Skip to content
ROXAY Trading

Legal

Privacy Policy

Last updated: 26 September 2026

This policy explains what information ROXAY Trading collects through this website, why it is collected and how it is handled.

Who we are

ROXAY Trading is the trading name of Roxay FZE, a commodity trading and sourcing company established in the SPARK free zone, Sharjah Research Technology and Innovation Park (SPARK), Block B, B38-136, Sharjah, United Arab Emirates. It is the controller of the personal data described here. Contact details for privacy questions are set out at the end of this policy.

What we collect

We collect only what you send us. This website has two kinds of form, and they collect different things.

Enquiry forms

The buyer, supplier and general enquiry forms on our contact page collect:

  • Your name, company name, business email address and, if you provide it, a phone number.
  • Your country, and — for a buying requirement — the destination country or port.
  • The commodity category, product, quantity, delivery window and Incoterm you select.
  • For a supply offer: available volume, origin and delivery capability.
  • Anything else you write in the message field.

KYC form

Our KYC form collects more, because counterparty due diligence requires it:

  • Registered company name, trading name, country of incorporation, registration or licence number and registered address.
  • Ownership information, including ultimate beneficial owners, directors and authorised representatives.
  • Principal business activity and company website.
  • Transaction detail: commodity, volume, demand frequency, destination, end user and intended use.

Some of this is personal data about named individuals — directors, beneficial owners and representatives. We ask you to provide it only where you are entitled to.

We do not ask for payment card details or bank credentials through this website.

Why we collect it

Enquiry data is used to assess and respond to your enquiry: to determine whether we can serve the requirement or use the supply, to prepare a commercial response, and to continue the correspondence you started.

KYC data is used for counterparty identification and verification, compliance screening — which may include sanctions, politically exposed person and adverse media checks — transaction review, and commercial onboarding.

We do not sell your information, and we do not share it with third parties for their own marketing.

How long we keep it

Enquiry correspondence is retained for as long as necessary to handle the enquiry and any resulting commercial relationship. KYC and due diligence records are retained for the period required by applicable anti-money-laundering and record-keeping obligations, which is typically longer.

Cookies and analytics

This website uses two analytics services. Neither is used for advertising or profiling, and we do not sell or share the data they collect for anyone else's marketing.

Google Tag Manager. Tag Manager is a container that loads the measurement tags we have configured. It does not itself collect personal data about you, but the tags it loads may. Where those tags set cookies or collect usage data, they do so as described in this section. Tag Manager is operated by Google under the Google Privacy Policy.

Yandex Metrica. Metrica measures how the site is used: pages viewed, approximate location derived from IP address, device and browser characteristics, referring source, time on page, clicks and scrolling. It sets cookies to recognise a returning browser and to hold a session together. Data is processed by Yandex under its privacy policy and the Metrica terms of use, and may be processed outside your country of residence.

Session recording (Webvisor). Metrica's Session Replay feature is enabled. It reconstructs a visit as a replayable recording of page views, mouse movement, clicks and scrolling, so that we can see where a page is confusing or a form is failing. Two limits apply to it:

  • The contents of form fields are not recorded. Every field on this site is explicitly marked so that what you type is replaced with asterisks in any recording, including the fields on the KYC form.
  • Recordings are used only to improve the website. They are not linked to an enquiry, not used to assess a counterparty, and not shared with third parties.

Declining analytics. You can block analytics cookies through your browser settings, or use a browser that blocks tracking scripts by default. Yandex also publishes a browser add-on that blocks Metrica specifically, for Firefox and Chrome. Blocking analytics does not affect your ability to use the site or to submit an enquiry.

Pages that carry a form load Google reCAPTCHA to distinguish human submissions from automated ones. reCAPTCHA sets cookies and collects device and interaction data, which is processed by Google under the Google Privacy Policy and Terms of Service. It is loaded only on pages with a form, and only once the forms are connected.

Third parties

Forms on this site are processed by Formspark, a third-party form provider, and the site is served by a hosting provider. Both process data on our behalf under their own terms. Anti-spam verification is provided by Google reCAPTCHA, as described under Cookies and analytics.

Website usage is measured by Google Tag Manager and Yandex Metrica, as described under Cookies and analytics.

Compliance screening may involve third-party screening services. Those checks are carried out for our own compliance obligations, not on behalf of the provider.

Your rights

You may ask what information we hold about you, ask for it to be corrected, or ask for it to be deleted where we are not required to retain it. Requests are handled through the contact details below.

Contact

Privacy questions can be sent to Roxay FZE, Sharjah Research Technology and Innovation Park (SPARK), Block B, B38-136, Sharjah, United Arab Emirates , or by email to [email protected].