Privacy Policy

We collect only what each feature needs:

• Browsing data — the pages you view, your language, the site you came from, device and browser details, and a random identifier stored in your browser (crate_vid). We use our own first-party counter and Google Analytics 4.
• Requests and quotes — when you ask for a quote or ask us to contact a company: your name, email, phone, company, the product and quantity, your message, and the page you came from.
• Free tools and downloads — when you print, save or download a result, or ask for it by email: your email (required), your name (optional), sometimes company and phone, the answers you gave the tool (for example product category and emirate), and whether you chose to receive updates. We remember your email in your browser (crate_lead) so we do not ask again.
• Label scanner — the photo you take or upload is sent to AI and text-recognition services to read the text on it. We do not keep the photo. We keep the extracted text (product name, class, ingredients, label text) and the check result.
• Accounts — your email and name and how you sign in (Google, or email and password), handled through our authentication provider.
• Printed-label orders — your name, email, phone, order details and any artwork you upload. These are passed to our print partner, Art for Printing, so it can quote, confirm and produce your order.
• Partners — the business profile details you enter in the partner portal, some of which appear on your public partner page.
• Emails — we record delivery events (sent, bounced, unsubscribed) and replies to our emails.
• WhatsApp — if you tap the WhatsApp button, WhatsApp opens with a pre-written message. From then on WhatsApp's own privacy terms apply.

Our supplier and packaging-company directories are built from the public commercial registry of Dubai. They describe businesses (name, activity, licence category), not private individuals. For packaging companies we do not publish licence numbers or issue dates, and contact goes through Crate. If you represent a listed business and want a correction or removal, email us and we will review it.

• To provide the tools and results you ask for, and send them to you.
• To handle your quote requests and pass them to the companies you asked us to contact.
• To run, secure and improve the site, and to prevent abuse and spam.
• To send updates only if you opted in (see section 8).
• To meet legal obligations.

Google Analytics sets cookies to measure how the site is used. Sign-in sets authentication cookies. Two items are kept in your browser's local storage: crate_vid (a random visitor identifier for our own counter) and crate_lead (the email and name you gave a download form, so we do not ask twice). You can block or clear cookies and local storage in your browser settings; parts of the site that need sign-in may then stop working.

We do not sell personal data. We share it only with:

• Service providers that run the site: Vercel (hosting), Supabase (database and authentication), Resend (email), Google (Analytics and Google sign-in).
• AI and text-recognition providers used by the label scanner (Anthropic, and OCR.space as a fallback), for the photo you submit.
• Art for Printing, our print partner, when you order printed labels.
• Companies you ask us to contact, to the extent needed for them to answer your request.
• Authorities, when the law requires it.

Some of our providers process data on servers outside the United Arab Emirates. We choose established providers and take reasonable steps to protect data wherever it is processed.

We keep personal data only as long as needed for the purposes above or as the law requires, then delete or anonymise it. You can ask us to delete it sooner. We protect data with encrypted connections (HTTPS) and restricted access to our systems, but no online service can be guaranteed completely secure.

We send marketing emails only to people who opted in. Every marketing email has an unsubscribe link, and we keep a suppression list so that people who unsubscribed, bounced or complained are not emailed again. A quote request or a download on its own is not consent to marketing. The result or reply you asked for is a service message, not marketing.

You can ask to access the personal data we hold about you, correct it, delete it, withdraw a consent you gave, or object to marketing. Email us at uae@crate.ae and we will respond within a reasonable time. We handle personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, to the extent it applies to us.

Crate is a business platform and is not directed to children. We do not knowingly collect their personal data.

We update this policy when our practices change and show the date at the top. Continued use after an update means you accept the updated policy.