Privacy Policy & Data Sanitisation

Basis of Privacy Protection

This Privacy Policy sets out the commercial and legal basis on which any personal data, transaction records, hardware identifiers, or payment details we collect from you, or that you provide to us, will be handled by our platform.

By accessing our platform, requesting an online valuation, scheduling a doorstep courier collection, or visiting our physical store hubs in Dubai, you accept and consent to the data practices described in this Privacy Policy.

References to 'User', 'you', or 'your' refer to any individual consumer, business client, or authorized corporate representative interacting with our platform or services within the United Arab Emirates.

Specific Categories of Collected Information

We may collect and process the following categories of information in connection with your use of our services:

• 1. Form Data: Information submitted during online valuation, account registration, inquiry forms, and customer support chats.
• 2. Feedback & Reviews: Customer ratings, Google Reviews testimonials, survey submissions, and promotional entries.
• 3. Problem Reporting: Diagnostic reports, screenshot submissions, and correspondence regarding technical platform issues.
• 4. Written Correspondence: Records and transcripts of WhatsApp chats, phone support recordings, and email communications.
• 5. Aggregated Analytics: Non-personal demographic statistics, browsing patterns, and device model popularity trends.
• 6. Mobile & Location Telemetry: Geographic location coordinates used exclusively to dispatch localized doorstep couriers across Dubai.
• 7. Transaction History: Detailed records of accepted buyback deals, payout disbursement confirmations, and buyback reclaims.
• 8. Hardware & Device Identifiers: IMEI numbers, serial numbers, MAC addresses, and manufacturer diagnostic logs.
• 9. Technical Session Data: IP addresses, browser versions, operating system details, and session cookies.
• 10. Third-Party Referral Metadata: Digital campaign tags (UTM parameters) where explicit user consent was granted.

Permitted Use Cases

We utilize your information for the following specific commercial purposes:

• 1. To formulate preliminary and final binding device valuations and coordinate courier collection.
• 2. To disburse agreed financial payouts via cash in hand or instant UAE electronic bank transfer.
• 3. To fulfill statutory trade-in documentation required by Dubai Police second-hand trading divisions.
• 4. To maintain customer account dashboards allowing tracking of active 7, 14, 28, or 42-day buyback windows.
• 5. To present localized content, Arabic/English language preferences, and optimized mobile interfaces.
• 6. To notify customers regarding critical order updates, courier transit timestamps, and price lock expiration alerts.
• 7. To detect, prevent, and prosecute fraudulent transactions, stolen hardware submissions, and identity theft.

Authorized Third-Party Service Providers

Information may be disclosed under strict confidentiality agreements to trusted corporate partners who assist in our day-to-day operations:

Logistics Partners: Authorized UAE courier and delivery services receive solely your contact name, collection address, and phone number to execute physical device handovers.

Banking & Settlement Networks: Payout details (beneficiary name and IBAN) are transmitted through encrypted Central Bank of the UAE payment rails for transaction settlement.

Law Enforcement & Regulatory Compliance: We disclose customer records, Emirates ID documentation, and device IMEIs to Dubai Police CID, UAE courts, or government regulators when mandated by official statutory directives.

Business Asset Transfers: In the event of a merger, acquisition, or sale of company assets, customer records may be transferred as an operational business asset subject to this Privacy Policy.

Cross-Border Transfers & Retention Lifecycles

Data may be stored or processed on encrypted cloud servers hosted by world-class infrastructure providers (e.g., ISO/IEC 27001 certified data centers).

Customer deal records and physical transaction receipts are retained strictly for the statutory duration mandated by UAE commercial trade and accounting regulations (typically 5 years from transaction date).

Upon expiration of mandatory statutory retention windows, personal customer data is permanently expunged or anonymized from all production databases.

Multi-Tier Protection Standards

Data in Transit: All interactions with tangobuyback.com are enforced via Transport Layer Security (TLS 1.3) with 256-bit AES encryption.

Data at Rest: Customer records and identification scans are encrypted at rest using industry-standard AES-256 cryptographic standards.

Network Security: Enterprise firewalls, DDoS protection, intrusion detection systems, and strict rate-limiting shields guard against external network vectors.

Role-Based Access: Access to customer identity files is restricted solely to authorized compliance officers on a verified need-to-know basis.

Zero Storage of Payment Credentials: We never collect or store customer credit card CVV codes or online banking passwords.

Customer Privacy Rights

You are entitled to exercise the following statutory rights regarding your personal records held by Tango Buyback:

• Right of Access: Request a verified copy of all personal transaction records associated with your Emirates ID.
• Right to Rectification: Correct inaccurate, outdated, or incomplete contact details or delivery addresses.
• Right to Restrict Marketing: Instantly opt out of promotional emails or WhatsApp updates via direct unsubscribe links.
• Cookie Preferences: Manage, disable, or delete analytical cookies through your browser privacy preferences.

Notice of Revisions

Any modifications to this Privacy Policy will be posted immediately on this page with an updated 'Last Revised' date.

For material changes affecting customer data handling, we may notify registered users via email or on-site notification banners.

Continued use of our platform following the publication of revised terms constitutes your informed acknowledgment and acceptance of the updated practices.