Privacy Policy

This Privacy Policy was last updated on 01 May 2026. 

This Privacy Policy outlines how VroomMart (“the Company”) collects, uses, maintains, and discloses information collected from users of the www.vroommart.com website (the “Website”). This policy applies to the Website and all products and services offered by the Company.

The Company (‘we’, ‘us’ or ‘our’) is a trading name of VroomMart, a limited liability company registered under the laws of Sharjah Publishing City, Sharjah, United Arab Emirates (UAE) holding Business License Number 4201608.01.

Any reference to “you”, “your” or “user” in this policy is a reference to any of our customers, potential customers or people visiting our Website as the context requires unless otherwise stated.

The user undertakes when using this Website, and in particular, when purchasing automotive parts, to act in accordance with all the Company’s Policies, third parties’ terms and conditions, if any, applicable legal regulations, and other rules to which the user is obligated to adhere.

1.    Collection of Personal Information

The User agrees the Company may collect Personal Identification Information (the “Personal Information”) from users in various ways, including but not limited to when users visit the Website, register on the Website, place an order, subscribe to the newsletter, respond to a survey, fill out a form, and in connection with other activities, services, features, or resources we make available on the Website. Users may be asked for, as appropriate, name, email address, mailing address, phone number, and other relevant information.
Users may visit the Website anonymously. The Company will collect Personal Information from users only if they voluntarily submit such information to us. Users can always refuse to supply Personal Information, except that it may prevent them from engaging in certain Website-related activities.

We may collect the following information from you:

1. Identity data including salutation, first name, middle name, last name, date of birth, gender, account number or similar identifier(s);
2. Contact data including residential address, billing address, email address and telephone number;
3. Profile data, including your username and password;
4. Financial data, from payment service providers, bank account details and payment card details.

We process your information for various purposes contingent upon your engagement with our services. These purposes encompass facilitating the creation and authentication of accounts, as well as detecting and addressing fraudulent activities. Additionally, we utilize your information for soliciting feedback and communicating with you concerning the utilization of our services. Processing of your information may also be imperative for safeguarding the vital interests of individuals, particularly in preventing harm.

We undertake the processing of your personal data solely when deemed necessary and when a valid legal basis exists for such action. These legal bases encompass your explicit consent, our adherence to applicable laws, the provision of services, fulfilment of contractual obligations, safeguarding your rights, and pursuit of our legitimate business interests as listed in our Terms & Conditions. Furthermore, we engage in data processing activities to safeguard the company against instances of fraud. Therefore, we process your information based on the following legal grounds:

1. Legitimate Interest: We may process your Personal Information based on our legitimate interests, which include but are not limited to:
   I.     Providing and improving our services;
   II.    Enhancing the user experience on our platform;
   III.    Preventing fraud and ensuring the security of our Website, Platform and services;
   IV.    Conducting internal research and analysis to better understand user needs and preferences;
   V.    Marketing our products and services, subject to your right to object.
   
   
2. Consent: We process your Personal Information contingent upon your consent. You have the right to withdraw your consent at any time by contacting us or adjusting your preferences in your account settings, although this may affect the availability or functionality of certain features or services. By reading and accepting the policies provided on the Website, the user provides it’s express consent to this Policy.
   
   
3. Legal Obligation: We process your Personal Information to comply with the legal obligations to which we are subject. This includes obligations imposed by relevant laws, regulations, or court orders, as well as requests from law enforcement or government authorities. We may also use your Personal Information to establish, exercise, or defend legal claims in court or other legal proceedings.

2.    Collection of Non-Personal Information

The Company may collect Non-Personal Identification Information (the “Non-Personal Information”) about users whenever they interact with the Website. Non-Personal Information may include:

1. Technical data including application software, internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our websites or applications;
2. The browser name, the type of computer, and technical information about users’ means of connection to the Website, such as the operating system and the Internet service providers utilized;
3. Usage data, including information about how you use our Website, products and services;
4. Trading performance, transaction data, notes, your interests, preferences, customer feedback, survey responses, internet chats, and telephone recordings; and
5. Marketing and communications data, including your preferences in receiving marketing from us and our third parties, and your communication preferences.

