Privacy Policy
dzdubai.com

DZ Prestige Car Rental L.L.C. (trading as “dzdubai.com”)

• Effective date: [21 October 2025]
• Last updated: [21 October 2025]

1. Who we are (Controller)

DZ Prestige Car Rental L.L.C. (“we”, “us”, “our”), trading as dzdubai.com, is the data controller for personal data processed through this website and our customer operations.

1. Legal name: DZ Prestige Car Rental L.L.C.
2. Trade name: dzdubai.com
3. Licensing Authority: Dubai DED
4. Trade License No.: XXXXX (to be updated)
5. TRN (VAT): XXXX (to be updated)
6. Registered Address: XXXX (to be updated)
7. Privacy contact: privacy@dzdubai.com
8. General support:dzdubairental@gmail.com

This Policy explains what we collect, why, how long we keep it, who we share it with, your rights, and how to contact us.

2. Scope

This Policy covers data collected through:

• our website dzdubai.com and its subpages;
• our communications by email and WhatsApp;
• our proprietary support chat embedded on the site.

It does not cover third-party websites you may visit through outbound links.

3. What data we collect

We collect only what is necessary for providing and improving our services.

3.1 Information you provide

• Contact & identity: name, email, phone/WhatsApp, country of residence.
• Booking details: dates, vehicle preference, delivery/pick-up location in Dubai, special requests.
• Support messages: content of messages you send to us (email/WhatsApp/chat).
• Documents: We do not currently collect KYC documents online (no passport/Emirates ID/driver’s licence uploads on the website). Such documents may be verified in person at handover.

3.2 Information we collect automatically

• Device & usage data: IP address, device/browser type, pages viewed, session duration, referral URL, approximate geolocation (city/region), error logs.
• Cookies/IDs: analytics identifiers, ad cookies/IDs, and cookie consent preferences (see §8).

3.3 Information from third parties

• Google Analytics & Ads: aggregated metrics (audience, conversions, remarketing audiences).
• Search Console: search performance diagnostics (queries, impressions, clicks) — no direct personal identifiers.
• Meta Pixel: ad performance and remarketing events (page views, lead intent).

4. Purposes & legal bases (PDPL – UAE)

We process personal data only when we have a valid legal basis under the UAE PDPL. Below is a concise summary:

• Provide and operate the website (page delivery, uptime, security, load-balancing) — Legitimate interests
• Handle enquiries & pre-booking (forms, WhatsApp/email replies, availability checks) — Contract (pre-contract steps) / Legitimate interests
• Booking pipeline (quotations, delivery scheduling, customer support) — Contract
• Customer communications (service updates, reminders, non-marketing notices) — Contract / Legitimate interests
• Analytics / performance measurement (Google Analytics) — Consent (non-essential cookies)
• Advertising & remarketing (Google Ads, Meta Pixel) — Consent (ad cookies/IDs)
• Security & fraud prevention (rate-limiting, abuse detection, incident response) — Legitimate interests
• Compliance & lawful requests (consumer protection, police/authorities) — Legal obligation

No online payments today. If/when online payments are added, card data will be handled by a payment processor and this section will be updated accordingly.You can withdraw consent for analytics/ads at any time via Manage Cookies; this does not affect processing based on contract, legitimate interests, or legal obligations.

5. Communications & marketing

• Channels we use: email and WhatsApp (no phone calls for marketing).
• When we contact you: to answer your enquiry, send booking information, or share relevant updates.
• Marketing messages: sent only with your consent (you can opt out any time via reply or by contacting privacy@dzdubai.com

6. Sharing your data (processors & recipients)

We share data only with trusted service providers, under contracts that require them to protect your data and use it solely on our instructions:

• Hosting / website platform: Webflow (and its CDN/infrastructure providers).
• Email / messaging: Twilio (for transactional emailing/SMS/WhatsApp when applicable).
• Analytics / Ads: Google Analytics, Google Ads (including remarketing), Google Search Console, Meta Pixel.
• Internal tools: our own support chat (developed by dzdubai.com).
• Public authorities: police/consumer protection/competent authorities when required by law.

