Privacy Policy

We are Rebox Tech

Rebox Tech FZC (“Rebox”, “we”, “our”, or “us”) is a company registered with its principal office located at C1 Building, Ajman Free Zone, Ajman, United Arab Emirates. We are committed to protecting the confidentiality, integrity, and security of our customer’s personal data. This Privacy Policy applies to all individuals (“you” or “your”) who access or use our website, mobile application, and any related services (collectively, the “Platform”).

Use of Privacy Policy

As part of your interaction with the Platform, we may process certain personal data about you. This Privacy Policy, together with our Terms and Conditions(Terms of Use), explains how we collect, use, disclose, and safeguard information when you access or use the Platform. It also outlines the purposes for which your personal data is processed, the measures we implement to protect it in accordance with applicable data protection laws, and the rights available to you regarding your privacy. We encourage you to read this information carefully.

This Privacy Statement applies to the processing of Personal Data by Rebox Tech FZC in the following circumstances:

We collect certain information directly from you, typically when you complete forms, create an account, access or download our products, or use our Services. This information may include:

Information Collection

We also collect information about your use of our Website and Services through various technologies. This data is typically not associated with your personal identity or that of any other individual. Such information may include IP addresses, device identifiers, browser types, domain information, and other aggregated or anonymized statistical data that help us understand usage trends and improve the overall performance of the Platform.

Use of Personal Data

We process your Personal Data under the following circumstances: when it is necessary to perform our obligations or exercise our rights under a contract with you; when we have a legitimate business interest in doing so; when such processing is required to comply with applicable laws or regulatory obligations; or when you have provided your consent, where consent is required by law. Where we rely on your consent, you may withdraw it at any time by contacting us using the details provided in this Privacy Policy.

Legal reasons for the following usage of data:

Managing Our Website and Providing Our Services: We process Personal Data when necessary to fulfil our contractual obligations to you. Where no formal contract exists, we rely on our legitimate business interests to operate, maintain, and improve our Website and Services, support the ongoing development of our business, and deliver the content and functionality you request.

User Registration: We process your Personal Data when you create an account, either as part of our contractual obligations or based on our legitimate business interest in providing and managing the Services. This includes handling account setup and administration, delivering technical and customer support, verifying your identity, and sending essential information related to your account and the Services.

Assistance Requests: When you request that we contact you—such as for product or service inquiries—or when you reach out to us through any communication channels available on the Website or Platform, we process your Personal Data as necessary to respond to your questions, communicate with you, and fulfil any related contractual or service related obligations.

Compliance and Security Monitoring:

We process your Personal Data to ensure adherence to our applicable terms, policies, and usage guidelines. We also use Personal Data to monitor activity on the Website and Services in order to maintain a secure, reliable, and properly functioning user experience. Where a contractual relationship exists, this processing is necessary to fulfil our contractual obligations. In the absence of a contract, we rely on our legitimate interest in protecting the integrity, security, and performance of our Website, Services, systems, and applications, as well as safeguarding our rights and the rights of others. We reserve the right to monitor, investigate, and report any attempts to compromise the security or proper use of the Website or Services, including verifying accounts, reviewing user actions, and enforcing our terms and policies.

Improving Our Website and Services; Developing New Offerings:

We process your Personal Data to analyze usage trends, interaction patterns, and engagement with the Website and Services. This process is carried out based on our legitimate interest in improving the performance, functionality, and user experience of the Website and Services, developing new features or offerings, and providing personalized content. At times, we may also seek your direct input—such as through feedback forms or surveys—to support these improvements.

Marketing Communications and Advertising:

We process your Personal Data to promote our Website, Services, and business growth, which forms part of our legitimate business interests. This includes sending you marketing communications, promotional materials, and other relevant information. Such processing will only occur where it aligns with our legitimate interests or where required by applicable law, based on your prior consent. You may withdraw your consent at any time using the contact details provided in this Privacy Policy.

Payment Processing:

When you provide us with financial information, we process your Personal Data to verify those details and to facilitate payment collection and transaction processing. This processing is carried out solely for the purpose of completing transactions and fulfilling our contractual obligations to you.

Legal Obligations:

We may also process your Personal Data when required to comply with applicable laws and regulatory requirements. Such processing may be necessary to respond to requests from courts, law enforcement agencies, regulatory authorities, or other public bodies; to enforce our Terms of Service or other applicable agreements; or to protect our rights, privacy, safety, property, or the rights and interests of others.

Monitoring Platform Usage:

We use various tools and technologies to understand how you interact with the Platform. This may include information about your visits, such as your IP address, device and system details, browser type, location data, and connection information. We may also collect data through technologies such as cookies, web beacons, and behavioral tracking or retargeting tools. In most cases, this information is collected automatically as you use the Platform. For more details about the technologies we use and how they operate, please refer to our Cookie Policy.

