Privacy Policy

1. Who we are

SUQQ is an online marketplace serving the United Arab Emirates. We operate the storefront, and independent sellers list and fulfil most of the products on it.

• Registered name: Asilco General Trading LLC
• Registered address: Office 1314, Al Manara Tower, Business Bay, Dubai, United Arab Emirates

For anything in this policy, write to support@suqq.com.

2. What we collect

When you create an account. Your name, email address, and a phone number if you give one. Your password is never stored — we keep a one-way hash of it, so nobody at SUQQ can read it or recover it for you.

When you verify your email. A six-digit code is sent to your address and stored only as a hash, for five minutes. We record the date you completed verification.

When you save an address. The recipient name, phone number, address lines, city, emirate and any delivery instructions you write.

Your precise location — only if you choose to share it. At checkout you can tap “Share location”, which asks your browser or phone for GPS coordinates. UAE street addresses rarely include a building number, so this is what lets a courier find your door instead of calling from the street. It is never taken without that tap, declining does not stop you ordering, and it is not collected in the background at any other time. If you use “Use my current location” in the header to set your delivery emirate, the coordinates are turned into an emirate name and immediately discarded — that one is not stored at all.

When you order. What you bought, what you paid, the payment method you chose, the delivery address, and your delivery pin if you shared one. Returns, refunds, reviews you write, coupons you redeem and any wallet balance are recorded against your account.

Security and abuse prevention. Failed sign-in attempts and your IP address, kept so we can throttle password guessing and code requests. A log of significant account actions — a password change, a role change — so a support question about “who did this?” has an answer.

Technical. A signed session cookie that keeps you signed in, a cookie recording the emirate you selected, and your light/dark preference. Your cart, wishlist and comparison list live in your own browser’s storage, not on our servers, until you check out.

3. What we do not do

• No advertising or analytics trackers. There is no Google Analytics, no Meta pixel, no session-recording tool and no third-party advertising script anywhere on this site.
• We do not sell your data, or share it with advertisers or data brokers.
• We do not buy or import mailing lists. An address reaches us only when a person types it into our own sign-up or checkout.
• We do not store card numbers. No card is held on file. You type your card details on a payment page run by Network International (see section 5), and they never reach our servers.

4. Why we use it

• To create and secure your account, and to prove your email address is really yours.
• To take, fulfil and deliver your orders, and to handle returns and refunds.
• To issue VAT invoices, which UAE tax law requires us to keep.
• To answer your support requests.
• To detect fraud and abuse, and to keep the site standing up.
• To send marketing — only if you switch it on. See your notification settings.

5. Who else sees it

Sellers. When you order, the seller fulfilling it receives what they need to pack and dispatch it: your name, delivery address and phone number.

Couriers. The delivery company receives your name, address, phone number and — if you shared one — your delivery pin, so the driver can reach you.

Network International (N-Genius). When you pay by card, you enter your card details on their secure payment page, not ours. They receive those details, the amount and our order reference, and they run the fraud and 3-D Secure checks your bank requires. We receive only whether the payment went through.

Amazon Web Services. Our servers, database and images run on AWS. Our infrastructure is hosted in the Mumbai (ap-south-1) region, which means your data is stored and processed in India, not in the UAE. We consider this a material fact rather than a footnote.

Resend. Sends the emails we send you — order updates, sign-in codes and, if you switch them on, offers. It receives your email address and the content of each message, and sends from its Tokyo (ap-northeast-1) region.

Zoho. Hosts our support mailbox, so anything you email to us is held there.

Google or Apple. Only if you choose to sign in with them, and only to confirm the address you are signing in with.

Authorities. Where UAE law requires it, or to establish or defend a legal claim.

That is the complete list. There is no one else.

6. Marketing and how to stop it

Order updates, delivery notices, refund confirmations and security messages are part of the service — you receive them whatever your settings say, because you need them.

Marketing is separate and off unless you turn it on. “Deals and price drops” and “weekly newsletter” are two independent choices, so agreeing to one does not sign you up to the other. Every marketing message carries an unsubscribe link, and the switches are at Account › Settings. Withdrawing consent stops that mail before it is queued, not merely before it is sent.

7. How long we keep it

• Order records and VAT invoices: retained for the period UAE tax law requires, even if you later close your account.
• Account details: until you ask us to close the account.
• One-time codes: five minutes, then they are dead whether used or not.
• Failed sign-in records: cleared as soon as you sign in successfully.

8. Your choices

UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data gives you rights over what we hold. In our own words, and then the names the law uses for them:

• See what we hold about you and why — access and information;
• Correct anything wrong — rectification. Your name, phone and language are editable yourself at Settings;
• Delete your account, subject to records we are legally required to keep — erasure;
• Ask us to pause or stop a particular use of your data — restriction and objection;
• Stop marketing at any time — withdrawing consent. You can also do this yourself with the switches above, and it does not affect anything sent before you did;
• Complain — to us first, and to the UAE Data Office if we have not put it right.

Write to support@suqq.com. We will ask you to confirm it is you before acting on a request about an account, for the obvious reason.

9. How we protect it

Traffic to the site is encrypted in transit. Passwords are stored as salted one-way hashes, never as text. One-time codes are stored hashed, expire in five minutes and die after five wrong attempts. Session cookies are signed, marked HttpOnly so page scripts cannot read them, and re-checked by the server on every request that matters. Changing your password signs out every other device.

No system is perfect. If a breach affects your data, we will tell you and the relevant authority.

10. Children

SUQQ is not intended for children under 18. We do not knowingly collect their data; if you believe a child has created an account, tell us and we will remove it.

11. Links to other sites

Some links take you off SUQQ — to a payment page, a courier’s tracking site, or a seller’s own storefront. Those are run by other companies under their own privacy policies, which we do not control. Once you are there, their rules apply, so it is worth reading them before handing over anything.

12. Changes to this policy

When this changes in substance we update the date at the top. If a change materially affects how we use what we already hold, we will tell you before it takes effect.