Privacy Policy

Bite Resale
Effective date: 3 September 2026

1. Introduction

This Privacy Policy explains how OPERA ENGINEERING FZ-LLC, trading through Bite Resale (“Bite Resale”, “we”, “us” or “our”), collects, uses, stores, discloses and otherwise processes personal data when you visit biteresale.com, create or use an account, place an order, communicate with us, request a return or refund, participate in a promotion, or otherwise interact with our marketplace and e-commerce services.

We are committed to processing personal data in accordance with applicable United Arab Emirates (“UAE”) law, including Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data (“UAE PDPL”), as applicable to our activities. This Policy should be read together with our Terms and Conditions and any cookie or consent notices displayed on the Website.

2. Who Controls Your Personal Data

For the processing described in this Policy, OPERA ENGINEERING FZ-LLC is generally the Data Controller, meaning that it determines the purposes and means of processing personal data. Certain payment providers, couriers, marketplace partners, suppliers and other third parties may act as independent controllers or processors depending on the service they provide and applicable law.

You can contact us about privacy matters at info@biteresale.com or at the registered address stated above.

3. Personal Data We May Collect

Depending on how you use Bite Resale, we may collect the following categories of personal data:

• Identity data, such as name and, where genuinely required for a lawful purpose, identity or verification information.
• Contact data, such as email address, telephone number, delivery address and billing address.
• Order and transaction data, including products ordered, order value, discounts, delivery status, returns, refunds, customer-service history and transaction identifiers.
• Payment-related data. Payments may be processed by third-party payment providers. We may receive payment status, payment method, limited card metadata such as card type or last digits, fraud signals and transaction references, but we do not necessarily receive or store full payment-card credentials.
• Account data, such as login details, account preferences, saved addresses, wish lists and account activity where these features are available.
• Device and technical data, such as IP address, browser type, device type, operating system, language, identifiers, timestamps, referring pages, approximate location derived from IP, logs and security information.
• Website usage data, such as pages viewed, products viewed, clicks, cart activity, checkout activity, search activity and interaction with Website features.
• Marketing and preference data, including marketing choices, consent records, campaign interactions and communication preferences.
• Customer-service content, including emails, messages, complaints, reviews, photographs or videos submitted in connection with a product, delivery, return, refund or support request.
• Fraud, security and compliance data, including information reasonably necessary to detect suspicious transactions, prevent abuse, comply with legal obligations and establish or defend legal claims.

4. How We Collect Personal Data

We may collect personal data directly from you when you enter information on the Website, create an account, place an order, contact support, request a return or refund, submit a review, join a promotion or otherwise communicate with us.

We may also receive data automatically through cookies, pixels, server logs and similar technologies, and from service providers or business partners involved in payments, fraud prevention, analytics, advertising, fulfilment, delivery, customer support and marketplace operations.

5. Purposes and Legal Grounds for Processing

We process personal data only where a lawful basis or permitted processing ground applies under UAE law. Depending on the circumstances, processing may be based on your consent or may be permitted without consent where the UAE PDPL or another applicable law allows it.

We may process personal data for the following purposes:

• to create and administer customer accounts;
• to receive, verify, process, fulfil and deliver orders;
• to process payments, refunds, returns, exchanges and chargeback-related matters;
• to communicate order confirmations, delivery updates, service messages and other transactional information;
• to provide customer support and handle complaints;
• to detect and prevent fraud, account misuse, security incidents and unlawful activity;
• to maintain records required for tax, accounting, regulatory, consumer-protection and legal purposes;
• to operate, secure, troubleshoot and improve the Website and our services;
• to understand Website performance, customer journeys and product demand through analytics;
• to personalise content and, where permitted, advertising or product recommendations;
• to send marketing where we have the required permission or other lawful basis and to maintain suppression/opt-out records;
• to establish, exercise or defend legal rights and claims; and
• to comply with lawful requests, court orders, regulatory requirements and other obligations imposed by UAE law.

6. Order Fulfilment, Dropshipping and Third-Party Suppliers

Bite Resale uses a third-party fulfilment/dropshipping model for some or all products. This means that products may be sourced, stored, packed or shipped directly to you by suppliers, fulfilment centres, couriers or logistics partners.

