Privacy Policy

Last updated: 3 May 2026

1. Who we are

ContractorSelect.me (“we”, “us”, “the Service”) is a UAE-based marketplace operated from Dubai. This Privacy Policy explains what personal data we collect, how we use it and the rights you have under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

2. Data we collect

When you use the Service, we collect:

• Account data: name, email address, role (client / contractor / admin) and account status.
• Project data: category, location (emirate and area), property type, size, budget band, urgency and the project description you provide.
• Contractor verification data: business name, trade licence number, years of UAE experience, team size, contact phone, short bio, service categories and areas and a copy of the trade licence document (stored privately, accessible only to administrators).
• Communications: messages you send via our contact form, proposal text submitted by contractors and email correspondence with our support team.
• Technical data: a session cookie issued by Supabase to keep you signed in. We do not use third-party advertising or tracking cookies.

3. How we use it

We use your data to:

• Provide, operate and improve the Service.
• Match Clients with Contractors whose categories and service areas fit a posted project.
• Verify Contractor identity and licensing before activation.
• Send transactional emails (sign-in links, proposal notifications, connection confirmations).
• Respond to support, press and partnership enquiries.
• Detect and prevent fraud or misuse of the Service.

4. Privacy by design

Until a Client clicks “Connect” on a proposal, Contractors only see the project description, category, emirate and broad area — never the Client's full name, exact address, phone number, or email. Once the Client connects, contact details are exchanged by email so both parties can continue off the platform.

5. Sharing

We share data only with:

• Supabase (our database and authentication provider, hosted in Frankfurt, Germany).
• Hostinger Email (our email hosting and forwarding provider).
• Cloudflare (content delivery and DDoS protection for the Service).
• The Contractor you choose to connect with, when you click “Connect”.
• UAE authorities when required by law.

We never sell your data and we never share it with advertisers.

6. Retention

Project data and proposals are retained for as long as your account is active and for up to 24 months after closure for tax and audit purposes. KYC documents are retained while your contractor account is active and deleted within 90 days of account closure. Contact-form submissions are retained for 12 months.

7. Your rights under UAE PDPL

You have the right to:

• Access and obtain a copy of the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data, subject to our legal retention obligations.
• Object to or restrict certain processing.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email support@contractorselect.me. We respond within 30 days.

8. Security

Authentication uses one-time email magic links — no passwords are stored. Database access is enforced by Supabase Row Level Security policies. KYC documents are stored in a private bucket and only become accessible via short-lived signed URLs to authorised administrators.

9. Children

The Service is not directed to anyone under the age of 18. We do not knowingly collect data from children.

10. Changes

We may update this Policy from time to time. Material changes will be communicated by email or by a banner on the Service.

11. Contact

Questions about this Policy or your data? Email support@contractorselect.me.