Disclosure of Personal Information

Engagement with Service Providers:

We may share Personal Data with contracted third party service providers when necessary to deliver our Services, support business operations, or comply with applicable legal requirements. These providers may include entities that offer hosting, system administration, payment processing, analytics, marketing, data enrichment, and customer support services. Such sharing is conducted in accordance with the legal bases outlined in this Privacy Policy. Service providers receive only the Personal Data required to perform their functions and are strictly prohibited from using such information for any purpose other than providing services on our behalf.

Employer Involvement:

If you access the Services using credentials provided by your employer or register using a corporate email address, we may share certain Personal Data with your employer. This may be necessary to enable access, verify account ownership, review activity, detect suspicious behavior, or enforce our terms and policies.

Mergers, Acquisitions, or Corporate Transactions:

In the event of a merger, acquisition, change of control, restructuring, or sale of all or part of our business or assets, we may disclose Personal Data as part of the relevant transaction. Any such information will be handled in accordance with the acquiring entity’s privacy practices. Where required by applicable law, we will make reasonable efforts to notify you of any transfer of Personal Data to an unaffiliated third party.

Data Analytics:

We may share non personal, anonymized, or aggregated statistical data with third parties to support analytics, research, and service improvement efforts. Such anonymized data may also be used for routine business operations, including internal reporting and governance activities.

Public Forums:

Certain areas of our Website or official social media channels may allow you to post, upload, or share content publicly. Any Personal Data you choose to make publicly available may be viewed, collected, or used by others. You should avoid posting confidential information or information belonging to third parties without proper authorization. Content you share may also be used to personalize your experience or recommend relevant content.

Sharing with Friends or Acquaintances:

We do not control how your friends or acquaintances handle information you share with them. Once your information appears on publicly accessible pages, it may be collected and used by others. If you wish to request the removal of your Personal Data from our blog or community forum, you may contact us at info@rebox.tech. In some cases, removal may not be possible, and we will inform you of the reasons. If you refer a friend to Rebox or invite them to use our Services, we will use their email address solely to send a one time invitation. Your friend may contact us at info@rebox.tech to request deletion of their information.

Utilizing User Data

Our use of your Personal Data is governed by the conditions set out under applicable Data Protection Laws. Depending on the nature of the processing activity, we may rely on one or more of the following legal bases:

Consent:

Where you have provided your consent (when required under applicable Data Protection Laws), we may use your Personal Data to send you promotional offers, updates, or information related to our products and services. We may contact you by mail, email, phone, or electronic notifications, depending on your communication preferences. You may update or withdraw your marketing preferences at any time by contacting us as described in this Privacy Policy.

Legitimate Interests:

We may process your Personal Data based on our legitimate business interests, which include providing and improving our Services and ensuring the effective operation of our Platform. Before relying on this basis, we conduct a balancing assessment to ensure that our interests do not override your rights and freedoms under applicable Data Protection Laws. This assessment takes your interests and expectations into account.

Compliance with Legal Obligations:

We may process your Personal Data where necessary to comply with legal or regulatory requirements. This includes processing required to respond to legal requests or to establish, exercise, or defend legal claims.

Substantial Public Interest:

In limited circumstances, we may process your Personal Data where such processing is necessary for reasons of substantial public interest, as permitted under applicable Data Protection Laws.

Additional Purposes:

If we intend to use your Personal Data for purposes not outlined in this Privacy Policy, we will inform you of the new purposes before such processing takes place, unless otherwise permitted by law.

Data Retention:

We retain Personal Data for periods determined by our business needs and applicable legal requirements. Personal Data is kept only for as long as necessary to:

We may also retain Personal Data for legal, regulatory, or technical reasons, which may include maintaining historical records such as insurance related information. Where Personal Data is retained for research or statistical purposes, we apply appropriate safeguards to protect your privacy and ensure the data is used solely for those specific purposes.

When we process Personal Data on behalf of your current or prospective employer, we follow their instructions regarding how long such data should be retained.

Location of Processing:

Rebox Tech FZC operates from, and is established in, the United Arab Emirates. Our Services are hosted, and Personal Data is primarily processed, within India. However, certain third party service providers referenced in this Privacy Policy may process Personal Data in other jurisdictions, including countries that may not be recognized by UAE regulators—or by the European Commission—as providing an equivalent level of data protection. These jurisdictions may therefore offer different data protection standards than those applicable in the UAE.

Regardless of location, we ensure that all processing of Personal Data is protected in accordance with applicable legal requirements. Where necessary, we implement appropriate contractual and organizational safeguards, which may include data processing agreements and, where relevant, the use of standard contractual clauses or equivalent mechanisms permitted under applicable data protection laws.

Use by Minors:

Our Services are intended for business users and are not directed toward minors. Access to and use of the Platform is permitted only for individuals who are legally capable of entering into binding agreements under the laws of the United Arab Emirates. Individuals who do not meet this requirement are not eligible to use the Platform.

