Privacy Policy

Last updated 28 September 2026.

[ENTITY PLACEHOLDER, replace with the registered company name and licence number once the trade licence is issued. Until then this operates as a sole trader.]

Lanza ("we", "us") runs lanza.ae, a marketplace for gold, jewellery and watches in the UAE. This policy explains what we collect, why, and what you can ask us to do about it. It is written against the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

What we collect

When you create an account: your email address, and your password held by our authentication provider — we never see it. Optionally a display name and a mobile number.

When you sign in with Google: your email address and name, as released by Google. Nothing else.

When you post a listing: everything you type into the form, the photos you upload, and the contact numbers you choose to show. All of this is public by design — that is the point of a listing.

When you register a shop: your legal company name, trade licence number, issuing authority and expiry, your VAT TRN if you give one, an authorised contact name, and a copy of your trade licence document.

Automatically: your IP address for rate limiting and abuse prevention, and counts of views and contacts on listings.

When you message someone: the messages themselves, so both sides have a record and so we can investigate a dispute.

What we do not collect

We do not collect Emirates ID numbers. We do not ask for bank details — we are not party to any payment between a buyer and a seller. We do not track you across other websites, and we do not sell data to anyone.

Trade licence documents

A licence document you upload is stored privately and is never public. Only our review team can open it, through a link that expires in five minutes, and every time one of us opens it that is recorded. We keep it because a verified badge has to rest on a document a human has actually seen.

Photos of you

If you use a try-on feature, the photo you upload is processed to generate the image and is not stored on our servers. We will say so on that screen, and name the provider it is sent to.

Payments and balance

If you add balance to your Lanza account, we record what you paid, what you spent it on and when. That ledger cannot be edited or deleted, including by us — corrections are recorded as new entries. We keep it because you are entitled to an accurate account of your own money.

Balance is prepaid credit for Lanza services only. It cannot be withdrawn, transferred to another person, or exchanged for cash.

Who else sees your data

• Supabase — our database, authentication and file storage. Hosted in
• Mumbai, India.
• Vercel — runs the website.
• Resend — sends our email.
• Upstash — rate limiting. Sees an IP address or a user id, nothing more.

Each is bound by its own agreement to process data only as we instruct.

Your data leaves the UAE. It is held in India and processed in the United States and Europe by the providers above. Under PDPL we are required to tell you this, and by using Lanza you consent to it.

How long we keep things

Your account, until you delete it.

After you delete it, thirty days, during which you can change your mind. After that we anonymise: your email, phone and name are removed, and your account becomes "Removed user". Your listings are archived and disappear from the site.

What survives deletion, reports made about you, moderation decisions, and payment and balance records. We keep those because someone should not be able to erase a complaint by closing an account, and because financial records have to be auditable. None of it identifies you afterwards.

What you can ask for

Under PDPL you can ask us to show you what we hold about you, correct anything wrong, delete your account, or object to how we use something. Email admin@lanza.ae and we will respond within thirty days.

You can delete your own account at any time from Account → Security & privacy, without asking us.

Children

Lanza is not for anyone under 18. We do not knowingly hold data about children. If you believe we do, email us and we will remove it.

Changes

If we change this materially we will say so on the site. Continuing to use Lanza after that means you accept the new version.

Contact

Privacy and legal: admin@lanza.ae Anything else: support@lanza.ae