Privacy policy

Last updated: 3 October 2026

1. Who we are

The EXVIN platform is operated by EXVIN PORTAL – FZCO, located at IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates.

This policy explains how personal data is collected, used, shared and protected when you use the exvin.app website, the EXVIN app and related services.

For privacy requests and questions, contact: info@exvin.app

2. The data we collect

Depending on the services you use, we may collect:

• Account and contact data: name, email address, phone number, and billing and delivery addresses.
• Order data: products ordered, payments, shipping, returns and refunds.
• Vehicle data: make, model, year, VIN and part numbers, when you provide them to search or to check compatibility.
• Communication data: the enquiries, correspondence and attachments you send to customer service.
• Technical data: IP address, device and browser type, usage and error logs, and cookies.
• The marketing preferences and consents you choose to give.

Not all of this data is required for every service. When we collect it, we explain what is needed to provide the service and what you may give optionally.

3. Why we use your data

We use data only as far as needed to:

• Create and manage your account.
• Show products, search for parts and check their compatibility with the vehicle.
• Process orders, payments, delivery, returns and refunds.
• Provide support and handle complaints.
• Protect accounts and the platform and detect fraud.
• Analyse and improve the performance of our services, in line with the applicable legal requirements.
• Meet our legal and accounting obligations.
• Send marketing messages when we have the required consent.

4. Legal basis for processing

We process data on the legal basis that fits each purpose, including consent, the need to perform a contract or to take steps at your request before entering into one, compliance with a legal obligation, or other cases permitted by the applicable legislation.

When processing is based on your consent, you can withdraw it. Withdrawal does not affect the lawfulness of processing carried out before it.

5. Who we share data with

Depending on the service, we may share the necessary data with:

• Suppliers and sellers, to fulfil orders or answer product questions.
• Shipping companies, to deliver orders and handle returns.
• Payment service providers, to process payments and refunds.
• Hosting, technical support, communication and analytics service providers.
• Vehicle data and parts compatibility service providers, when these services are used.
• Advisers and the competent authorities, when the law requires it.

We define the data each party needs and the purpose of sharing it, and apply the appropriate contractual and security requirements according to its role. Some parties, such as payment service providers, may be subject to their own privacy policies.

If ownership of the business changes or it is merged, the data needed to continue the services may be transferred, subject to the legal requirements and the protection of users' rights.

6. Payments

The payment data EXVIN processes depends on the payment method and the service provider used. The payment screen shows who processes the transaction.

Please read the payment service provider's privacy policy to learn how it handles your data.

7. Cookies and analytics

We use cookies and similar technologies to run the services, save preferences and understand how the platform is used.

Our cookie notice explains the types of these files, their purposes, their providers and how to manage them. We ask for consent where the law requires it, and you can change your choices or withdraw consent.

Disabling the necessary cookies may stop some platform features from working.

8. Storage and transfer outside the UAE

Data may be processed inside or outside the United Arab Emirates, depending on where the service providers we use are located.

When data is transferred outside the country, we follow the applicable legal conditions and safeguards. You can contact us to ask about the recipients and the transfer arrangements for your data.

9. How long we keep data

We keep data for as long as needed for the purposes it was collected for, taking into account legal and accounting requirements and the handling of disputes.

The period depends on the type of data and its purpose. When it is no longer needed, we delete it or make it anonymous, following our approved retention and deletion procedures.

Deleting an account does not necessarily delete all order and invoice records immediately, where the law requires them to be kept.

10. Your rights and account deletion requests

Subject to the applicable law, its conditions and exceptions, you can ask for:

• Information about how your data is processed, and access to it.
• Correction of inaccurate data.
• Erasure of data or restriction of its processing.
• To object to processing where the law allows it.
• Data portability, where this right applies.
• To withdraw consent and stop marketing messages.

Requests, including account deletion requests, can be sent to info@exvin.app.

We may ask for suitable information to verify your identity. If a request cannot be carried out fully or partly because of a legal requirement, we explain why, and we reply within the periods required by law.

11. Marketing messages

We keep messages needed for the service, such as order and delivery confirmations, separate from marketing messages.

You can unsubscribe from marketing through the link in the message or by contacting us. Unsubscribing from marketing does not stop the notices needed to manage your account or fulfil your orders.

12. Data protection

We apply appropriate technical and organisational measures to protect data against unauthorised access, use or disclosure, and against loss or alteration.

No system can be guaranteed to be completely secure. If a data incident occurs, we take the actions and make the notifications required by the applicable legislation.

13. External links

The platform may include links to external services and websites that have their own privacy policies. We recommend reading them before giving them your data.

14. Policy updates and complaints

We update this policy when our services, data processing practices or legal requirements change, and we show the date of the update. We give additional notice or ask for new consent when the law requires it.

For any privacy complaint, contact us at info@exvin.app. Contacting us does not affect your right to complain to the competent supervisory authority under the applicable law.