Minors under the age of 18 may access the Platform or its content only with prior consent and under the supervision of a parent or legal guardian. We do not knowingly collect Personal Data from children under the age of 18. If a parent or guardian believes that a minor has submitted Personal Data without appropriate consent, they may contact us to request its removal from our systems.

Data Security:

All Personal Data you provide is stored securely on our servers and handled in accordance with our internal security standards and policies. Account access is protected through one time password (OTP) authentication. You are responsible for keeping your OTP confidential and should never share it with anyone, including our staff.

Access to your Personal Data is restricted to authorized employees, affiliates, and third party service providers who require such information to deliver products or services on our behalf. We implement physical, electronic, administrative, and technical safeguards designed to meet the security requirements of applicable data protection laws and to protect your Personal Data from unauthorized access, disclosure, alteration, or misuse.

While we are committed to maintaining a high level of security, no system can be guaranteed to be completely secure. We therefore cannot promise absolute protection of your information or guarantee the security of data transmitted over the internet.

To uphold strong data privacy and security standards, we apply reasonable and practical measures, including encryption for data at rest and in transit, role based access controls, and partnerships with service providers who maintain comparable security practices.

Rebox Team Communication:

Service Communications:

We may contact you in connection with any transaction or interaction you initiate with us. These communications are necessary to provide updates, confirmations, and other information related to your use of the Platform and our Services.

Marketing Communications and Newsletters:

With your consent, we may send you marketing updates, promotional offers, editorial newsletters, or other information we believe may be of interest to you. Depending on your preferences, these communications may be delivered via SMS, email, or other permitted channels. You may manage or withdraw your marketing preferences at any time by selecting the “unsubscribe” link included in our emails or by contacting us at info@rebox.tech.

Customer Feedback:

We may contact you to request feedback regarding your experience or transactions with us, as part of our efforts to improve our Services.

Responses to Queries or Complaints:

If you submit a question, concern, or complaint, we will use your Personal Data to respond, provide assistance, and resolve the issue.

Your Rights under Data Protection

Applicable data protection laws grant you several rights regarding your Personal Data. You may exercise these rights at any time by contacting us using the details provided in this Privacy Policy. We will respond to your request within one month of receipt, subject to any extensions permitted by law.

Description of Your Rights

  1. Right of Access: You have the right to request access to the Personal Data we hold about you.
  2. Right to Rectification: You may request the correction of any inaccurate or incomplete Personal Data.
  3. Right to Erasure: You may request the deletion of your Personal Data under certain circumstances. This right may not apply where we continue to rely on your consent, where you have objected to processing (see Right 6), or where the data is still required for the purpose for which it was collected.
  4. Right to Restrict Processing: You may request that we restrict the processing of your Personal Data in specific situations, including:
    • when you contest the accuracy of the data.
    • when you prefer restriction over deletion.
    • when we no longer require the data for its original purpose, but you need it to establish, exercise, or defend legal claims.
  5. Right to Data Portability: You may request to receive the Personal Data you have provided to us in a structured, machine readable format and, where technically feasible, request that we transfer it to another organization.
  6. Right to Object: You may object to our processing of your Personal Data, including for direct marketing purposes.
  7. Right to Withdraw Consent: Where we rely on your consent to process your Personal Data, you may withdraw that consent at any time. Withdrawal may affect our ability to provide certain products or services.

These rights may be subject to limitations or exemptions where necessary to protect the public interest, comply with legal obligations, prevent or detect crime, or preserve legal privilege.

Updating Your Information

It is important that the Personal Data we hold about you is accurate and up to date. Inaccurate or incomplete information may affect our ability to provide you with relevant Services. We take reasonable steps to maintain data accuracy; however, you are responsible for informing us of any changes. You may update your details directly through your profile on the Platform or by contacting us. Providing false information or misusing another individual’s information may result in suspension or termination of access and may lead to legal action.

Deleting Your Information

You may request the deletion of your Personal Data under certain circumstances. This may not apply where we continue to rely on your consent, where you have objected to processing, or where the data is still required for the purpose for which it was collected. You can use the Account Deactivation or Data Deletion request template to reach out to us.

Changes to This Privacy Notice

The content of the Platform, our use of cookies, and the terms of this Privacy Notice, Cookie Notice, and related documents may be updated from time to time. Any material changes will be reflected by updating the “Last Updated” date. All modifications become effective once posted. We encourage you to review this Privacy Notice periodically to stay informed of any updates. This Privacy Notice was last updated on January 14, 2026.

Questions and Complaints

If you have any questions or concerns regarding this Privacy Notice or the way your Personal Data is handled, you may contact us at info@rebox.tech.

How to Complain

If you are dissatisfied with how we have used your Personal Data or how we have responded to your requests, please let us know using the contact details provided above. We will review your concerns and work to resolve the matter promptly.