Legal

Privacy Policy

This Policy explains what information DubiCars and Control Auto collect, how we use it, and how you can manage it. Please read it carefully before using the Website or App.

Last updated: 15 October 2026

1. Introduction

DubiCars respects your privacy and is committed to protecting it. This Privacy Policy explains what information we collect about you, how we obtain it, and how we use, share, protect and otherwise process it when you use our platforms and services.

In this Privacy Policy, “we”, “our” and “us” refers to Dubicars International FZ-LLC and its affiliates, including Control Auto (controlauto.net) (together, “DubiCars”); “the website” refers to www.dubicars.com and our other websites; the website and our mobile applications together are the “platforms”; and “you” and “your” refers to any individual accessing or using the platforms or our services, whether as a buyer, a private seller or a representative of a dealership or other business.

This Privacy Policy forms part of our Terms of Use. For the purposes of applicable data protection laws, DubiCars is the “data controller” of the personal information described in this Privacy Policy, which means we are responsible for how it is collected and processed.

2. The information we collect

“Personal information” is any information that can be used to identify you, or that we can link to you, and which is in our possession or control. We may collect:

Account and contact information: when you register, update your profile, list a vehicle, contact a dealer or seller, take part in promotions or competitions, send us a message, request support, give feedback or report a problem. This may include your name, address, phone number, email address, nationality, country of residence and any other information you choose to provide (for example, in a message to us by email, phone, WhatsApp or social media).
Sign-in information: if you sign in using a third-party account (such as Google, Apple or Facebook), we receive the basic profile information that provider shares with us, as described in section 3 for Google Sign-In.
Vehicle, enquiry and transaction information: details of vehicles you list, view, save or enquire about, the enquiries and messages you send to dealers or sellers through the platforms, and records of any purchases of our products or services.
Payment and billing information: when you pay for our services, such as listing or advertising packages, we collect billing details and transaction history. Card details are processed by our third-party payment provider and we do not store your full card number or security code.
Business account information (dealers): if you are a dealer and choose to connect your Facebook or Instagram business account, we collect your profile, page and business account details so that we can publish the listings you select to those accounts.
Website and device information: when you visit the platforms we receive information such as your IP address, device and browser type, the date and time of your visit, the pages you view, how long you spend on them, and the website that referred you to us. Some of this is collected using cookies and similar technologies (see section 10).

3. Google Sign-In and Google user data

You can choose to sign in to DubiCars using your Google account. This section explains how we handle the information we receive from Google when you do so.

What Google user data we access

When you sign in with Google, we request only the basic sign-in permissions (the “openid”, “email” and “profile” scopes). Google shares the following with us:

your name;
your email address (and whether Google has verified it);
your profile picture; and
a unique Google account identifier.

We do not request or receive access to your Gmail, Google Drive, Google Calendar, contacts or any other Google data.

How we use Google user data

We use this information only to:

create your DubiCars account and sign you in securely;
display your name and profile picture in your account; and
contact you about your account and your enquiries or listings.

How we share Google user data

We do not sell Google user data, and we do not share it with third parties except:

with service providers that host and operate our platforms on our behalf (such as cloud hosting), only as needed to provide the sign-in feature and under confidentiality obligations;
when you make an enquiry, with the dealer or seller you choose to contact, only the contact details needed for them to respond to you;
where required by law, or as part of a merger, acquisition or sale of assets, in which case this Privacy Policy will continue to apply to the data.

How we protect Google user data

Google user data is transmitted over encrypted connections (HTTPS/TLS) and stored on secured servers. Access is restricted to authorised staff and service providers who need it to operate the platforms.

Retention and deletion of Google user data

We keep Google user data for as long as your DubiCars account is active. You can ask us to delete your account and associated data at any time by emailing [email protected], and we will delete it within 30 days unless we are legally required to keep it. You can also disconnect DubiCars from your Google account at any time at https://myaccount.google.com/permissions.

Limited Use

DubiCars’ use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use or transfer Google user data:

to serve advertising, including personalised, retargeted or interest-based advertising;
to sell it to data brokers, information resellers or any other party;
to determine creditworthiness or for lending purposes; or
to develop, improve or train generalised or non-personalised artificial intelligence or machine learning models.

No person at DubiCars reads Google user data except with your consent, where necessary for security purposes, to comply with applicable law, or where the data has been aggregated and anonymised for internal operations.

4. Google Maps

We use Google Maps Platform, including the Google Places API, to show the location of dealers on a map and to provide address information. When you view a map on our platforms, Google may collect information such as your IP address and how you interact with the map, under Google’s own terms. Your use of Google Maps features is subject to the Google Maps/Google Earth Additional Terms of Service (https://maps.google.com/help/terms_maps/) and the Google Privacy Policy (https://policies.google.com/privacy). We do not send your Google account information to Google Maps.

5. How we obtain your information

We may obtain your information:

directly from you, for example when you use the platforms, enquire about a vehicle, contact a dealer or seller, send us an email or WhatsApp message, or call our customer care team;
from sign-in providers such as Google, Apple and Facebook, when you choose to sign in with them;
from dealers and other business customers, for example when they respond to your enquiry;
from our affiliates and business partners; and
from advertising networks, analytics providers and search information providers.

6. How we process your information

We will comply with the data protection laws that apply to our processing of your personal information. We will:

process your personal information lawfully, fairly, transparently and securely;
collect it only for specific, explicit and legitimate purposes, and not use it in ways that are incompatible with those purposes;
keep it adequate, relevant and limited to what is necessary for those purposes;
keep it accurate and, where necessary, up to date; and
keep it in a form that identifies you only for as long as necessary.

