Privacy Policy
Last Updated: January 2025
Important Notice: By registering, subscribing to any plan, or using the VendorPot platform in any capacity, you (the user) and your company acknowledge, agree to, and give full consent to all policies established by VendorPot, including but not limited to these Terms of Service, Privacy Policy, Fair Competition Policy, Lead Guarantee Policy, and Refund Policy. Your continued use of the platform constitutes ongoing acceptance of these terms.
Regulatory Compliance
VendorPot is fully compliant with international and GCC data protection laws, including:
- GDPR - General Data Protection Regulation (EU)
- UAE PDPL - UAE Personal Data Protection Law
- Saudi PDPL - Saudi Personal Data Protection Law
- Qatar PDPL - Qatar Personal Data Privacy Protection Law
- Bahrain PDPL - Bahrain Personal Data Protection Law
- DPDP Act - Digital Personal Data Protection Act (India)
Data Controller Information
Data Controller: VendorPot Limited
Address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.
Email: privacy@vendorpot.com
Data Protection Officer: dpo@vendorpot.com
What Data We Collect
Personal Information:
- Full name and email address
- Phone number and job title
- Company name and location
- IP address and device data
Business Data:
- Company information and verification details
- Product and service information
- Transaction and inquiry history
- Communication and messaging data
Technical Data:
- Cookies and tracking technologies
- Usage logs and analytics data
- Browser type and operating system
Legal Basis for Processing
We process your personal data based on:
- Consent: When you register and voluntarily use the platform
- Contract Performance: To provide the services you requested
- Legal Obligation: To comply with applicable laws and regulations
- Legitimate Interests: To improve our services and prevent fraud
How We Use Your Data
- Facilitate connections between vendors and buyers
- Process transactions and manage accounts
- Send important notifications and updates
- Improve user experience and platform functionality
- Conduct analytics and market research
- Prevent fraud and ensure security
- Comply with legal and regulatory requirements
Data Sharing and Disclosure
We never sell your personal data. We may share data with:
- Other Platform Parties: Sharing contact information when making inquiries or lead requests
- Service Providers: Cloud infrastructure, analytics, and payment processors
- Legal Authorities: When legally required or to protect our rights
- Business Transactions: In case of merger, acquisition, or asset sale
International Data Transfers:
Your data may be transferred to servers located outside your country. We ensure all transfers meet appropriate data protection standards through EU-approved Standard Contractual Clauses and other safeguards.
Your Data Rights
You have the following rights regarding your personal data:
1. Right to Access
Request a copy of your personal data we hold
2. Right to Rectification
Correct inaccurate or incomplete data
3. Right to Erasure ('Right to be Forgotten')
Request deletion of your personal data under certain circumstances
4. Right to Data Portability
Receive your data in a structured, commonly used, and machine-readable format
5. Right to Restriction of Processing
Restrict processing of your personal data under certain circumstances
6. Right to Object
Object to processing of your data for direct marketing or legitimate interests
7. Right to Withdraw Consent
Withdraw your consent at any time (where processing is based on consent)
8. Right Not to be Subject to Automated Decision-Making
Object to decisions based solely on automated processing
Exercising Your Rights:
To exercise any of these rights, please contact us at: privacy@vendorpot.com
We will respond to your request within 30 days (or the timeframe required by local law).
Data Retention
We retain your personal data for as long as necessary to:
- Provide our services and maintain your account
- Comply with legal and regulatory obligations
- Resolve disputes and enforce our agreements
- Prevent fraud and maintain security
Retention Periods:
- Active accounts: Duration of active account
- Closed accounts: Up to 7 years for tax and accounting compliance
- Marketing data: Until consent withdrawn or 2 years of inactivity
- Security logs: Up to 5 years
Data Security
We implement appropriate technical and organizational security measures to protect your data:
- Encryption in transit and at rest (TLS/SSL, AES-256)
- Access controls and multi-factor authentication
- Regular security audits and vulnerability assessments
- Employee training on data protection
- Secure data backups and disaster recovery
- Network monitoring and intrusion detection systems
Data Breach Notification
In the event of a personal data breach likely to result in risks to your rights and freedoms, we will:
- Notify the relevant supervisory authority within 72 hours of becoming aware of the breach
- Inform affected individuals without undue delay
- Document the breach and our response
- Take steps to mitigate potential harm
Cookies and Tracking
We use cookies and similar tracking technologies to:
- Maintain your session and preferences
- Understand how you use the platform
- Improve performance and site functionality
- Provide personalized content and recommendations
You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.
Children's Privacy
VendorPot is a B2B platform designed for commercial use. We do not knowingly collect personal information from individuals under 18 years of age. If we learn that we have inadvertently collected data from a minor, we will promptly delete it.
Changes to Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the 'Last Updated' date. We will also send email notification for significant changes. Your continued use of the platform after such changes constitutes your acceptance of the updated policy.
Your Right to Lodge a Complaint
If you believe our processing of your personal data violates data protection laws, you have the right to lodge a complaint with the relevant supervisory authority:
- UAE: UAE Data Office - tdra.gov.ae
- Saudi Arabia: Saudi Data & AI Authority (SDAIA) - sdaia.gov.sa
- Qatar: Ministry of Transport and Communications - motc.gov.qa
- EU/EEA: Your local data protection authority
Contact Information
For any questions or concerns about this Privacy Policy or our data practices, please contact us:
Privacy Team - VendorPot
Email: privacy@vendorpot.com
Data Protection Officer: dpo@vendorpot.com
Address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.
Phone: +971 4 XXX XXXX
We will respond to your inquiries within 30 days of receipt.