Privacy Policy
Last updated: July 25, 2026
This Privacy Policy explains how SellAbroad FZ-LLC and its group companies (together, “SellAbroad”, “we”, “us”, or “our”) collect, use, disclose, and safeguard personal data when you visit our websites, use our cross-border commerce platform, or purchase goods through a storefront we operate (including buyfromabroad.com). We are committed to handling personal data in accordance with applicable data-protection laws, including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).
1. Who we are
The data controller is SellAbroad FZ-LLC, a company organized under the laws of Dubai, UAE (Licence No. 106767), with its principal place of business at In5 Tech, Dubai Internet City, Dubai, United Arab Emirates. For privacy questions or to exercise your rights, contact us at privacy@sellabroad.io.
2. Personal data we collect
- Identity & contact data — name, email address, phone number, billing and shipping address.
- Order & transaction data — products purchased, order value, currency, delivery details, and returns or refunds.
- Payment data — payment is processed by our regulated payment partners; we receive confirmation and limited transaction details but do not store full card numbers.
- Account & business data — for merchants and suppliers, business details, contacts, and onboarding/KYC information.
- Technical & usage data — IP address, device and browser type, pages viewed, and interactions, collected via cookies and similar technologies.
- Communications — messages you send us and our support correspondence.
3. How we use personal data
- To process and fulfil orders, take payment, arrange delivery, and handle returns, refunds, and chargebacks;
- To provide, operate, and improve our platform and storefronts;
- To communicate with you about orders, service updates, and support;
- To meet legal, tax, accounting, anti-money-laundering, sanctions, and fraud-prevention obligations;
- To personalize content and, where permitted, send marketing you can opt out of at any time;
- To establish, exercise, or defend legal claims.
4. Legal bases for processing
Where the GDPR applies, we rely on: performance of a contract (to fulfil your order); our legitimate interests (to operate and secure our services and prevent fraud); compliance with legal obligations; and your consent (for optional cookies and marketing), which you may withdraw at any time.
5. How we share personal data
We share personal data only as needed with:
- Payment partners — regulated payment institutions that process transactions and screen for fraud;
- Suppliers and fulfilment/logistics providers — to ship and deliver your order;
- Service providers — hosting, analytics, customer support, and communications vendors acting on our instructions;
- Professional advisers and authorities — where required by law, regulation, or legal process.
We do not sell your personal data.
6. International transfers
We operate globally, so your data may be processed in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses or transfers to jurisdictions recognized as providing adequate protection.
7. Cookies
We use strictly necessary cookies to run the site and, with your consent, analytics and marketing cookies to understand and improve performance. You can manage cookies through your browser settings and any consent controls we provide.
8. Data retention
We keep personal data only for as long as necessary for the purposes above, including to satisfy legal, tax, accounting, and dispute-handling requirements, after which it is deleted or anonymized.
9. Your rights
Subject to your local law, you may have the right to access, correct, delete, or port your personal data; to object to or restrict certain processing; to withdraw consent; and, under the CCPA/CPRA, to know what we collect and to opt out of any “sale” or “sharing” (we do not sell your data). To exercise your rights, email privacy@sellabroad.io. You also have the right to complain to your local data-protection authority.
10. Security
We maintain technical and organizational measures designed to protect personal data against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, but we work to protect your information and review our controls regularly.
11. Children
Our services are not directed to children, and we do not knowingly collect personal data from children under the age required by local law.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here and revise the “Last updated” date above.
13. Contact us
SellAbroad FZ-LLC — In5 Tech, Dubai Internet City, Dubai, UAE.
Email: privacy@sellabroad.io