Privacy Policy

Last updated: 12 July 2026

Welcome to Eaglecart.

This Privacy Policy explains how Eaglecart collects, uses, stores, shares and protects personal information when you access or use Eaglecart websites, applications, software, services, APIs and related technologies (together, the "Services").

By creating an account, accessing, browsing, purchasing or using the Services, you agree to the practices described in this Privacy Policy.

1. Introduction

Eaglecart is a UAE-based business management platform providing ecommerce websites, online stores, Point of Sale (POS), Warehouse Management Systems (WMS), workshop management software, inventory management, customer management, quotations, invoicing, reporting, AI features and related business services.

We are committed to protecting the privacy and security of merchants, customers, visitors and all users of our Services.

2. Scope of This Policy

This Privacy Policy applies to:

Eaglecart websites
Merchant accounts
Online stores powered by Eaglecart
Mobile applications
Web applications
APIs and integrations
Customer portals
Support services

It does not apply to third-party websites, applications or services linked from our platform.

3. Data Controller and Data Processor

Depending on the circumstances, Eaglecart acts as either a data controller or a data processor.

Where Eaglecart is the controller

Eaglecart is the controller of the information we hold about our own merchants and users, including:

Merchant account information
Billing and subscription information
Support requests
Marketing communications
Platform administration and security data

Where Eaglecart is the processor

For customer information collected by merchants through their stores, websites, POS systems, workshops, warehouses or other business operations, the merchant is the data controller and Eaglecart acts solely as a data processor.

Eaglecart processes that customer data only in order to provide the Services, in accordance with the merchant's instructions and applicable law. We do not use merchant customer data for our own independent purposes.

4. Why We Process Personal Data

We process personal data only where we have a lawful ground to do so under applicable law. Depending on the activity, we process personal data:

To perform our contract with you — to provide the Services, manage your subscription and support you
To meet a legal obligation — to satisfy tax, accounting, regulatory and law enforcement requirements
To protect the platform — to secure the Services, prevent fraud and abuse, and maintain availability, where permitted by law
With your consent — for marketing communications and for non-essential cookies, which you may withdraw at any time

5. Information We Collect

Merchant information

Full name
Business name
Email address
Phone number
Business address
Trade licence information
VAT and tax registration information
Subscription details

Customer information collected by merchants

Customer names
Email addresses
Phone numbers
Shipping addresses
Billing addresses
Order information
Vehicle information
Workshop records
Service history
Customer communications

Technical information collected automatically

IP address
Browser type
Device information
Operating system
Login activity
Usage logs
Error reports
Referral URLs

6. How We Use Information

We use information to:

Provide and operate the Services
Manage subscriptions and billing
Process transactions and orders
Deliver customer support
Improve platform functionality
Enhance platform security
Prevent fraud and abuse
Generate analytics and reports
Comply with legal obligations
Maintain business continuity

7. Fraud Prevention and Platform Security

To protect Eaglecart, our merchants and their customers, we may process:

IP address
Device information
Browser information
Login history
Security and access logs
Fraud and abuse indicators

We use this information to detect and investigate unauthorised access, fraud, abuse and security incidents, and to keep the platform stable and available.

8. Artificial Intelligence

Certain Eaglecart features use artificial intelligence. Information submitted to AI-powered tools may be processed to generate content, create reports, improve product descriptions, generate metadata, assist with business operations and provide recommendations.

Eaglecart does not use merchant business data, customer personal data or order data to train public AI models.

AI-generated output may be inaccurate, incomplete or unsuitable. Merchants remain responsible for reviewing and verifying all AI-generated content before publishing it, sending it to a customer, or relying on it. Eaglecart does not guarantee the accuracy, completeness or suitability of AI-generated output.

9. Social Login and Authentication

You can create and access your Eaglecart account using:

Google Sign-In
Email address and password

When you use Google Sign-In, we receive only the limited profile information necessary to create and manage your account.

10. Cookies and Tracking

We use cookies and similar technologies to maintain secure login sessions, remember preferences, improve user experience, analyse platform performance, enhance security and detect unauthorised activity.

Full details, including the categories of cookies we use and how to manage your choices, are set out in the Eaglecart Cookie Policy.

11. Payment Information

Payments are processed by independent third-party payment providers. Eaglecart currently supports Stripe for card payments.

Eaglecart does not store full payment card numbers or card security codes on its servers.

Payment information you provide is processed according to the security standards and privacy policies of the payment provider.

12. Sharing Information

Eaglecart does not sell or rent personal information.

We share information only where it is necessary to operate the Services, where you ask us to, or where the law requires it.

13. Third-Party Service Providers

To operate the Services, we may share information with third parties, only to the extent necessary, including:

Payment processors, to process transactions and subscriptions
Cloud infrastructure providers, to host and secure the platform
Courier and delivery providers, to fulfil and track orders
Communication providers, to send email, SMS and other messages
Analytics providers, to measure and improve platform performance

These providers may only process information for the purpose we engage them for, and remain subject to their own security and privacy obligations.

14. Merchant Responsibilities

If you use Eaglecart to collect or process personal data about your own customers, staff or contacts, you are the controller of that data and you are responsible for it.