We collect your Non-Personal Information for safeguarding and operational maintenance of our Services, as well as for internal analysis and reporting purposes.
 
3.    Retention of Personal Information

We retain your Personal Information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine the retention periods include:

1. The length of time we have an ongoing relationship with you and provide the services to you;
2. Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them);
3. Whether retention is advisable considering our legal position (such as in regard to applicable laws of limitations, litigation, or regulatory investigations).

Once your Personal Information is no longer necessary for the purposes for which it was collected, we will securely delete or anonymize it in accordance with our data retention policies and applicable laws.

4.    Correction/Modification to Personal Information

To review or amend your account particulars, or to effectuate the closure of your account, please adhere to the following procedures:

1. Log in to your account settings and rectify your user account information;
2. Furthermore, you retain the option to communicate with us via provided contact information in this Privacy Policy.

The Company retains the right to verify the modified or updated data by you on the Website. In the event that the Company is not satisfied with the updated data or it has reason to believe that you are presenting false or inaccurate data, then the Company may, at its discretion, decline the request to modify the data or disable you from using the services provided on the Website by the Company.

5.    Record Keeping

We also keep records of your trading patterns, including but not limited to:

1. suspicious transactions and orders;
2. preference for certain types of products and services;
3. your financial transactions, the products you purchase from us; and
4. historical data about the purchases you have made, including the amount paid.

6.    Web Browser Cookies

This Website may use cookies “cookies” to enhance user experience by collecting standard log information to monitor customer traffic patterns. The information gathered, typically anonymous, includes data such as IP addresses, browser types, and device information. Cookies are placed on users’ web browsers for record-keeping purposes and to track relevant information. Users have the option to configure their web browser settings to refuse cookies or receive alerts about their transmission. However, it is important to note that disabling cookies may result in some parts of the Website not functioning properly. Continued use of the Website implies user consent to the described cookie usage.

Collect, Use, Share, Processing and Disclosure of Personal Identification and Non-Personal Information

We collect Personal and Non-Personal Information as provided under Sections 1 and 2 of this Policy for the purposes of Know Your Customer “KYC” to verify the identity of the users on the Website.

We do not retain this information on our Platform. It is explicitly stored and processed by VroomMart on Microsoft Azure Cloud in strict accordance with its own privacy policy and applicable legal frameworks.

Credit card details of customers are securely stored by CCAvenue and are not accessible to VroomMart, with CVV information of cards neither stored nor processed by VroomMart or its partners at any time. We refrain from utilizing cookies, log files, or tracking technologies. Subsequently, we do not engage in the sharing, selling, or other forms of disclosure of your Personal Information to any third parties, except in the case of our trusted partner, CCAvenue, solely for the purpose of identity and credit card/debit card verification.

The Company may collect and use users’ Personal Information for the following other purposes:

1. The information you provide helps us respond to your customer service requests and support needs more efficiently.
   
   
2. We may use information in the aggregate to understand how our users as a group use the services and resources provided on the Website.
   
   
3. We may use the information users provide about themselves when placing an order only to provide service to that order. We do not share this information with third parties except to the extent necessary to provide the service including but not limited to the purpose of shipment processing and customs clearance. Such information may be shared with our shipping partners, including courier service providers such as DHL, solely for the purpose of facilitating shipment and customs clearance. Any information shared with such shipping partners shall thereafter be handled in accordance with their respective privacy policies.
   
4. We may use the email address and contact number to send user information and updates pertaining to their order. It may also be used to respond to their inquiries, questions, and/or other requests. If the user decides to opt-in to our mailing list, they will receive emails that may include company news, updates, related product or service information, etc. If at any time the user would like to unsubscribe from receiving future emails, we include detailed unsubscribe instructions at the bottom of each email.
   
