Y YUSR Marketplace
Sign in
Legal · Privacy

How we handle your data.

We collect the minimum data needed to operate the booking and instalment service, and we don't sell it. This page explains what we collect, why, and how to ask us to delete it.

Effective date: 2026-05-24. This notice is provided by YUSR Group on behalf of YUSR Marketplace.

What we collect

  • Account: name, email, phone number, password (hashed with Argon2id), date of birth, UAE residency status.
  • Booking activity: services you view, services you request, times you propose, notes you share with merchants.
  • Financial: credit limit decisions and contract history. We share basic identifiers with our underwriting partner (YUSR Group internal credit engine) when you apply for an instalment plan.
  • Technical: IP address, browser fingerprint, session cookies. Used for fraud prevention and to keep you signed in.

What we don't collect

We don't collect medical information beyond the service title and any free-text note you choose to share with a merchant. We don't run third-party tracking pixels. We don't sell your data to advertisers — ever.

Who sees your data

  • You: via your account page.
  • Merchants you book with: see your name, contact phone or email, requested time, and any note you wrote. Merchants do not see other merchants' booking histories.
  • YUSR Group internal teams: ops, support, underwriting — only the records they need to perform their job, logged.
  • Authorities: we comply with valid legal requests from UAE regulators. We don't volunteer your data.

Retention

Bookings and contracts are retained for the period required by UAE financial-services regulation (currently 7 years from the last activity). Account profile data is retained while your account is active; closed accounts are anonymised within 30 days.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete it (subject to legal retention obligations). Email [email protected]. We respond within 30 days.

Cookies

We use first-party session cookies (PHPSESSID) to keep you signed in and a CSRF cookie to protect your forms. No analytics cookies, no third-party tracking.

Changes to this notice

If we make material changes we'll notify you by email and update the "Effective date" above. Minor wording fixes won't trigger a notification.