As a merchant, you must:

Provide your customers with any privacy notice required by law, and obtain any consent required, before collecting their data
Comply with all applicable privacy and data protection laws in every market you operate in
Respond to privacy requests from your own customers, including requests to access, correct or delete their data
Only use the data you collect for purposes your customers would reasonably expect, and that the law permits
Ensure that any third party you share customer data with is entitled to receive it

Eaglecart provides the tools. How you use them, and whether your use complies with the law, is your responsibility.

15. Data Storage, Hosting and Security

Eaglecart hosts data using trusted cloud infrastructure providers.

We implement security measures including encryption in transit, encryption at rest, firewall protection, access controls, security monitoring and regular security reviews. Full details are set out in the Eaglecart Security Policy.

No system is completely secure. Although we work continuously to protect information, no method of transmission or storage can guarantee absolute security.

16. International Data Transfers

Eaglecart operates internationally. Personal data may be transferred to, stored in, or processed in countries outside your country of residence.

Where we transfer personal data across borders, we take steps designed to ensure it continues to be protected to a standard consistent with this Privacy Policy and with applicable law.

17. Law Enforcement and Legal Requests

Eaglecart may disclose information where we are legally required to do so, including in response to a valid law, regulation, court order, subpoena or lawful government request.

We may also disclose information where we reasonably believe it is necessary to investigate fraud, protect the safety of any person, protect the security of the platform, or enforce our agreements.

18. Data Backups

Eaglecart performs routine system backups for disaster recovery and business continuity.

Backup copies may remain available for a limited period after a deletion request, until backup retention cycles expire.

19. Data Retention

We retain personal data only for as long as we need it.

While your account is active

We retain your account, business and operational data for as long as your account remains active, so that you can use the Services.

After your account is closed

You may export your business data for 30 days from the date of closure. After that period, your data is permanently deleted, except where we are required to retain it.

Financial and tax records

Invoices, quotations, orders and related financial records are retained for the period required by applicable UAE tax and accounting law, even after an account is closed.

Security and access logs

Security logs, access logs and fraud indicators are retained for as long as necessary for security, operational and legal purposes.

Legal holds

Where information is subject to a legal obligation, a dispute, a fraud investigation or a regulatory requirement, we retain it until that requirement ends. It is then securely deleted.

20. Data Ownership

Merchants retain ownership of their business data, including customers, orders, products, inventory, quotations, invoices, workshop records, business content, images and media files.

Eaglecart does not claim ownership of merchant data.

21. Account Deletion and Data Export

You may request deletion of your account by contacting [email protected].

Before deletion, and for 30 days afterwards, you may export your business data. After that period, your data is permanently deleted.

Certain information may be retained beyond that point where required by law, tax regulations, accounting requirements, fraud prevention obligations or an ongoing security investigation. Once those requirements expire, the information is securely deleted.

22. Your Privacy Rights

Subject to applicable law, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Request deletion of your data
Restrict how we process your data
Object to processing
Receive your data in a portable format
Withdraw consent where processing is based on consent
Ask us to stop sending marketing communications

To exercise any of these rights, contact [email protected]. We will respond within the timeframe required by applicable law.

We will not charge you for making a request, and we will not treat you differently for making one.

If you are not satisfied with our response, you have the right to lodge a complaint with the competent data protection authority.

If you are a customer of a merchant using Eaglecart, that merchant is the controller of your data. Please send your request to the merchant directly. We will assist the merchant in responding to you.

23. Marketing Communications

We may send you information about the Services, product updates and offers.

You can unsubscribe from marketing communications at any time, using the unsubscribe link in any message, or by contacting [email protected].

Unsubscribing from marketing does not stop essential service messages, such as billing notices, security alerts and changes to these policies, which we need to send you in order to operate your account.

24. Children's Privacy

The Services are intended for business users and individuals who are at least 18 years old.

Eaglecart does not knowingly collect personal information from children. If we become aware that such information has been collected, we will take reasonable steps to remove it.

25. Data Breach Response

Eaglecart maintains incident response procedures designed to address security incidents and personal data breaches.

Where a personal data breach occurs, we will notify the competent authority and, where required, affected individuals, within the timeframes required by applicable law.

Where a breach affects data we process on behalf of a merchant, we will notify that merchant without undue delay and provide the information they reasonably need in order to meet their own obligations.

26. Business Transfers

If Eaglecart is involved in a merger, acquisition, restructuring, financing, insolvency or sale of assets, personal data may be transferred as part of that transaction.

Any party receiving personal data in such a transaction will remain bound by protections consistent with this Privacy Policy. Where required by law, we will notify you.

27. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Updated versions will be published on our website and may be communicated by email or dashboard notification.

Continued use of the Services after updates become effective constitutes acceptance of the revised Privacy Policy.

28. Contact Information

For privacy enquiries, data requests or legal concerns, contact:

Eaglecart FZC
Sharjah Research, Technology and Innovation Park (SRTIP)
Sharjah, United Arab Emirates

Website: eaglecart.com
Email: [email protected]