ReCircle aims to handle personal data transparently and in accordance with applicable data-protection requirements. This policy should be read with the Terms of Use.
1. Scope and responsible organisation
This Privacy Policy applies to personal data processed when a person registers for, accesses or uses ReCircle, including the website, member features, administrative functions, messages, notifications, password recovery, feedback and email engagement services.
ReCircle is responsible for the personal data described in this policy, unless another organisation is identified at the point of collection or the relevant community has its own notice.
2. Personal data we collect
Account and profile data
- Name, email address, password hash and account status.
- Phone number, profile details, preferred contact method and profile image where supplied.
- Authentication, password-reset and last-login records.
Listings and community content
- Listing titles, descriptions, categories, prices, condition, collection area and status.
- Item images and listing activity such as views and saved items.
- Messages, contact enquiries, notifications, announcements and feedback.
Technical and security data
- Session information, browser and device information, IP-derived security hashes, timestamps, request logs and error records.
- Records needed to prevent misuse, investigate incidents and maintain platform reliability.
Please do not submit unnecessary sensitive information through listings, profiles, messages or feedback.
3. How we use personal data
- Create, authenticate and manage accounts.
- Publish and manage listings and images.
- Allow signed-in members to contact and message one another.
- Provide saved-item, listing, message and announcement notifications.
- Send password-reset codes and important security communications.
- Send optional community digests, feature updates and feedback requests, subject to available preferences and applicable requirements.
- Operate moderation, support, audit, security, backup and incident-response processes.
- Measure platform use and improve functionality, accessibility and community experience.
- Comply with applicable law and respond to lawful requests.
4. Why we process personal data
Depending on the purpose and applicable law, processing may be necessary to provide the requested service or perform our agreement with a member; based on consent; necessary for legitimate operational, security or community interests that do not override individual rights; or required to comply with legal obligations and establish or defend legal claims.
Where processing relies on consent, consent may be withdrawn for future processing, without affecting processing already performed lawfully.
5. What other members can see
Listings and associated item information may be visible to platform visitors or members according to the platform configuration. Signed-in members may see the listing owner's displayed name and approved contact details, and may send internal messages.
Messages are visible to the conversation participants and may be accessible to authorised administrators where reasonably necessary for support, moderation, safety, security or legal compliance. Do not share unnecessary identity, financial or confidential information.
7. Processing and storage outside the UAE
Hosting, email or technology providers may process or store personal data outside the United Arab Emirates. Where this occurs, we will seek to use lawful transfer mechanisms and appropriate contractual, organisational and technical safeguards required by applicable law.
8. Data retention
Personal data is kept only for as long as reasonably necessary for the purposes described in this policy, including account operation, community safety, dispute resolution, security, backup, audit and legal obligations.
- Account and profile data is generally retained while the account remains active.
- Listings, messages and transaction-related records may be retained after closure where needed for moderation, disputes, security or legal requirements.
- Password-reset codes expire within the configured period and are retained only for limited security and audit purposes.
- Email campaign and feedback records are retained while useful for communication reporting and platform improvement.
Backup copies may remain for a limited period until overwritten according to the backup cycle.
9. Security
We use reasonable technical and organisational measures intended to protect personal data, including authenticated access, password hashing, CSRF controls, role-based administrative access, one-time password-reset codes, audit records and restricted operational access.
No system can guarantee absolute security. Members should use a strong, unique password, keep credentials confidential and report suspected misuse promptly.
10. Your privacy rights
Subject to applicable law and any valid limitations, a person may request access to personal data, correction of inaccurate data, deletion, restriction or cessation of certain processing, withdrawal of consent, an explanation of processing, or another right available under applicable data-protection law.
Requests may be sent to info@recircly.com. We may need to verify identity and may retain information where required or permitted by law. A person may also raise a concern with the competent data-protection authority.
12. Younger users
ReCircle is not intended for unsupervised use by children. Where a school, employer, parent, guardian or community administrator authorises a younger person to participate, that responsible party must ensure suitable supervision and any permissions required by law.
13. Changes to this policy
We may update this policy to reflect changes in the platform, service providers, security practices or legal requirements. The current version and effective date will be published on this page. Material changes may also be communicated through the platform or email where appropriate.
14. Contact
For privacy questions or requests, contact info@recircly.com.