Privacy Policy

1.0 Purpose

ZAJEL Courier Services ("we", "our", or "us") is committed to protecting the privacy and confidentiality of personal data in compliance with the UAE Personal Data Protection Law (PDPL) and the European Union General Data Protection Regulation (GDPR).

This Privacy Policy explains how we collect, use, process, store, and protect your personal information when you interact with our applications, services, and systems.

2.0 Scope

This policy applies to:

• All users of our mobile applications, websites, and digital services.
• All employees, contractors, and service providers handling personal data on our behalf.
• All personal data processed within or outside the UAE or the European Economic Area.

3.0 Personal Data We Collect

We may collect the following categories of personal data for the purpose of storage and processing:

• Identification Data: Full name, address, employee ID, contact details, device ID, and other identifiers.
• Employment Data: Department, job title, and work location (if applicable).
• Usage Data: Device logs, geo coordinate, login details, and activity records related to app or system use.
• Assessment or Performance Data: Daily responses, activity submissions, and training participation.
• Technical Data: Device information, network data, and app performance statistics.
• We do not collect sensitive personal data (such as biometric, religious, or health data) unless explicitly required and consented to.

4.0 Purpose of Data Processing

We process personal data only for legitimate purposes, including:

• Providing access to and functionality of our services or apps;
• Managing user authentication and access control;
• Tracking daily training completion or employee assessments;
• Ensuring system security, protection against unauthorized access and fraud prevention;
• Fulfilling legal or regulatory obligations;
• Improving our products, mobile applications, website, other digital platforms and user experience.

5.0 Lawful Basis for Processing

Consistent with UAE PDPL and the principles of GDPR (where applicable), we process personal data based on one or more of the following lawful grounds or other grounds as available to us under PDPL:

• Your explicit, informed and free consent for one or more specific purposes as provided under Data Privacy Consent Statement; Performance of a contract where you are a party or to take at your request, procedures for concluding, amending or terminating any contract;
• Compliance with legal obligations and cooperation with law enforcement and regulatory authorities;
• Our legitimate interests, provided with your consent as specified in the Data Privacy Consent Statement and they do not override your rights and freedoms.
• To protect the vital interests of you or another person in emergency situations;
• For performance of tasks carried out in public interest or in the exercise of official authority.

6.0 Data Sharing and Disclosure

We do not sell or rent your personal data. We may share data only with:

• Authorized employees and departments who require it for operational purposes;
• Third-party service providers who process data under strict confidentiality agreements;
• Government or regulatory bodies if required by law;
• Entities involved in business continuity or IT system maintenance, under controlled access conditions.

If your data is transferred outside the UAE or EEA, subject to clause 11 of this Policy, we ensure that the receiving party provides an adequate level of protection consistent with PDPL, GDPR standards and other related laws on data sharing and disclosure.

7.0 Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to meet legal, regulatory, or operational requirements. When data is no longer needed, it will be securely deleted, anonymized, or archived in compliance with applicable data retention laws.

8.0 Data Protection and Security

We implement appropriate technical and organizational measures to safeguard your personal data, including:

• Encryption and secure transmission protocols (HTTPS, SSL/TLS);
• Access controls and authentication mechanisms;
• Regular system monitoring and audits;
• Employee training on data protection and confidentiality.

9.0 Your Rights

Subject to the provisions of UAE PDPL you are entitled to the following rights:

• Right to Access – Request a copy of your personal data.
• Right to Rectification – Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten") – Request deletion of your personal data.
• Right to Restrict or Object – Limit or object to data processing.
• Right to Data Portability – Request transfer of your data to another controller.
• Right to Withdraw Consent – Withdraw your consent at any time, without affecting prior lawful processing.
• Right to Complain – File a complaint with the UAE Data Office or relevant EU Data Protection Authority.

To request any of these rights or rights as available under UAE PDPL, please contact us on contact information as provided under clause 12 of this Policy. For security purposes, we may request additional information to verify your identity before processing requests.

Exercising your rights is free of charge, unless requests are manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee or refuse the request on grounds permitted under UAE PDPL.

10.0 Cookies and Tracking Technologies

(If applicable for web or app use)

We may use cookies or similar technologies to improve user experience, analyze usage, and deliver relevant content. You can modify your browser or app settings to reject cookies, though this may limit some functionality.

11.0 Data Transfers Outside the UAE/EEA

To ensure compliance with best international practices, where personal data is transferred internationally, we ensure compliance with:

• Adequacy decisions recognized under GDPR Article 45; or
• Contractual clauses approved by the UAE Data Office or EU Commission ensuring equivalent protection.

12.0 Contact Information

For any privacy-related inquiries, data access requests, or to exercise your rights, please contact our IT Department at techsupport@zajel.com

13.0 Updates to this Policy

We may update this Privacy Policy periodically to reflect legal, technical, or operational changes. Any updates will be posted on our platform and continued use of our services after updates constitutes acceptance of the revised policy.

14.0 Data Quality and Accuracy

We are committed to maintaining accurate, complete, and up-to-date Personal Data through measures like data verification at collection, regular review and cleansing, and we will correct or delete inaccurate data upon discovery. However, you share the responsibility for Data Quality by providing truthful and accurate information, keeping your account details updated, and promptly notifying us of any inaccuracies, especially concerning critical shipment details; to facilitate this, you can typically review and correct your Personal Data by logging into your user account on our Digital Platforms.

15.0 Consent

By using our services, mobile applications, or systems, you acknowledge that you have read and understood this Data Privacy Policy and consent to the collection, processing, and storage of your personal data as described herein.

16.0 Data Privacy Consent Statement

• ZJL-IT-POL-DPC-00 Data Privacy Consent Statement