Privacy Policy

Who we are

AL Faeq Auctions is a company in the United Arab Emirates, based in Ajman, that buys cars from their owners across the seven emirates.

This policy covers the alfaeqauctions.com website alone, and what you send us through it.

What we collect from you

We collect nothing about you until you send it yourself, apart from what the server records automatically to run the site.

• When you create an account: your name, your email address or mobile number, and a password stored encrypted, so we neither see it nor can retrieve it.
• When you request to sell your car: your name, mobile number, emirate and city, the car details — make, model, year, specification, mileage, paint condition and accident history — the price you are asking, and your notes.
• The photos of the car you attach to the request.
• When you contact us: your name, email address, mobile number, and the subject and text of your message.
• When you write a review: your name, mobile number, the car you sold, and your rating and review text.
• Usage data in the server logs: the IP address you visited from, your browser type, and the time of the visit.

What we never ask you for

We never ask through this website for your Emirates ID, your driving licence, any official document, or any bank or payment card details. The paperwork needed to transfer ownership is handled between you and our representative at completion, not through the website.

Why we collect it

Every piece of data has a purpose, and we do not use it for anything else.

• Valuing your car and scheduling its inspection.
• Contacting you about your request.
• Completing the purchase and transferring ownership.
• Replying to your message.
• Publishing your review on the customer reviews page if you send one.
• Protecting the site from misuse.
• What the law and our accounting obligations require of us.

Our legal basis

We rely on three bases, each in its own place:

• Your explicit consent, given when you submit any form, stored together with its timestamp and the version of this policy in force at that moment. You may withdraw it at any time, and withdrawal does not affect what happened before it.
• Performing what we agreed: what is needed to inspect your car, buy it and transfer its ownership.
• A legal or accounting obligation that requires us to keep a record of the transaction.

Cookies and analytics

We place one essential cookie on your browser, named afq_consent. It keeps your cookie choice for 12 months, and it works without consent because it stores the consent itself. Cookies strictly necessary to run the site, such as the one that keeps you signed in, also work without consent, because the service does not function without them.

Google's measurement and advertising tools, Google Analytics and Google Tag Manager, run before you consent in a cookieless mode: they read no cookie, write none and store no identifier, and they send Google anonymous signals carrying the page you open, your device and browser type, the IP address you visit from, your consent state and a random number that changes with every page and does not identify you, which Google uses to estimate visit counts statistically, not to track you. After you consent they run in full, each with its own consent: analytics, so we can see how pages are used, and advertising, so we can measure our ads and show you ads closer to your interests. The Meta Pixel does not run before you consent to advertising.

We never send these tools your name, mobile number or email. What they collect is what any measurement tool collects: the pages you open, your device and browser type, the IP address you visit from, and identifiers they keep in cookies under their own policies. None of them runs on the sign-in, account creation, password or account pages.

You can change your choice at any time from Cookie settings at the bottom of every page. If you withdraw your consent, Google's tools return to the cookieless mode, the Meta Pixel stops at once, and we delete the cookies they placed under our site.

The other third party is the Google map on the contact page. Opening that page shows Google the IP address you are visiting from, and Google may set its own cookies under its policy, not ours.

Who we share it with

We do not sell your data, rent it, or trade in it. It leaves us only in these cases:

• The inspector who visits you, who sees what he needs for the appointment and the inspection.
• The hosting provider that runs the site servers on our behalf.
• The email provider that delivers our messages to you.
• The provider that protects and delivers the site, Cloudflare, through which your visit passes before it reaches our servers.
• Google, for the anonymous signals before your consent and for visit data after it, and Meta for visit data only after your consent, as set out in section 6.
• The competent traffic departments, when ownership of the car is transferred.
• The authorities, where the law requires it of us.

Storage outside the country

Your data is held on our hosting provider servers outside the UAE, in Singapore, and its backups are held in India and on Google Drive.

Your visit passes through the Cloudflare network from its server nearest to you, which may be outside the UAE. Google processes the anonymous signals on its servers outside the UAE, and if you consent to analytics or advertising, Google and Meta process your visit data there as well.

We state this to you plainly because it is a transfer of your data out of the country, and you deserve to know it before you send it. We contract with these providers to protect your data to a standard no lower than this policy sets out.

How long we keep it

We keep your data no longer than needed, then anonymise it — we replace what identifies you with values that do not, and only the count remains for statistics.

• A request that was not completed: 12 months from its last activity, then anonymised.
• A completed request: 5 years, because our accounting obligations require it, then anonymised, leaving the financial record alone.
• Server logs: 90 days.
• The internal audit log: 5 years.

Your rights

Write to info@alfaeqauctions.com to exercise any of them, and we will respond within 30 days.

• To know what we hold about you and to see it.
• To correct anything in it that is wrong.
• To request its deletion, carried out within 30 days.
• To receive a copy of it in a machine-readable format and move it to another provider.
• To object to the processing of your data or to request that it be restricted.
• To withdraw your consent.
• To complain to the competent data protection authority in the country.

How we protect it

The connection to the site is encrypted, passwords are stored encrypted and cannot be read, access to data is limited to those who need it for their work, and every sensitive action is written to the audit log.

No system is absolutely secure. If a breach affects your data we will notify you and the competent authority within 72 hours, and tell you what happened, which data it touched, what we did, and what we advise you to do.

The service is for those aged 18 and over

We do not offer the service to anyone under 18, and we do not knowingly collect their data. If a child sends us data we delete it as soon as we know.

If we change this policy

We publish the new version on this page with its date. If the change is material in what we collect or why, we will ask for your consent again before it applies to you.

Contact us

For any question about your privacy, or to exercise any of your rights, write to info@alfaeqauctions.com.