time without affecting prior processing. We rely on the legal bases set out in section 3. You may lodge a complaint with your local supervisory authority, though we ask that you contact us first so we can help.

12. If you are in California (CCPA / CPRA)

If you are a California resident, you have the rights to know what personal information we collect and how we use and disclose it; to access and delete it; to correct inaccurate information; and to be free from discrimination for exercising these rights. We do NOT sell or share your personal information for cross-context behavioural advertising, so no "Do Not Sell or Share My Personal Information" action is required. But you may still contact us to confirm. You or an authorised agent may submit a request by emailing us; we will verify it before responding.

13. Children

The Service is intended for adults and is not directed at children. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

14. Third-party sites

The Service may link to third-party sites with their own privacy practices, which we do not control. Please review their policies.

15. Changes to this policy

If this policy changes, the revised version will be posted here with a new date above. Material changes will be made clear.

16. Contact us

For any privacy question, or to exercise a right, email privacy@goldsouk.ae or use the contact page. In case of any conflict between the English and Arabic versions of this policy, the English version prevails.