Privacy Policy

DIW Solutions FZ LLC is the data controller for the personal data described in this policy. That means we decide why and how it is used.

Our registered address is FDRK8726, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates.

For anything about privacy or your data, write to customersupport@sortermarket.com.

This policy covers the sortermarket platform: your account, your listings, your messages, verification, and the technical data we process when you visit the site.

It does not cover what another trader does with information you send them. If you give a buyer or a seller your contact details, your address or your company documents, that is between you and them, and they are responsible for it.

We collect the following categories of personal data:

• Account details — your name, email address, a hashed version of your password, and your phone number if you add one.
• Business and profile details — trading name, business details, your storefront address and any contact details you choose to publish.
• Listing content — descriptions, photographs, prices, weights and locations you publish.
• Messages and support requests — what you send to other traders through the platform, and to us.
• Identity verification data — described separately in the next section, because it is the most sensitive thing we handle.
• Technical data — IP address, browser and device information, cookie identifiers, and server logs.

Sellers can confirm their identity or their business name so that other traders can see it has been checked. This is optional in the sense that you choose whether to start it, but some features are only available once it is done.

Verification is carried out by Didit, a specialist identity verification provider, acting as our processor. You are handed over to their flow, you submit your document to them, and they return the outcome to us.

The data involved can include an image of a government identity document, the details printed on it, and a photograph of your face taken at the time so it can be compared with the document.

Where a face comparison is used to confirm that you are the person shown on the document, that is biometric data used for identification. Under data protection law that is a special category of personal data, and we process it only with your explicit consent, given when you start the verification flow. You do not have to give it, and you can decline and simply not verify.

We store the outcome of the check and a record of the name and name type that was confirmed. We do not store your identity document ourselves; it is held by the verification provider under their own retention rules.

We use personal data to:

• create and run your account, and sign you in;
• publish and display your listings, including in search results and our sitemap;
• let buyers and sellers find and message each other;
• verify identities and business names, and show verification status;
• take payment for seller plans and keep billing and accounting records;
• prevent fraud and abuse, act on reports, and enforce our Acceptable Use and Prohibited Items policy;
• meet our legal obligations and respond to lawful requests;
• measure, with your permission, which of our advertisements lead people to visit and sign up.

Where data protection law requires a legal basis, ours are:

• Performance of a contract — running your account and providing the platform and any plan you buy.
• Legitimate interests — keeping the platform safe, preventing fraud and abuse, and improving the service. We balance these against your interests.
• Legal obligation — keeping accounting records and responding to lawful requests.
• Explicit consent — for identity documents and any biometric comparison used to confirm who you are. You can withdraw that consent, though we cannot undo a check that has already been completed.
• Consent — for optional analytics and optional marketing, which you give or withdraw through Cookie preferences in the site footer.

We use the following service providers, who process personal data on our instructions:

• Vercel — hosting and delivery of the website.
• Neon — database hosting.
• Cloudflare — network security, access control and content delivery.
• Cloudinary — storage and delivery of images and file attachments.
• Resend — sending transactional email, such as confirmation and password reset messages.
• Twilio — sending SMS codes for phone verification.
• Didit — identity verification, as described above.
• Stripe — payment processing for seller plans.
• Google (Gemini) — writing AI replies to buyers on behalf of sellers who use the AI assistant.

We may also disclose personal data to professional advisers, or to an authority or court where we are legally required to. If our business is sold or reorganised, data may transfer with it, and this policy will continue to apply until you are told otherwise.

We do not sell personal data.

If you allow optional marketing, Meta receives the pages you visit on sortermarket, with your IP address and browser details, and, when you complete sign-up, a hashed copy of your email address and the type of work you chose, so we can measure which of our ads work. Meta also uses this data for its own purposes under its own privacy policy. We share nothing with any other advertiser.

We operate from the United Arab Emirates and our providers operate in a number of countries, so personal data is transferred internationally, including outside the country you are in.

Where personal data is transferred out of a region whose law restricts transfers, we rely on the safeguards that law provides — for transfers out of the European Economic Area or the United Kingdom, that means standard contractual clauses with the provider concerned.

We keep personal data for as long as we need it for the purposes above, and then delete it or stop being able to identify you from it. In practice:

• Account data — while your account is open, and for a period afterwards where we need it for legal, tax or accounting reasons.
• Sign-ups that are never confirmed — deleted automatically after 30 days, so that an unconfirmed account cannot hold an email address indefinitely.
• Listings — a removed listing is retained rather than erased immediately, so that reports and complaints about it can still be reviewed.
• Messages and support requests — while your account is open, and afterwards where we need them to deal with a dispute or a legal claim.

Depending on where you are, you may have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete data, where we have no continuing reason to keep it;
• ask us to restrict how we use it while a question about it is resolved;
• object to use we base on our legitimate interests;
• ask for a copy of data you gave us in a portable format;
• withdraw consent you have given, without affecting what was done before you withdrew it.

To exercise any of these, write to customersupport@sortermarket.com. We may need to confirm who you are before we act, so that we do not disclose your data to someone else.

If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority. We would appreciate the chance to address it first.

We protect data in transit with encryption, store passwords only as a hash, keep our production credentials separate from anything a person can copy, and limit access to what is needed.

No service can promise perfect security. Please use a strong, unique password, and tell us at customersupport@sortermarket.com if you think your account has been accessed by someone else.

Optional first-party usage analytics measures page visits, controls used, approximate country, device class, referring site and active browsing time after you allow it. Visits use random identifiers and are not linked to your account. Messages, form contents and screen recordings are excluded. Administrators can view aggregated reports and pseudonymous visit timelines. Records expire after 90 days and are removed on the next analytics request. You can stop future collection using Cookie preferences in the site footer. See the Cookie Policy for identifiers and retention details. Optional marketing, also off until you allow it, lets Meta measure which of our ads lead to sign-ups; the Cookie Policy describes it.

sortermarket is a platform for businesses and is not intended for anyone under 18. We do not knowingly collect data from children. If you think a child has given us data, write to customersupport@sortermarket.com and we will delete it.

We may update this policy. The effective date at the top of this page shows when the current version took effect.

If we make a significant change — particularly to what we collect or who we share it with — we will give notice through the platform or by email.

Privacy questions and requests can be sent to customersupport@sortermarket.com, or by post to DIW Solutions FZ LLC at FDRK8726, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates.