Privacy Policy

1. Introduction

TailorMarket.ae ("we", "us", "our") is a brand of Stitch Capital L.L.C-FZ (Licence Number 2535940.01), registered in the Meydan Free Zone, Dubai, United Arab Emirates. We connect customers with professional tailors through our online marketplace.

This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations.

2. Data Controller

The data controller responsible for your personal data is:

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Account Information

• Full name, email address, phone number
• Gender (optional)
• Profile photo (optional)
• Account credentials (password stored in hashed form only)

3.2 Tailor-Specific Data

• Business name and business license
• Professional qualifications and specialties
• Business location and delivery zones
• Portfolio images

3.3 Transaction Data

• Order details, measurements, and specifications
• Payment information (processed by Stripe; we do not store full card details)
• Delivery addresses and appointment schedules

3.4 Communication Data

• Messages exchanged through the platform
• Reviews and ratings
• Dispute-related communications

3.5 Technical Data

• IP address, browser type, device information
• Usage logs and access timestamps
• Cookies and similar tracking technologies

4. Legal Basis for Processing

Under the PDPL, we process your personal data based on:

• Consent (Art. 5 PDPL): You provide explicit consent when creating your account and using our services.
• Contractual necessity (Art. 5 PDPL): Processing is necessary to perform our contract with you (e.g., processing orders, facilitating payments).
• Legitimate interest (Art. 5 PDPL): For fraud prevention, platform security, and service improvement.
• Legal obligation: Where required by UAE law or regulation.

5. How We Use Your Data

• To create and manage your account
• To facilitate orders between customers and tailors
• To process payments via our payment provider (Stripe)
• To verify tailor business credentials
• To send notifications about orders, messages, and appointments
• To provide AI-assisted features (using Google Gemini for style recommendations)
• To resolve disputes and provide customer support
• To improve our platform through analytics
• To comply with legal obligations

6. Data Sharing

We may share your personal data with:

• Other users: Your name and relevant details are shared with the other party to a transaction (customer-tailor).
• Payment processor: Stripe processes payment data under their own privacy policy.
• AI service provider: Limited order data may be processed by Google (Gemini AI) for recommendation features.
• Authorities: Where required by UAE law or lawful court order.

We do not sell your personal data to third parties.

7. Cross-Border Data Transfers

Some of our service providers (e.g., Stripe, Google) may process data outside the UAE. In accordance with Art. 22 of the PDPL, we ensure that any cross-border transfer is subject to adequate data protection safeguards as required by the UAE Data Office.

8. Data Retention

We retain your personal data for:

• Account data: For the duration of your account plus 2 years after deletion.
• Transaction data: 5 years from completion (as required by UAE commercial law).
• Communication data: 2 years from the date of the message.
• Technical logs: 12 months.

Beta note: During the beta phase, all data may be reset or deleted when transitioning to the production environment.

9. Your Rights Under the PDPL

You have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data.
• Right to rectification: Correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your data (subject to legal retention obligations).
• Right to restrict processing: Limit how your data is used.
• Right to data portability: Receive your data in a structured format.
• Right to withdraw consent: Withdraw your consent at any time.
• Right to object: Object to processing based on legitimate interest.

To exercise any of these rights, contact us at info@tailormarket.ae. We will respond within 14 days as required by the PDPL.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/SSL)
• Hashed password storage (bcrypt)
• JWT-based authentication with token expiry
• Role-based access control
• Escrow-based payment processing

11. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies during the beta phase.

12. Children's Privacy

TailorMarket is not intended for users under the age of 18. We do not knowingly collect data from minors. If we discover such data has been collected, it will be deleted promptly.

13. Changes to This Policy

We may update this Privacy Policy as we transition from beta to production and as UAE data protection regulations evolve. Material changes will be communicated via email or in-app notification.

14. Contact & Complaints

For questions or complaints about this policy, contact us at: