Last updated 2026-09-02
This policy explains what personal data ROOH AL SAQR AUTO PARTS TRADING LLC (trade licence 1443597), trading as We Buy Car UAE collects when you request a valuation or contact us, why we hold it, who sees it, and what you can require us to do about it.
Who is responsible for your data
ROOH AL SAQR AUTO PARTS TRADING LLC, trade licence 1443597, of Al Mizhar 1, Dubai, United Arab Emirates, is the data controller for the personal data described in this policy. We trade as We Buy Car UAE.
We handle personal data under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and under any executive regulations issued under it. At the date of this policy those executive regulations had not been published, so this policy applies the law itself and the guidance issued by the UAE Data Office. We will update it when the regulations are issued.
What we collect
From the valuation form: your name, your phone number, your email address if you choose to give one (it is optional), the emirate you are in, and the details of the vehicle — make, model, year, mileage, colour and condition.
From the enquiry form: your name, your phone number, your email address if you give one, and whatever you write in the message box.
From the phone call and the inspection: what you tell the valuer about the vehicle, and what the valuer records about its condition. Where the sale proceeds, we also see the identity and ownership documents described in our terms of service — your identification document, the vehicle's ownership document, and a bank liability letter where the vehicle is financed.
Automatically: the IP address of the request. Our web server counts how many submissions come from one address in a short window, so that the forms cannot be flooded, and records the address in its access log. It is not written to a database and it is not attached to your enquiry.
We do not ask for, and you should not send us, data revealing health, religion, political opinion, or any other category the law treats as sensitive.
Why we collect it
To value your vehicle and to call you back about it. That is the whole purpose of the valuation form, and we cannot do it without your name, your number and the vehicle details.
To answer an enquiry you have sent us.
To carry out the sale where you accept an offer: to verify that you own the vehicle and are who you say you are, to pay the right person, to pay outstanding amounts where you have asked us to, and to prepare the ownership transfer documents.
To keep records we are required to keep as a licensed UAE business, and to defend or bring a legal claim if one arises.
To protect the website from automated abuse.
We do not sell your data, we do not rent it, and we do not pass it to anyone for their own marketing.
Our basis for processing
Mostly your consent: you fill in a form asking us to call you about your car, and we call you about your car. You can withdraw that consent at any time and we will stop.
Where a sale proceeds, processing is necessary to perform the contract between us, and to comply with the legal obligations that attach to transferring a vehicle out of your name in the UAE.
For the IP address used in rate limiting and recorded in our web server's access log, our basis is our legitimate interest in protecting the site, which the PDPL permits where it does not prejudice your rights.
Storage, and data leaving the UAE
Lead data is stored in our customer relationship management system. Access is limited to the valuers and administrators who need it to do their job.
Articles 22 and 23 of the PDPL permit personal data to be transferred outside the UAE where the destination country has an adequate level of protection, where a contract or binding instrument imposes equivalent safeguards, or with your explicit consent. Where our providers hold data outside the UAE, we rely on those safeguards, and we will tell you which apply if you ask.
How long we keep it
If you ask for a valuation and do not sell to us, we keep the enquiry for up to twelve months so that we can pick up the conversation if you come back, and then we delete it.
If you sell us a vehicle, we keep the transaction record for as long as UAE commercial and tax law requires us to keep business records, and no longer.
The IP address used for rate limiting is held briefly in the web server's memory, only for as long as it takes to count recent requests from that address. It is not written to a database. The same address appears in that server's access log, which we keep for no longer than thirty days and then delete.
You can ask us to delete your data sooner. Where we are legally required to keep a record, we will tell you so rather than quietly ignoring the request.
Your rights
Under Articles 13 to 19 of the PDPL you have the right to be told how your data is processed and to obtain a copy of it; the right to have it transferred to you or to another controller in a structured, machine-readable form; the right to have inaccurate data corrected; the right to have data erased; the right to restrict how we process it; the right to require us to stop processing it, including for direct marketing; and the right not to be subject to a decision taken solely by automated processing that produces a legal effect for you.
We do not take any decision about you by automated means. A person makes the offer, after looking at the car.
To exercise any of these rights, contact us using the details below. We do not charge for this. We will respond as quickly as we can and in any event within the period the law allows.
If you are not satisfied with our response, Article 20 of the PDPL gives you the right to complain to the UAE Data Office.
How we protect it
The site is served over HTTPS, and form submissions travel to our own server rather than directly to any third party. Credentials for our CRM are held on the server and are never sent to your browser.
Access to stored lead data is restricted to staff who need it. We keep the technical and organisational measures under review as required by Article 20 of the PDPL.
No system is perfectly secure. If a breach occurs that affects your personal data, we will notify the UAE Data Office as the PDPL requires, and we will tell you directly where the breach is likely to cause you harm.
Children
This service is for adults. We do not knowingly collect data from anyone under eighteen. If you believe a child has sent us personal data, tell us and we will delete it.
Changes to this policy
We will change this policy when what we do with data changes, and when the PDPL executive regulations are issued.
The date at the top of this page is the date of the current version. Material changes will be described here rather than made silently.
How to reach us about your data
Call or message us on 056 349 4786, sat – thu, 9am – 7pm · friday closed, or send a written request through the enquiry form on the contact page of this website. We aim to reply to everything within 24 hours.
You can also write to us at ROOH AL SAQR AUTO PARTS TRADING LLC, Al Mizhar 1, Dubai, United Arab Emirates.
Tell us what you want us to do and give us enough detail to find your record — the phone number you used is usually enough.