We do not sell your personal data.

7. International transfers

Our main business operations are in the UAE. However, some vendors (e.g., hosting/CDN, analytics, ad platforms) may process data in other countries (e.g., EU/US/other). Where such transfers occur, we implement appropriate safeguards (contractual and technical) to protect your data, consistent with PDPL requirements.

8. Cookies & tracking technologies

We use cookies and similar technologies. You can manage preferences via our “Manage Cookies” link in the footer.

Categories

• Strictly necessary (always active): security, load balancing, basic site functionality.
• Performance/Analytics (consent): Google Analytics (page views, events, aggregated usage).
• Advertising/Remarketing (consent): Google Ads & Meta Pixel (to measure and personalise ads).

Your choices

• On first visit, you can accept or reject non-essential cookies.
• You can change your mind at any time via Manage Cookies.
• Browser settings can also limit cookies; doing so may affect site performance.

Notes for EU/EEA visitors

• We respect opt-in consent for non-essential cookies (analytics/ads).
• We may implement Consent Mode to honour your choices for Google tags.

9. Data retention

We keep personal data only as long as needed for the purposes in this Policy or to meet legal requirements. When a period ends, we delete or anonymise the data, unless a legal hold applies (e.g., dispute or request from an authority).

• Enquiry / booking pipeline (contact details, messages) — 12–24 months after last interaction
• Operational records (delivery scheduling, internal notes) — up to 3 years
• Customer communications (email / WhatsApp / chat) — up to 3 years
• Web analytics (aggregated, Google Analytics) — 13–26 months (per settings)
• Cookie consent logs / preferences — 13 months
• Security / error logs — 6–12 months
• Business / accounting records (if applicable) — 5–10 years (legal requirement)

Note: Deleted items may persist briefly in encrypted backups until overwritten by routine cycles.

10. Security

We apply technical and organisational measures to protect your data, including TLS encryption in transit, access controls, least-privilege principles, monitoring, backups, and incident response processes. No method of transmission or storage is 100% secure; we continuously improve our safeguards.

11. Children

Our services are not intended for persons under 21. We do not knowingly collect data from children. If you believe a minor has provided data, contact privacy@dzdubai.com

12. Your rights

Under the UAE PDPL, you may have the right to access, rectify, erase, restrict, port, or object to certain processing, and to withdraw consent where processing is based on consent.

• How to exercise: email privacy@dzdubai.com with a description of your request. We may need to verify your identity and may ask for information to locate your data.
• Response time: we aim to respond within 30 days.
• You also have the right to lodge a complaint with the competent UAE authority if you believe your rights are infringed.

13. Third-party services we use (disclosures)

• Google Analytics: measures website usage (pages visited, events). Google may set cookies/IDs in your browser. Learn more at Google’s help pages and opt-out options.
• Google Ads (incl. remarketing): helps show and measure ads. Ad cookies/IDs may personalise ads. You can manage ad personalisation in your Google account.
• Google Search Console: provides site diagnostics; it does not collect personal data from you on our behalf.
• Meta Pixel: helps measure and optimise our ads on Meta platforms and build remarketing audiences, subject to your cookie choices.
• Twilio: delivers transactional emails/SMS/WhatsApp we send to you (if used).

(We keep an internal list of sub-processors and will update this Policy if we materially change vendors or purposes.)

14. Do Not Track / Global Privacy Control

Some browsers offer “Do Not Track” or GPC signals. Our cookie banner is the primary way to control non-essential cookies; we also endeavour to respect supported browser-level signals where feasible.

15. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date shows the latest version. Significant changes will be communicated on this page and, where appropriate, by email/notice on the site.

16. Contact

• Privacy:privacy@dzdubai.com
  
• Support:dzdubairental@gmail.com
• Postal address:XXXX(to be updated)

‍