Privacy Policy

DATA PROTECTION COMPLIANCE

Watermelon is registered as a Data Controller with the Abu Dhabi Global Market (ADGM) and complies with the ADGM Data Protection Regulations 2021 (DPR 2021).

We are committed to processing personal data lawfully, fairly, and transparently. Our data protection practices are designed to ensure:

  • Data is collected for specified, explicit, and legitimate purposes
  • Only necessary and relevant data is processed (data minimization)
  • Data is kept accurate and up to date
  • Data is stored securely and only as long as required

Appropriate technical and organizational safeguards are implemented

For individuals located in the European Union, we also comply with the General Data Protection Regulation (GDPR).

YOUR DATA SUBJECT RIGHTS (ADGM DPR 2021)

Under the ADGM DPR 2021, you have the following rights regarding your personal data:

  • Article 18 – Right of Access
    Request confirmation of whether we process your data and obtain a copy.
  • Article 19 – Right to Rectification
    Request correction of inaccurate or incomplete personal data.
  • Article 20 – Right to Erasure (“Right to be Forgotten”)
    Request deletion of your personal data where applicable.
  • Article 21 – Right to Restrict Processing
    Request limitation of processing under certain conditions.
  • Article 22 – Right to Data Portability
    Request your data in a structured, commonly used, machine-readable format.
  • Article 23 – Right to Object
    Object to processing based on legitimate interests or direct marketing.

To exercise your rights, contact us at privacy@watermelon.market.

We will respond within 30 days, in accordance with regulatory requirements.

PERSONAL DATA BREACH NOTIFICATION

In the event of a personal data breach, Watermelon follows strict incident response procedures. We will:

  • Assess and contain the breach immediately
  • Notify affected individuals without undue delay where there is a risk to their rights and freedoms
  • Notify the ADGM Office of Data Protection within 72 hours, where required
  • Provide clear information on:
  • The nature of the breach
  • Categories of affected data
  • Potential risks and impact
  • Actions taken and recommended next steps

We continuously monitor and improve our security controls to prevent future incidents.

INTERNATIONAL DATA TRANSFERS

Where personal data is transferred outside ADGM or the UAE, we ensure that appropriate safeguards are in place, including:

  • Use of Standard Contractual Clauses (SCCs)
  • Application of the ADGM Addendum to EU SCCs
  • Transfers only to jurisdictions with adequate data protection standards or equivalent safeguards

We take all reasonable steps to ensure your data remains protected regardless of where it is processed.

COOKIES & TRACKING TECHNOLOGIES

We use cookies and similar technologies to enhance your experience and improve our platform. These include:

  • Essential Cookies – Required for core functionality and security
  • Analytics Cookies – Help us understand user behavior and improve performance
  • Preference Cookies – Remember user settings and preferences

We do not use cookies or tracking data for AI model training without your explicit consent.
You can manage or disable cookies through your browser settings. Where required, we provide a cookie consent banner to control your preferences.

CONTACT INFORMATION

For any privacy-related inquiries or to exercise your rights:

  • Data Protection Officer (DPO): dpo@watermelon.market
  • General Privacy Inquiries: privacy@watermelon.market

You also have the right to lodge a complaint with the

ADGM Office of Data Protection.