7. How we use your information

Subject to section 3 (which sets out the stricter rules for Google user data), we may use your personal information:

to provide the services you request, including creating and managing your account and your listings;
to connect you with the dealers and sellers you enquire with, and to facilitate communication between you (by phone, WhatsApp, SMS or email);
to keep internal records, respond to your queries and complaints, and improve our products, services and platforms;
for dealers who connect a Facebook or Instagram business account, to publish the listings you select to those accounts and report on their performance using anonymised statistics;
to process payments for our services;
to monitor and analyse how the platforms are used, identify technical problems and prepare reports;
to carry out market research;
to send you information about our services, promotions and alerts that may interest you, where permitted by law;
to personalise your experience and show relevant advertising, and to measure the effectiveness of our advertising; and
to prevent fraud and comply with our legal obligations.

8. Our legal bases for using your information

Where applicable data protection laws require a legal basis, we rely on one or more of the following:

the processing is necessary to perform a contract with you, or to take steps at your request before entering into a contract;
you have given your consent (where we expressly ask for it);
our legitimate interests in operating, improving and promoting the platforms, provided these are not overridden by your rights; or
to comply with legal and regulatory obligations.

9. Who we share your information with

We do not sell your personal information. We disclose it only for the purposes set out in this Privacy Policy, or as otherwise notified to you when we collect it:

to the dealers and sellers you enquire with. For example, when you enquire about a vehicle, we pass your contact details to the dealer or seller advertising it. Once received, the dealer or seller is responsible for that information under its own privacy policy;
to members of our group;
to our service providers, such as hosting, software and platform support, communication services, payment processing, analytics and advertising, only as needed to provide their services to us. They may not use your personal information for any other purpose;
to business partners for the performance of a contract we have with them or with you;
to a prospective buyer or seller of any of our business or assets, and their professional advisers;
to our professional advisers;
to competent authorities, or where we are otherwise required to do so by law, or to enforce our terms and agreements; and
to protect the rights, property or safety of DubiCars, our customers or others, including exchanging information with other organisations for fraud prevention.

Google user data is shared only as described in section 3.

10. Cookies, analytics and advertising

We use cookies and similar technologies to keep you signed in, remember your preferences, understand how the platforms are used and support our advertising. We use third-party analytics services, including Google Analytics, and tracking pixels from advertising partners, which may collect information such as your IP address and browsing activity to provide us with reports and to show you relevant adverts on other websites. Third-party advertisers may set their own cookies, which are governed by their own privacy policies. You can control or disable cookies in your browser settings, although some features of the platforms may not then work.

11. International transfers

Your information may be transferred to, stored and processed in countries outside the country from which you access the platforms, including by our staff and service providers. Some of these countries may not have data protection laws equivalent to those in your country. Where we transfer your information, we take appropriate measures to ensure it remains protected and that you can exercise your rights effectively.

12. How we protect your information

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, use, alteration, disclosure or destruction, including encrypting data in transit and limiting access to employees, agents and contractors who need it for their work and who are subject to a duty of confidentiality.

If you have a password for the platforms, you are responsible for keeping it confidential. No transmission of information over the internet is completely secure, so while we do our best to protect your information, we cannot guarantee the security of information sent to the platforms.

13. How long we keep your information

We keep your personal information only for as long as necessary for the purposes described in this Privacy Policy, including to provide our services, respond to queries or complaints, and meet our legal obligations. Account information is generally kept while your account is active and deleted or anonymised after you ask us to delete your account, unless we need to keep it for legal reasons. To decide how long to keep information, we consider its amount, nature and sensitivity, the risk of harm from unauthorised use or disclosure, the purposes for which we process it, and applicable legal requirements.

14. Your choices and rights

Depending on the laws that apply to you, you may have the right to:

access a copy of the personal information we hold about you;
correct personal information that is inaccurate or incomplete;
delete your personal information, including deleting your account;
restrict or object to our processing of your personal information, including for direct marketing;
receive your personal information in a structured, machine-readable format, or have it transmitted to another organisation; and
withdraw your consent at any time, where we rely on consent. This will not affect processing already carried out, and we may continue processing where we have another legal basis to do so.

To exercise any of these rights, email us at [email protected]. We will respond as soon as possible and may ask you to verify your identity. You can also manage information connected through Facebook or Instagram in those services’ settings, and remove DubiCars’ access to your Google account at https://myaccount.google.com/permissions.

To stop receiving marketing emails, use the unsubscribe link in any marketing email or email [email protected].

15. Third-party websites and services

The platforms may contain links to, or be used together with, third-party websites, apps and services that we do not control, such as social media platforms. Their privacy practices are governed by their own privacy policies, and we are not responsible for the information they collect. Information you provide directly to third parties is not covered by this Privacy Policy.

16. Children

The platforms are not directed at children and we do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information without the consent of a parent or guardian, please contact us at [email protected] and we will delete it.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available on this page, with the date it was last updated. If we make material changes, including any change to how we access, use, share or store Google user data, we will notify you by email or through the platforms before the changes take effect and, where required, ask for your consent.

18. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please email [email protected] or write to:

Data Protection Officer, Dubicars International FZ-LLC, Office 2114, Shatha Tower, Dubai Media City, Dubai, UAE.