Privacy Policy

EquipmentsFinder (the "Platform") is operated by Earth Movers International Heavy Equipment Rental & Trading (L.L.C), of Capital Golden Tower, Office 706, Al Khaleej Al Tejari 2, Business Bay, Dubai, 231162, United Arab Emirates ("we", "us"). We decide how and why your personal data is used on the Platform, so we are its controller.

This policy applies to the website, the mobile app, our emails and messages, and both the UAE and the Saudi Arabia versions of the site. For any question about it, or to use your rights, write to legal@equipmentsfinder.com.

• Account details: your name, email, phone and WhatsApp numbers, company name, password (stored only as a secure hash) and sign-in records. If you sign in with Google we receive your name, email and profile picture from Google.
• Listings and stores: the equipment you list, its photos, prices, location and documents, and your store's name, logo and contact details. These are public by design.
• Equipment requests: what you need, where and when, your budget and your contact details. On the inquiry board your name and contact details are hidden until a supplier unlocks the request.
• Contact activity: when you reveal a phone number, tap call or WhatsApp, or unlock a request, we record that it happened, so suppliers can see their leads and we can prevent abuse.
• Payments: what you bought, the amount, VAT and invoice details. Card details are collected and stored by Stripe; we never see or store them.
• Messages with us: support requests, bug reports and anything you send us by email, phone or WhatsApp.
• Technical data: IP address, approximate country, device and browser type, pages viewed and errors, collected through cookies and similar technologies (see the Cookie Policy).

• To provide the Platform - your account, listings, requests, contact between users, plans and purchases. Basis: performing our contract with you.
• To take payments and keep records - invoices, VAT and accounting. Basis: our contract with you and our legal obligations under UAE tax law.
• To keep the Platform safe - verifying accounts, preventing fraud, spam and scraping, and fixing errors. Basis: our legitimate interest in a safe, working marketplace.
• To send service messages - sign-in codes, receipts, renewal notices, new matching requests and replies. Basis: our contract with you.
• To send marketing - only if you have agreed to it. You can withdraw at any time with the unsubscribe link in every message, or by writing to us. Basis: your consent.
• To understand and improve the Platform - usage statistics and performance measurement. Basis: your consent where the law requires it, otherwise our legitimate interest.

We do not sell your personal data, and we do not use it to make decisions about you that have legal or similarly significant effects solely by automated means.

Some features use artificial intelligence provided by OpenAI: the AI search assistant, the listing assistant that drafts a listing from your description, and the photo scan that reads a machine's make, model and details from its photos. When you use them, the text or photos you submit are sent to OpenAI to produce the result.

• Only use these features with content you are allowed to share.
• Do not include other people's personal data in a description or photo (for example faces or number plates you do not need to show).
• AI results can be wrong. Nothing is published until you have checked it, and you are responsible for what your listing says.

Other users. Your listings, store and the details you choose to show on them are public. A supplier who unlocks your request receives the contact details on it.

Service providers who process data for us under contract, only for the purposes above:

• Supabase - database, file storage and authentication;
• Vercel - website hosting, plus privacy-friendly usage and speed analytics;
• Stripe - card payments and fraud prevention;
• OpenAI - the AI features described above;
• Google - Analytics, and Google sign-in if you use it;
• Amazon Web Services (Amazon SES) - sending email;
• Twilio and Meta (WhatsApp) - sending WhatsApp and SMS messages;
• Sentry - error monitoring.

Authorities and advisers. We disclose data when the law requires it, to a court or regulator, or to our professional advisers, and when needed to protect our users or the Platform from fraud or harm. If our business is sold or merged, data may pass to the new owner under this policy.

Several of the providers above store or process data outside the UAE and Saudi Arabia, including in the European Union and the United States. Where we transfer personal data abroad we rely on the provider's data-processing terms, including standard contractual clauses, and the other safeguards the UAE and Saudi data protection laws require.

• Account, listing, store and request data: while your account is open.
• After you delete your account: we delete or anonymise it within 30 days, except what we must keep by law.
• Tax invoices and payment records: for as long as UAE tax law requires (currently at least five years).
• Security and server logs: up to 12 months.
• Marketing consent records: for as long as we send you marketing, and then up to two years as proof of consent.

Under the UAE Personal Data Protection Law and, for users of the Saudi site, the Saudi Personal Data Protection Law, you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct data that is wrong or incomplete;
• delete your data, or restrict how we use it;
• stop using it for marketing, or for purposes based on our legitimate interest;
• give you your data in a structured, machine-readable format;
• withdraw a consent you have given, without affecting what was done before.

Email legal@equipmentsfinder.com from the address on your account. We may ask you to confirm your identity, and we reply within 30 days. You can delete your account yourself at any time - see Delete your account. If you are not satisfied with our answer, you may complain to the UAE Data Office or, in Saudi Arabia, to the Saudi Data & AI Authority (SDAIA).

Data is encrypted in transit, passwords are stored as hashes, access to personal data is limited to staff who need it, and payment data stays with Stripe. No system is perfectly secure; if a breach puts your rights at risk we will tell you and the relevant authority as the law requires.

The Platform is for businesses and adults. It is not meant for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy. The date at the top shows the latest change, and we will tell registered users by email or on the Platform about significant changes before they take effect.