Privacy Policy

1. Who is responsible

The controller of your personal data is Phleet FZ-LLC, registered in the United Arab Emirates. For anything in this policy, contact privacy@phleetdeals.com.

We process personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and, where they apply to you, other data protection laws of your country.

2. What we collect

• Account data — your name, email address, stated interests (buying or selling), and an optional profile photo. Sign-in uses one-time email codes: we never store a password.
• Listing and business data — if you sell: the business identity, website, financial and operating metrics, and the documents you upload to your data room (PDF files). These may include personal data about third parties (for example, staff named in documents); sellers are responsible for having the right to share them.
• Deal activity — access requests, offers, deal milestones, and messages exchanged with counterparties on the platform.
• Agreement records — when you accept an NDA or sale agreement on the platform, we record your identity, your role (buyer or seller), the exact content you accepted, a cryptographic hash of that content, and a timestamp. These records exist to evidence the agreement for both parties.
• Communications — emails we send you (and their delivery status) and messages you send to our support.
• Technical data — IP address, device and browser information, pages visited, and cookie identifiers, collected via server logs and the analytics tools described in section 8.

3. Why we use it

• Running the marketplace — accounts, listings, access requests, NDAs, messaging, documents, and deal tracking (performance of our contract with you).
• Trust and safety — verification checks, fraud and abuse prevention, and platform security (our legitimate interests in a trustworthy marketplace).
• Record-keeping — retaining agreement acceptance records and related evidence (performance of contract and legal obligations).
• Communications — sign-in codes, notifications about activity that concerns you, and service announcements (performance of contract); marketing only with your consent, and you can opt out at any time.
• Analytics and improvement — understanding how the site is used so we can improve it (legitimate interests, and consent where required).
• Legal compliance — responding to lawful requests and meeting regulatory obligations.

4. Sharing between users — how the marketplace works

Some sharing of your data with other users is the point of the platform:

• When a buyer requests access to a listing, the seller sees the buyer’s name and profile to decide whether to approve.
• When a seller approves access (and any required NDA is accepted), the buyer sees the listing’s confidential information — company identity, detailed financials, and data room documents.
• Counterparties in a deal see each other’s identity, messages, offers, and shared documents.
• Both parties to an accepted agreement can access its acceptance record.

Confidential information shared this way is protected by the NDA accepted between the parties.

5. Who processes data for us

We share personal data with service providers who process it on our instructions:

We may also disclose data to professional advisers, to authorities where the law requires it, and to a successor in a merger, acquisition, or asset sale (with notice to you). We do not sell personal data.

6. International transfers

Our providers’ infrastructure may be located outside your country, including in the United States and the European Union. Where personal data is transferred internationally, we rely on safeguards recognised by applicable law — such as contractual data protection commitments with our providers — so that your data remains protected to a comparable standard.

7. How long we keep data

• Account data — while your account is active, then deleted or anonymised within a reasonable period after closure.
• Agreement acceptance records — kept for up to 10 years after acceptance, because they evidence contracts between parties and may be needed for legal claims.
• Listings, documents, and messages — for the life of the listing or deal and a reasonable period afterwards, unless deleted earlier by the parties where the platform allows.
• Logs and analytics data — for shorter operational periods.

8. Cookies and analytics

We use cookies and similar technologies in two categories:

You can control cookies through your browser settings, and opt out of Google Analytics with Google’s browser add-on. Where the law of your country requires consent for analytics cookies, we will request it.

9. Security

We protect data with measures appropriate to a deal platform: per-user access controls enforced at the database level, documents accessible only through short-lived signed URLs scoped to authorised parties, integrity hashes on agreements and documents, and encryption in transit and at rest through our infrastructure providers. No system is perfectly secure — if you believe your account or data has been compromised, contact privacy@phleetdeals.com immediately.

10. Your rights

Subject to applicable law, you can ask us to:

• access the personal data we hold about you, and receive a copy in a portable format;
• correct inaccurate data;
• delete your data (note: agreement records may be retained where the law allows, because they evidence contracts with other parties);
• restrict or object to certain processing; and
• withdraw consent where processing is based on consent, without affecting prior processing.

To exercise a right, email privacy@phleetdeals.com. We may need to verify your identity. We respond within the timeframes required by applicable law. You can also complain to the UAE Data Office or the data protection authority of your country.

11. Children

The platform is for business users aged 18 or over. We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it.

12. Changes to this policy

We will post updates here and revise the “Last updated” date. If a change is material, we will notify you on the platform or by email before it takes effect.

13. Contact

See also our Terms of Service.