Privacy
Privacy Policy
What we collect, why, who sees it, how long we keep it — and the controls you have. Written to be read, not skimmed past.
Who we are
Charmity ("we") operates a marketplace for pre-loved fashion in Dubai, United Arab Emirates, through the Charmity iOS app and this website. For anything in this policy, write to support@deepstrand.com.
What we collect
Account and profile. A phone number or email address, verified by a one-time code. There are no passwords, so we never store one. Your profile carries a display name, an optional photo, an optional bio, your preferred language, and your neighbourhood — deliberately coarse: the app asks for your area, not your address, until something actually has to be collected or delivered.
Addresses. When you sell or buy, we need a real door: address lines, area, an optional map pin, optional access instructions for the courier, and a contact phone number for the handover.
Identity verification. Before money can be paid out to you, a specialist verification provider confirms who you are. We receive the outcome and a reference — the provider handles your documents under its own terms.
Payments. Card payments are processed by our payment partner. Your card number never reaches Charmity: we receive confirmation that a payment succeeded, plus the card's brand and last four digits for your receipt.
Messages. Conversations between buyers and sellers are stored, and automated checks may mask contact details shared in them — that protection is part of how the marketplace stays safe.
Orders. Your purchase and sale history, receipts, any disputes you open and the evidence you attach to them.
Technical. The basics needed to run and fix the app: device model, app version, language, and diagnostic records of failures.
What we use it for
- Running the marketplace: listings, orders, collection and delivery, payments, payouts, disputes — the contract you make with us and with each other.
- Safety: preventing fraud, enforcing the rules, keeping counterfeit goods out.
- Legal obligations: accounting, tax and records we are required to keep.
- Marketing, only with your consent — and one switch in the app turns all of it off at once. Messages about your own orders continue, because they are part of the service.
Who we share it with
- Couriers — the name, address, phone number and access notes needed to collect or deliver a parcel. Nothing more.
- Our payment partner — to process payments and payouts.
- Our verification provider — to confirm identity before payouts.
- Independent authenticators — details of the item being examined, not of you.
- Authorities — where the law requires it of us.
We do not sell personal data, and there is no third-party advertising in the app.
How long we keep it
Your data stays while your account is active. Records of transactions — orders, payments, payouts — are kept for seven years, as accounting law requires. When you erase your data, every personal field is cleared and what remains of those records is a tombstone: an identifier that lets the books still add up, without saying who you were.
Your controls
- Export. Request a copy of your data from the app, or by writing to us.
- Correction. Your profile, addresses and preferences are editable in the app at any time.
- Erasure. You can erase your personal data from the app. It is irreversible, it cannot run while an order is still open, and the app tells you exactly what was cleared and what the law obliged us to keep.
- Marketing. One switch turns every marketing channel off — push, email and SMS together.
The law this sits under
We handle personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). If you believe we have fallen short of it, write to us first — and you may also complain to the UAE Data Office.
Changes
If this policy changes in a way that matters, the app will tell you before the change applies. The date below always says when it last moved.
Last updated: 18 August 2026