Privacy Policy
This Privacy Policy explains how O M Z Portal ("OMZ", "we", "us") collects, uses, shares and protects personal data when you use the OMZ mobile application and related services (the "Services"). It is written to meet the requirements of the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and other applicable laws of the United Arab Emirates.
1. Who we are
The controller of your personal data is O M Z Portal, a sole establishment licensed by the Department of Economy and Tourism in Dubai, United Arab Emirates, under trade licence number 1377241, located at 314, Al Barsha South First, Dubai. OMZ operates an online marketplace on which independent businesses ("Sellers") offer their products and services. For any question about this policy or your personal data, contact us at support@omz.ae.
2. The personal data we collect
We collect only the data we need to provide the Services.
| Category | Examples | Source |
|---|---|---|
| Account data | Mobile number, name | You, when you sign in and place an order |
| Delivery data | Delivery address, building and apartment details, delivery instructions, and the location you set on the map | You |
| Conversation data | Your voice and the text of your requests while you use the shopping assistant | You, while the assistant is in use |
| Photos | Images you choose to search with | You |
| Preferences | Sizes, tastes and other preferences you tell the assistant, kept to help you in later conversations | You, while the assistant is in use |
| Guest trial data | If you try the assistant before giving your mobile number: an anonymous account identifier, and a device check from Apple used only to allow the free trial once per device | Your device |
| Order and payment data | Products ordered, bookings, amounts, order status, and a payment reference | You and our payment provider |
| Usage and device data | Products viewed, app interactions, device model, operating system, crash reports, and a notification token | Your device |
Card details are entered directly into the secure form of our payment provider, Stripe. OMZ does not receive or store your full card number or security code.
3. How we use your data and our legal basis
- To provide the Services and fulfil your orders, including sign-in, search, recommendations within a conversation, checkout, delivery, bookings and customer support. Legal basis: performance of our contract with you.
- To process your voice requests so the assistant can understand and answer you in real time. Legal basis: performance of our contract with you and your consent, given in the app before your first conversation.
- To keep conversation recordings to improve the Services, only where you have agreed to it. Legal basis: your consent.
- To send you service notifications about your orders and bookings. Legal basis: performance of our contract with you. You can turn notifications off in your phone settings.
- To send you offers and marketing messages, only where you have agreed to receive them. Legal basis: your consent. Every marketing message explains how to stop receiving them.
- To keep the Services secure, prevent fraud and fix problems, using usage and crash data. Legal basis: our legitimate interest in operating a safe and reliable service, and our legal obligations.
- To meet our legal, tax and accounting obligations, such as keeping records of transactions. Legal basis: legal obligation.
We do not sell your personal data. We do not use it to track you across other companies' apps or websites.
4. The shopping assistant, Google Gemini and automated processing
The OMZ assistant is powered by Google Gemini, an artificial intelligence service provided by Google LLC ("Google"). To understand and answer your requests, the app sends Google:
- your voice while you talk to the assistant, and the text you type;
- photos you choose to share with the assistant;
- the shopping details the assistant needs to help you: the products you view, your cart, the delivery address you choose, your past orders and the preferences you have told the assistant.
We ask for your permission in the app before any of this is sent to Google, on the screen where you start the assistant. Google processes this data on our behalf, only to answer your requests, under its data processing terms, which require it to protect the data to a standard at least equal to this policy. Google does not use this data to train its models and may keep it only for a limited time to detect abuse, as those terms allow. You can withdraw your permission at any time by no longer using the assistant or by deleting your account (section 8). Your voice is streamed securely while you talk to the assistant and is processed to produce a response. The assistant's suggestions are generated automatically and may contain mistakes. You always choose what to add to your cart and you confirm every order and payment yourself. No decision with a legal or similarly significant effect on you is made solely by automated means.
5. Who we share your data with
- The Seller of each order, who receives only what it needs to prepare, deliver and invoice that order or provide the booked service, such as the items, your name, the delivery address, the date and a contact number. The Seller is responsible for using this data only for your order and in line with UAE law.
- Our payment provider (Stripe), to process payments, refunds and fraud checks.
- Service providers who operate the Services on our behalf, including Google Cloud and Firebase (hosting, sign-in, notifications, analytics and crash reports), Google (the assistant's speech and language processing), LiveKit (the real-time voice connection) and our SMS provider (sign-in codes). They may use your data only to provide their services to us and must protect it.
- Authorities, where we are required to by law or by a competent court or authority.
6. International transfers
Some of our service providers process data outside the United Arab Emirates, for example in Qatar, the European Union or the United States. Where personal data is transferred outside the UAE, we do so in accordance with UAE law, relying on the protection level of the destination country or on contractual safeguards with the recipient.
7. How long we keep your data
We keep personal data only as long as needed for the purposes described above. Account and delivery data are kept while your account is open. Conversation recordings kept with your consent are deleted when you withdraw your consent or close your account. Order, payment and invoice records, including the tax invoices issued in the Sellers' names, are kept for the period required by UAE tax and commercial laws.
8. Deleting your account
You can delete your account at any time in the app under Menu › Profile › Delete account. We delete your profile, saved addresses and conversation data within 30 days. Records we must keep by law, such as invoices, are retained for the legal period and then deleted.
9. Your rights
Subject to applicable law, you have the right to:
- obtain information about the personal data we hold about you and receive a copy of it;
- receive your data in a structured, commonly used format;
- correct inaccurate or incomplete data;
- request the erasure of your data;
- restrict or object to certain processing, including processing for marketing;
- withdraw any consent you have given, without affecting processing carried out before the withdrawal.
To exercise any of these rights, email support@omz.ae from the contact details linked to your account. We may ask you to verify your identity before acting on a request. If you are not satisfied with our response, you may contact the competent data protection authority in the UAE.
10. Security
We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit, access controls and the security features of our cloud providers. If a breach of personal data occurs that is likely to affect your privacy, we will notify the competent authority and, where required, you, in accordance with UAE law.
11. Eligibility and children
The Services are intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
12. Device permissions
The app asks for your permission before it uses your microphone, camera, photos, location or notifications. Each permission is used only for the feature that needs it, and you can change it at any time in your phone settings.
13. Changes to this policy
We may update this policy from time to time. We will show the date of the latest version at the top of this page and, where the changes are significant, we will notify you in the app before they take effect.
14. Contact us
O M Z Portal
314, Al Barsha South First, Dubai, United Arab Emirates
Trade licence no. 1377241
Email: support@omz.ae
An Arabic version of this policy is available on request. In case of any difference between the two versions, the Arabic version prevails to the extent required by UAE law.