This Privacy Policy explains how PM Portal ("PM Portal", "we", "us", or "our") collects, uses, discloses, and safeguards information when you visit pmportal.ae or use our business-to-business marketplace for precious metals (together, the "Platform"). It applies to visitors, registered users, and the companies they represent. By using the Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Platform.
PM Portal is operated from Business Bay, Dubai, United Arab Emirates. For the purposes of applicable data protection law, PM Portal is the controller of the personal data described in this policy — that is, we decide why and how personal data submitted to the Platform is processed. Questions or requests relating to this policy can be directed to us using the details in Contact Us below.
Information you provide directly. When you register or use the Platform, we collect: your name, email address, and phone number; your company's legal name, trade licence, commercial registration, address, and other verification documents; profile and company details such as a logo, website, and description; content you submit, including offers, messages sent to other companies, and contact requests; and billing details processed on our behalf by our payment provider (see Section 7).
Information collected automatically. When you access the Platform, our servers automatically log technical data such as your IP address, browser type and version, device and operating system information, referring pages, pages visited, and the date and time of each request, together with authentication events such as sign-in and sign-out timestamps. This is used for security, fraud prevention, and diagnosing technical issues, not for advertising.
Information from third parties. We do not purchase personal data from data brokers or receive profiles about you from social networks or advertising platforms. Limited information may reach us from our payment provider (for example, confirmation that a card payment succeeded) as described in Section 7.
We use the information described above to:
We do not use your information to serve third-party advertising, and we do not sell personal data.
Where applicable data protection law requires a legal basis for processing (for example, if you access the Platform from within the European Economic Area or the United Kingdom), we rely on: performance of a contract (to provide the account and marketplace features you request); legitimate interests (to secure the Platform, prevent fraud, and improve our services); legal obligation (for tax, accounting, and regulatory record-keeping); and consent, where we ask for it explicitly (for example, optional newsletter sign-up).
We use a small number of strictly necessary cookies — such as your session cookie and a CSRF-protection cookie — required for sign-in and security to function. We do not currently use analytics, advertising, or cross-site tracking cookies. Full details of every cookie we use, how long it lasts, and how to control it are set out in our Cookie Policy.
We do not sell your personal information. We disclose information only in the following circumstances:
PM Portal is based in the United Arab Emirates, and the infrastructure providers we use host data in multiple regions. As a result, your information may be processed in countries other than your own, including countries that may not have data protection laws equivalent to those in your home jurisdiction. Where we transfer personal data internationally, we take reasonable steps to ensure it is handled securely and in accordance with this policy.
We retain account, company, and transaction information for as long as your account remains active and for a reasonable period afterward to comply with legal, tax, accounting, or dispute-resolution obligations. Verification documents are retained for as long as needed to support the verification decision and any related regulatory record-keeping requirement, after which they are deleted or anonymized. You may request earlier deletion as described in Section 11, subject to the exceptions described there.
We use industry-standard technical and organizational measures to protect your information, including encrypted connections (HTTPS/TLS) between your browser and our servers, access controls restricting who within our team can view verification documents, and hashed storage of passwords. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal data, we will notify affected users and relevant authorities as required by applicable law.
Depending on where you are located, you may have some or all of the following rights regarding your personal data:
To exercise any of these rights, contact us using the details in Section 16. We may need to verify your identity before acting on a request, and some requests may be limited where we have an overriding legal or legitimate basis to retain the information.
The Platform is a business-to-business service intended for use by employees of registered companies acting in a professional capacity. It is not directed at, and we do not knowingly collect personal data from, individuals under the age of 18. If we learn that we have collected data from a child, we will delete it.
Some browsers offer a "Do Not Track" signal. Because there is no accepted industry standard for how to respond to these signals, the Platform does not currently respond to them differently — as noted above, we do not use advertising or cross-site tracking cookies regardless of this setting.
The Platform may link to third-party websites, including third-party source articles referenced on the Platform. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies before providing any information to them.
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal reasons. Material changes will be reflected by updating the "Last updated" date at the top of this page, and where changes are significant we will provide a more prominent notice.
Questions, requests, or complaints about this Privacy Policy or how we handle your personal data can be sent to info@pmportal.ae, or by post to Office 23237, Business Bay, Dubai, United Arab Emirates.