Privacy Notice

BOUTEEK MARKETPLACE FOR E-TRANSACTION COMPLEX - L.L.C, registered with the Abu Dhabi Department of Economic Development under number CN-6176144, whose registered office is at UAE, Abu Dhabi, Al Danah, Dar Alsalam, Office #21, is responsible for the processing described in this notice, within the role stated for each service. Contact: (to be confirmed) and (to be confirmed). The notice covers platform visitors, waitlist applicants, founders, sellers and customers. A separate notice from the seller or the payment provider may apply where they process information for their own purposes.

Depending on use, we may collect account, contact and authentication data; business profiles, ideas and sales information provided voluntarily; website and social media links; product materials, prompts and files; AI outputs, saved context, scores, recommendations and the action history. Marketplace records may include addresses, orders, payment and settlement references and support communications. We do not ask for information that is not needed for the stated purpose.

Seller verification may involve collecting trade licence details and the documents needed to verify identity or eligibility to receive payments, within the limits required by the approved verification purposes. Technical information, such as device and browser type, security logs, cookies and platform usage events, may also be collected, in accordance with the Cookies and Tracking Notice.

Users must not provide personal data belonging to others without a legal basis or appropriate authorisation.

We use information to operate accounts, provide the requested assessments and tools, keep the service continuous, onboard sellers, fulfil orders, provide support and refunds, keep records, prevent misuse and meet our obligations. The approved record of processing sets out the legal basis and conditions for each activity. Consent is requested where required and is kept distinct from processing that is needed for a requested service or for a legal obligation.

Personal data is processed only on the basis of valid consent or in the cases where the legislation in force permits processing without consent, including cases relating to performing contracts, providing requested services or meeting legal obligations, where the relevant legal conditions are met. The legal bases for each processing activity are set out in Bouteek's approved records.

Optional marketing, non-essential tracking, case studies that identify data subjects and any additional use of data for research or for training AI models are subject to the appropriate disclosures, consents or legal bases according to the nature of the activity.

A data subject may withdraw consent where processing is based on it, without affecting the lawfulness of earlier processing or other obligations that the legislation allows to continue.

When you request an AI task, (to be confirmed) are sent to OpenAI, Microsoft Azure AI Document Intelligence and OpenRouter through Bouteek's AI Core service for the stated purposes, in (to be confirmed). We do not claim that processing stays within the country, that data is not retained or that it is not used for training until this has been verified for each route. The system explains what the saved context contains, how long it is kept, and the options to access, correct and delete it and their effects.

A founder's information and saved context are used to provide the requested services and keep their experience continuous, in line with the stated purposes. Using that information to analyse other founders' data, improve products or train AI models is a separate purpose that requires an appropriate legal basis and the necessary disclosures and choices before it is carried out.

Private business information or unpublished ideas and documents provided by a founder are not treated as public marketplace content, and may not be made available to other sellers or used for unauthorised purposes.

Bouteek explains to the user the nature of the saved data, how long it is kept, the means to access, correct and delete it, and the effect of deletion on the continuity of services and future recommendations, according to the functions actually available.

The system may produce readiness indicators and recommendations using the information provided and related activity. The system shows the main factors and the actual effect on access, ranking, pricing or anything else. Scores are indicative and may change. You can ask for inaccurate inputs to be corrected or for a decision to be reviewed through the Contact us page or support@bouteek.ae, within the applicable process and rights.

Bouteek explains, according to the nature of the service and the functions actually available, whether assessment or classification results are used for guidance only or have an actual effect on seller eligibility, access to services, ranking or pricing.

It also explains whether decisions with a significant effect are fully automated or include human review, and provides ways to ask for an explanation, correction or review in the cases required by the legislation in force.

We share information only as needed with the hosting, AI, payment, logistics, email, analytics and support providers actually used, authorised employees or contractors, the relevant seller to fulfil the order, and official authorities or advisers where justified. The roles, the safeguards for international transfers and the actual list of providers are set out before publication.

Sharing personal data with sellers, service providers and other parties is limited to the information needed to perform the authorised tasks. Founders' private ideas, confidential AI inputs or identity verification documents may not be shared with sellers merely because they take part in fulfilling orders.

We keep each category for the approved period or objective criterion, having regard to the service, obligations and disputes. Records required for orders, financial matters or claims are excepted to the extent lawful. We apply (to be confirmed) and limit access to authorised purposes, subject to the law and its exceptions. You can request access, correction, erasure, restriction of processing, objection, withdrawal of consent and related rights, and we verify identity proportionately.

Bouteek reviews data retention periods according to the nature of each category, the purpose of processing and the relevant legal and contractual requirements. A request for immediate deletion may not cover records that must be kept by law or for settling orders, financial transactions or legitimate claims.

Backups are subject to the approved retention, expiry and restoration procedures, and deletion requests are applied according to technical capabilities and the relevant legal obligations.

Bouteek provides an approved channel for receiving requests to exercise data subject rights, verifies the requester's identity to the extent needed and responds within the applicable legal time limits, explaining the reasons for any lawful refusal and the ways to complain to the competent authorities where applicable.

If Bouteek becomes aware of a personal data breach, it assesses the incident and takes appropriate measures to contain it, address the resulting risks and limit its effects.

Bouteek notifies affected data subjects and the competent authorities where required by the personal data protection legislation in force in the United Arab Emirates, and in accordance with the relevant legal conditions, deadlines and procedures.

Marketing preferences are available through the Settings page in your account, and transactional messages are kept separate. The service is intended for (to be confirmed), and the process for a minor or their guardian, if any, is set out. We publish material changes with an updated date and a notice procedure, and ask for new permission where required.