Privacy Policy

2. Scope and Applicable Law

This Privacy Policy applies to all personal data processed by Muhasib in connection with the provision of the Service. It applies regardless of whether the processing occurs through electronic automated means or other means.

Muhasib processes personal data in accordance with the UAE Federal Decree-Law No. (45) of 2021 on the Protection of Personal Data (the "PDPL" or "Data Protection Code"), as amended by Federal Decree-Law No. (14) of 2023, and all applicable implementing regulations. The PDPL governs the processing and control of personal data and applies to any natural person residing in the UAE whose personal data is being processed or controlled.

3. Definitions

For the purposes of this Privacy Policy:

• "Biometric Data" — Personal Data resulting from Processing, using a specific technique, relating to the physical, physiological, or behavioral characteristics of a Data Subject, which allows or confirms the unique identification of the Data Subject, such as facial images or dactyloscopic data.
• "Controller" or "Data Controller" — An establishment or natural person who has Personal Data and who, given the nature of his/her activity, specifies the method, criteria, and purpose of Processing such Personal Data, whether individually or jointly with other persons or establishments. For the purpose of this Privacy Policy, Muhasib acts as a Controller with respect to Your information collected via the Platform.
• "Data Subject" — The natural person who is the subject of the Personal Data.
• "Personal Data" — Any data relating to an identified or identifiable natural person within the meaning of the PDPL, which is processed by Muhasib as a Data Processor on behalf of our Customers in connection with the Service.
• "Processing" — Any operation or set of operations performed upon Personal Data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction.

4. Information We Collect

4.1 Information You Provide Directly to Us

We collect information that You voluntarily provide to us when You:

• Account Registration: Full name, email address, phone number, company name, job title, billing address, and VAT registration number (if applicable).
• Service Use: Any information, data, content, financial records, transactional information, and other materials that You submit, upload, transmit, or otherwise make available through the Service (such information is processed by Muhasib as a Data Processor on behalf of You as Controller and is governed by the Data Processing Addendum).
• Payment Processing: Payment method information (such as credit card number, expiration date, and CVV) when You subscribe to the Service. Payment information is collected and processed by our third-party payment processor and is not stored by us, except to the extent necessary to complete the transaction.
• Communications with Us: Information contained in any correspondence You send to us via email, phone, or through the Platform, including support requests, inquiries, feedback, and dispute resolution communications.
• Marketing and Event Participation: Information You provide when You subscribe to our newsletters, download whitepapers, register for webinars or events, or participate in surveys or promotions.

4.2 Information Collected Automatically

When You access or use the Platform, we may automatically collect certain information about Your device and usage patterns: IP address, browser type and version, operating system, device type, unique device identifiers, mobile network information, pages visited, time and date of access, duration of visits, clickstream data, and approximate geographic location derived from IP address.

4.3 Information Received from Third Parties

We may receive information about You from third parties in connection with Your use of the Platform, including payment processors, single sign-on providers, and business partners.

4.4 Sensitive Personal Data

We do not intentionally collect or process Sensitive Personal Data through the Platform unless You explicitly choose to provide such information in the course of using the Service.

5. How We Use Your Information

We use the information we collect for the following purposes: provide and maintain the Service; process payments; communicate with You; improve and develop the Service; ensure security and prevent fraud; comply with legal obligations; and send marketing communications where permitted.

6. How We Share Your Information

We may share Your personal data with service providers who perform services on our behalf, in connection with business transfers, for legal compliance and enforcement, or with Your consent.

7. Data Subject Rights

Under the PDPL, You have rights including access, rectification, erasure, restriction, portability, and objection. To exercise rights, contact privacy@zellarc.ae.

8. Data Security

We implement appropriate technical and organizational security measures including encryption in transit and at rest, access controls, monitoring, testing, and personnel security.

9. Data Retention

We retain personal data only as long as necessary for the purposes described, subject to legal retention requirements. Specific retention periods are set out in the full Privacy Policy.

10. International Data Transfers

International transfers are conducted in compliance with the PDPL using adequate safeguards, standard contractual clauses, or explicit consent.

11. Cookies and Tracking Technologies

We use cookies and similar technologies (essential, functional, analytics, marketing) and provide users with choices to manage cookies via browser settings.

12. Children's Privacy

The Platform is not intended for individuals under 18.

13. Third-Party Links and Services

The Platform may contain links to third-party services; we are not responsible for their privacy practices.

14. Updates to This Privacy Policy

We may update this Privacy Policy and will notify users of material changes.

15. Contact Us

Data Protection Officer (DPO): dpo@zellarc.ae

General Inquiries: info@zellarc.ae