Privacy Policy

Privacy Policy — Roots Shop

Effective Date: 9 March 2026
Last Updated: 9 March 2026

1. Introduction

Welcome to Roots Shop ("we", "us", or "our"). Roots Shop is an online multi-vendor marketplace operated in the United Arab Emirates. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.roots-shop.com and make purchases or register as a seller on our platform.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the site.

2. Information We Collect

We collect information you provide directly to us and information collected automatically when you use our platform.

Information You Provide:

Account Registration: Name, username, email address, phone number, and password when you create a buyer or seller account.
Purchases: Billing address, delivery address, and payment information (processed securely through our payment partners; we do not store full card details).
Seller Onboarding: Business name, trade licence number, VAT registration number (if applicable), bank account details for payouts, and identity verification documents.
Communications: Messages you send to us via the contact form, support email, or live chat.
Reviews and Ratings: Content you submit as product reviews or seller ratings.

Information Collected Automatically:

Usage Data: Pages visited, search queries, products viewed, time spent on pages, and click patterns.
Device Information: IP address, browser type and version, operating system, and device identifiers.
Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies as described in our Cookies Policy.
Location Data: General geographic location inferred from your IP address. We do not collect precise GPS location unless you explicitly grant permission.

3. How We Use Your Information

We use the information we collect for the following purposes:

Purpose	Legal Basis (UAE PDPL)
Processing orders and managing transactions	Performance of contract
Creating and managing your account	Performance of contract
Communicating order updates, shipping notifications, and support	Performance of contract
Sending promotional emails and offers (with your consent)	Consent
Improving our platform, products, and services	Legitimate interest
Detecting and preventing fraud and abuse	Legitimate interest / Legal obligation
Complying with UAE legal and regulatory requirements	Legal obligation
Personalising your shopping experience	Legitimate interest / Consent

4. Sharing Your Information

We do not sell your personal information. We may share your information with:

Sellers: When you place an order, we share your delivery address and contact information with the relevant seller to fulfil your order.
Logistics Partners: We share your delivery address with the seller's chosen logistics provider to arrange delivery. The choice of logistics provider is at each seller's discretion and is not disclosed to buyers.
Payment Processors: We share transaction data with Visa, Mastercard, and Tabby to process payments securely.
Service Providers: We may share data with trusted third-party service providers who assist us in operating the platform (e.g., email delivery, analytics, cloud hosting), subject to confidentiality agreements.
Legal Authorities: We may disclose your information if required by UAE law, court order, or government authority.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Cookies

We use cookies and similar tracking technologies to enhance your experience on our platform. You can control cookie preferences through your browser settings. For full details, please refer to our Cookies Policy.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services, comply with our legal obligations, resolve disputes, and enforce our agreements. When you close your account, we will delete or anonymise your personal data within 90 days, except where retention is required by law.

7. Data Security

We implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for data in transit, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Under applicable UAE data protection law, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete personal data.
Delete your personal data, subject to legal retention requirements.
Withdraw consent for processing based on consent at any time.
Object to processing based on legitimate interest.
Data portability — receive a copy of your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at sales@roots-shop.com.

9. Children's Privacy

Our platform is not directed to children under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete it.

10. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11. Returns and Exchanges

Our return and exchange policy allows buyers to return eligible products within 14 days of delivery. For full details on eligible products, conditions, and the return process, please refer to our Terms & Conditions.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated effective date and, where appropriate, by sending you an email notification. Your continued use of the platform after changes are posted constitutes your acceptance of the updated policy.