To fulfil an order, we may share only the personal data reasonably necessary for that purpose, such as your name, delivery address, telephone number, order details and delivery instructions, with the relevant supplier, fulfilment partner and courier. These parties may process data on our instructions or under their own legal responsibilities, depending on the circumstances.

We require service providers acting as processors to handle personal data in accordance with applicable contractual, confidentiality, security and data-protection requirements.

7. Payments

Payments may be processed through third-party payment gateways, banks, card networks, digital-wallet providers or other payment service providers available at checkout. Those providers may collect and process payment information directly under their own privacy notices and legal obligations.

We use transaction and payment-status information to complete orders, prevent fraud, reconcile payments, process refunds and comply with financial, accounting and legal requirements.

8. Cookies and Similar Technologies

We may use cookies and similar technologies that are necessary to operate the Website, remember preferences, maintain sessions, secure accounts, measure Website performance, understand usage and, where permitted, support advertising and personalisation.

Where consent is required for non-essential cookies or similar technologies, we will seek that consent through an appropriate notice or consent mechanism. You may be able to manage non-essential cookies through the Website’s cookie controls and/or your browser settings. Blocking certain cookies may affect Website functionality.

A separate Cookie Policy or cookie-management interface may provide additional details about specific cookies and third-party technologies in use.

9. Analytics and Advertising

We may use analytics and advertising service providers to understand Website traffic, measure campaigns, attribute conversions, prevent advertising fraud and show or measure relevant advertising. Depending on the technology used, these providers may receive device identifiers, IP addresses, cookie identifiers, browsing events, purchase or conversion events and related technical information.

Where applicable law requires consent for advertising or tracking technologies, we will seek consent before using those technologies. You may withdraw consent or change available preferences through our cookie controls, subject to technical and legal limitations.

We do not authorise advertising partners to use personal data in a manner prohibited by applicable UAE law.

10. Marketing Communications

We may send promotional communications by email, SMS, telephone or other channels only where permitted by applicable law and subject to applicable consent, licensing, identification, timing and opt-out requirements.

You can opt out of direct marketing by using the unsubscribe mechanism in the communication, adjusting available account preferences, or contacting info@biteresale.com. We may retain a limited suppression record so that we can respect your opt-out.

Transactional and service communications concerning an order, account, security matter, return, refund or legal notice are not marketing and may still be sent where necessary.

11. When We Share Personal Data

We may disclose personal data, where appropriate and lawful, to:

• suppliers, marketplace sellers and fulfilment centres involved in an order;
• couriers, delivery companies and logistics providers;
• payment processors, banks, card networks and fraud-prevention providers;
• cloud hosting, website infrastructure, cybersecurity, IT and technical service providers;
• customer-support, communications and CRM providers;
• analytics, advertising and marketing providers, subject to applicable consent requirements;
• professional advisers such as lawyers, accountants, auditors and insurers;
• government bodies, regulators, courts, law-enforcement authorities or other parties where disclosure is required or permitted by law;
• a buyer, investor, successor or adviser in connection with a genuine corporate transaction, restructuring, financing, merger, acquisition or sale, subject to appropriate safeguards.

We do not disclose personal data merely because a third party requests it. Disclosures are limited to circumstances in which there is a legitimate operational or legal reason and an applicable legal basis.

12. International Transfers

Because Bite Resale may use international suppliers, technology providers, payment providers, cloud services and fulfilment partners, personal data may be processed or accessed outside the UAE.

Where personal data is transferred outside the UAE, we will take the steps required by applicable UAE law, including relying on a legally permitted transfer mechanism and implementing appropriate contractual, organisational and technical safeguards where required.

We seek to limit transferred data to what is reasonably necessary for the relevant purpose.

13. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required or permitted by applicable law.

Retention periods vary depending on the type of data and may reflect order fulfilment, warranty and returns periods, tax and accounting obligations, fraud prevention, dispute resolution, regulatory requirements, limitation periods and the need to establish, exercise or defend legal claims.

When personal data is no longer required, we will delete, anonymise or otherwise securely dispose of it, subject to lawful retention obligations and technical backup cycles.

14. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, alteration, disclosure or access, taking account of the nature of the data and the risks of processing.

Measures may include access controls, authentication, encryption or secure transmission where appropriate, logging, monitoring, vendor controls, backups, security testing and internal procedures. No internet-based system can be guaranteed to be completely secure, but we work to maintain safeguards appropriate to the risk.

15. Personal Data Breaches

We maintain processes for identifying, assessing and responding to personal-data security incidents. Where a personal-data breach triggers notification obligations under applicable UAE law, we will make the required notifications to the competent authority and/or affected data subjects in accordance with the applicable requirements.

16. Your Rights

Subject to the conditions, exceptions and procedures in applicable UAE law, you may have rights concerning your personal data, including rights to:

• obtain information about the processing of your personal data and, where applicable, access relevant information or copies;
• request transfer of personal data where the statutory portability requirements are met;
• request correction or updating of inaccurate personal data;
• request erasure of personal data in circumstances provided by law;
• request restriction or suspension of processing in circumstances provided by law;
• object to certain processing and to processing for direct marketing;
• withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
• object to or seek human review of certain decisions based solely on automated processing where the UAE PDPL provides that right; and
• submit a complaint to the competent UAE data-protection authority where applicable.

These rights are not absolute. For example, we may be required to retain transaction records for legal, tax, fraud-prevention or dispute purposes even after an erasure request. We may request information reasonably necessary to verify your identity before acting on a rights request.

17. How to Exercise Your Privacy Rights

To exercise a privacy right, contact info@biteresale.com and describe your request. Please use the email address associated with your account or order where possible.

We will provide clear means of contacting us and will respond in accordance with the procedures and time limits required by applicable law. If we cannot fulfil all or part of a request, we will explain the reason where the law requires or permits us to do so.

18. Automated Processing

We may use automated tools to support fraud screening, security, product recommendations, analytics or operational decision-making. Where a decision based solely on automated processing produces legal effects or otherwise materially affects you and UAE law grants specific protections, we will provide the applicable safeguards, which may include the ability to request human review.

We do not use automated decision-making in a manner that unlawfully prejudices your rights.

19. Children

Bite Resale is intended for persons who can lawfully enter into transactions. We do not knowingly seek to collect personal data from children for purposes inconsistent with applicable UAE law.

If a minor uses the Website, a parent or legal guardian should supervise the activity and provide any consent required by law. If you believe that a child has provided personal data unlawfully, contact info@biteresale.com so that we can review the matter and take appropriate action.

20. Third-Party Websites and Services

The Website may contain links to third-party websites, social platforms, payment services or other external services. Those services are governed by their own privacy practices. We are not responsible for a third party’s privacy practices merely because the Website links to or integrates with that service.

We encourage you to review the relevant third-party privacy notice before providing personal data directly to that party.

21. Business Transfers

If all or part of our business, assets or operations are reorganised, merged, financed, sold or transferred, personal data may be disclosed to relevant parties and advisers where lawful and reasonably necessary. We will take appropriate steps to protect personal data during such a transaction and to ensure continued compliance with applicable data-protection requirements.

22. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in law, technology, service providers or our business practices. The updated version will be published on the Website with a revised effective date.

Where a change materially affects the way we process personal data and applicable law requires additional notice or consent, we will provide that notice or seek consent as required.

23. Language

This document is the English-language version of the Privacy Policy. Because Bite Resale serves consumers in the UAE, consumer-facing legal and contractual information may also need to be made available in Arabic under applicable UAE requirements. Bite Resale should therefore publish an Arabic version alongside this English version where required.

In the event of any inconsistency, applicable UAE law and any mandatory Arabic-language legal requirements will prevail.

24. Contact Us

For questions, requests or complaints concerning this Privacy Policy or the processing of personal data, contact:

OPERA ENGINEERING FZ-LLC
FOAM0360, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates
Email: info@biteresale.com
Website: biteresale.com

Trade licences: No. 6004991 (Project Management Consultancy) and No. 45007041 (E-Commerce Through Websites).
VAT Registration No.: 104305889800003.
Corporate Tax Registration No.: 104305889800001.