5. The Company does not sell your Personal Information. The Company may however, share your Personal Information with non-affiliated service providers, futures exchanges, government agencies and courts for the following reasons:
   
   I. To review your account application (including credit and background checks) and provide you with access to the Company service and software;
   II. To effect, complete, administer and enforce any transactions you may perform through or with us, including the processing of orders and emailing statements;
   III.  As required by law or court order;
   IV. To perform reviews and audits of internal procedures;
   V.  In connection with mergers, acquisitions, restructuring, transfer or sale of all or a portion of our business;
    
   F.    The Company may also share your Personal Information with and amongst its affiliates in order to achieve the following:
   
   I.    To operate, research and improve our services and Websites;
   II.    To launch new products and/or services;
   III.    To display customized content and advertisements.
   
   We are committed to transparent data collection and processing practices. The information collected is used for specified purposes outlined in this Privacy Policy, and users are notified of any changes from time to time.
   We process personal data based on legal grounds such as consent, legitimate interests, legal obligations, and vital interests. Users can review the legal basis for processing the data. We also provide the users the option to opt-out as provided under Section 8 of this Privacy Policy.

8.    Cross-Border Data Transfer

We may transfer your Personal Information outside of the state in accordance with the provisions set forth in Federal Decree-Law No. 45/2021 on the Protection of Personal Data.

1. Transfer with adequate protection: Personal Information may be transferred outside the state if:
   
   I.    The receiving country or territory has legislation specifically addressing the protection of personal data, ensuring privacy, confidentiality, and the ability of data subjects to exercise their rights.
   II.    Additionally, transfers may occur if bilateral or multilateral agreements related to personal data protection exist between the state and the recipient countries.
   
   
2. Transfer without adequate protection: Subject to the exceptions outlined above, Personal data may be transferred outside the State in the following circumstances:
   
   I.    Contracts or agreements require entities in recipient countries lacking data protection laws to adhere to provisions ensuring data protection, overseen by competent authorities.
   II.    Transfer is based on the explicit consent of the data subject, provided it does not conflict with the security or public interest of the State.
   III.    Transfer is necessary to fulfill legal obligations or establish, exercise, or defend legal rights.
   IV.    Transfer is necessary for the performance of a contract between the data controller and the data subject, or between the data controller and a third party, for the benefit of the data subject.
   V.    Transfer is required for international judicial cooperation procedures.
   VI.    Transfer is necessary to protect the public interest.

9.    Data Protection and Security

The Company adopts appropriate data collection, storage, and processing practices and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your Personal Information, username, password, transaction information, and data stored on the Website.
 
The Company does not sell, trade, or rent users’ Personal Information to others. We may share generic aggregated demographic information not linked to any Personal Information regarding visitors and users with our business partners, trusted affiliates, and advertisers for the purposes outlined in this Policy.

10.    Opting Out

In the event that you wish to opt out of receiving our promotional and marketing emails, please click on the unsubscribe link given in our correspondence. You will then be removed from our mailing distribution lists. It is important to acknowledge that notwithstanding this opt-out, you may still receive non-marketing communications, including but not limited to service-related updates, account administration notifications, and responses to service requests.

11.    User’s Rights

The Users have the right to know the information as provided hereunder:

1. How the Company uses Your Personal Information;
2. The type of Personal Information collected and processed by the us;
3. Reasons and purpose for processing such Personal Information;
4. Decisions made based on Automated Processing, including Profiling;
5. Type of Information we share, sell or disclose to third-parties or government authorities, as applicable;
6. Sale, share, disclosure or Personal Information with third-parties whether inside and/or outside the state;
7. Controls and standards for the periods of storing and keeping the Personal Information;
8. Procedures for correcting, erasing or limiting the Processing and objection to the user’s Personal Information;
9. Protection measures for Cross-Border Processing made in accordance with Articles (22) and (23) of the Federal Decree- Law No. 45/2021 On the Protection of Personal Data;
10. Procedures to be taken in the event of a breach or infringement of the user’s Personal Information, especially if the breach or infringement poses a direct and serious threat to the privacy and confidentiality of the user’s Personal Information;
11. Right to restrict or stop processing of Personal Information; and
12. The process of filing complaints with the office.

However, some information may still be registered on our database for the purposes of prevention of fraud, investigations and problem resolution etc.

The users retain the right to raise a request to the Company for the deletion of your Personal Information provided to us for the purpose of the business. It is important to note that once you raise a request for deletion of your Personal Information and upon successful deletion of your Personal Information from the Website, You thereby cease to utilise the services and facilities provided on the Website to you.
 
12.    Breach of Data

The Company does not guarantee a breach of information security and Personal Information by illegal or unauthorized access, including copying, sending, distributing, exchanging, transmitting, circulating or processing data in a way that leads to disclosure thereof to third parties, or damage or alteration thereof during the processes of storage, transmission and/or processing.

In the event of any infringement or breach of the Personal Information of the user that may compromise the privacy, confidentiality, and security of such data, the Company is obligated to promptly report such infringement or breach to the appropriate authority, along with the results of the investigation, within the timeframe and according to the procedures and conditions stipulated in the Federal Decree-Law No. 45/2021 On the Protection of Personal Data.

Furthermore, in all cases where the infringement or breach may impact the privacy, confidentiality, and security of the user’s Personal Information, the Company must notify the user of the incident and provide details of the procedures undertaken, within the timeframe and according to the procedures and conditions set forth by the applicable Law including but not limited to recommendations for affected users to take steps to protect themselves from potential harm resulting from the breach, such as changing passwords or monitoring financial accounts for suspicious activity.

13.    Minors

We explicitly declare that we do not engage in the collection of any form of information, in any jurisdiction, from children/minors or individuals below the age of legal maturity as stipulated by their respective legislation. By using our Website, you certify that you are aged 18 or over, or that you are the parent/guardian of a minor utilizing our services with your authorization.

14.    Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy from time to time. Any changes to this Privacy Policy will be reflected by updating the revised version on the Website. The date of the last revision to this Privacy Policy will always be prominently indicated at the beginning of the document. Users are responsible for periodically reviewing the Privacy Policy to ascertain any alterations. In the event that such modifications result in additional methods of collecting or disclosing Personal Information, users may elect to opt out of such amendments by sending an email within 30 days from the publication of the revised Privacy Policy on the Website. Opting out of this Privacy Policy amendment may, at our sole discretion and with notice, lead to termination of user registration and participation in ongoing or future activities on the Website.

15.    Acceptance of This Policy

By using this Website, you give your consent to accept the terms of this Privacy Policy. If you do not agree to this Policy, please do not use our Website. Your continued use of the Website following the posting of changes to this Policy will be deemed your acceptance of those changes.

16.    Disclaimer

The Company acknowledges that while every effort is made to safeguard the privacy and security of user information, the Company shall not be held liable for any breach of data resulting from the technological use of third-party services. Users are advised to exercise caution and be aware that external factors beyond the Company’s control, such as the actions or vulnerabilities of third-party service providers, may impact the security of Personal Information. By using the Website, users agree that the Company is not responsible for any unauthorized access, disclosure, alteration, or destruction of Personal Information that may occur due to circumstances beyond its reasonable control, including but not limited to actions such as hacking, phishing etc. Users are encouraged to review and understand the privacy practices of third-party services and take appropriate measures to protect their information.
 
17.    Contact Us

If you have any questions about this Privacy Policy, the practices of this Website, or your dealings with this Website, please contact us at support@vroommart.com.

18.    Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of the UAE. In the event of any dispute, controversy, or claim arising out of or in connection with this Policy, including any question regarding its existence, validity, or termination, the user shall first notify the Company in writing, setting out the nature of the dispute. If the dispute is not resolved within thirty (30) days of such notice, the dispute shall be referred to and finally resolved by arbitration under the Arbitration Rules of the Dubai International Arbitration Centre (“DIAC”), which rules are deemed to be incorporated by reference into this clause. The number of arbitrators shall be three, the seat of arbitration shall be Dubai, and the language to be used in the arbitration shall be English.