Privacy
Policy.
This notice explains what personal data ZAADCORE FZC LLC collects through zaadcore.com, why we collect it, who we share it with and what you can ask us to do about it. It is written to Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data — the UAE PDPL.
1. Who we are
ZAADCORE FZC LLC (“ZaadCore”, “we”, “us”, “our”) is the data controller for the personal data described in this notice — we decide what is collected through this website and why.
- Legal name: ZAADCORE FZC LLC
- Registered address: 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates
- Operating from: Dubai, United Arab Emirates
- Email: hello@zaadcore.com
- Phone and WhatsApp: +971 54 146 2454
We have not appointed a Data Protection Officer, as our processing does not meet the thresholds in Article 10 of the PDPL. Data protection questions and requests go to hello@zaadcore.com.
2. What this policy covers
It covers zaadcore.com — our marketing pages, product and service pages, the free tools, and the contact form.
It does not cover two things:
- Data inside our products. When a customer uses ZaadWorks, ZaadBooks, ZaadCRM or ZaadRoute, that customer decides what employee, supplier and client data goes into the system. For that data the customer is the controller and ZaadCore acts as a processor on its instructions, under the service agreement and data processing terms signed with them — not under this notice.
- Other companies’ websites and apps we link to, including WhatsApp, LinkedIn, Instagram and X. Their own privacy notices apply there.
3. Personal data we collect
Data you give us
- Contact form: your name, work email, company name (optional) and the message you write.
- Free tools: the domain, URL or brand name you enter, and — after your free runs — a work email address to unlock the full report.
- Direct contact: anything you choose to tell us by email, WhatsApp, phone or on a call, including details of your business and project.
Data collected automatically
- Pages you view, the link or ad that brought you, and how long you stayed.
- Approximate location derived from your IP address — country and city level, not a street address.
- Device and browser type, screen size, language and operating system.
- Interactions such as clicking a call-to-action or running one of the free tools.
Data we receive from others
- Aggregated campaign reporting from advertising platforms — how many people saw or clicked an ad. This does not identify individuals to us.
- If you submit a lead form on Facebook or Instagram, we receive the details you entered there: typically name, email, phone number and company.
We do not ask for, and do not want, government identity documents, payment card numbers, health data, biometric data or any other sensitive personal data through this website. Please do not include them in a form or a message.
4. What happens when you submit a form
We would rather be specific than vague, so:
- The contact form sends what you typed to our enquiry inbox through an automation service, then opens WhatsApp with the same message pre-filled. Nothing reaches WhatsApp until you press send there; once you do, the conversation is also processed by Meta under WhatsApp’s own terms.
- The free tools record which tool you ran and the domain, URL or brand you entered, so we can follow up usefully. If you have given us an email to unlock a report, it is attached to that record.
- The WPS SIF Validator runs entirely inside your browser. Payroll files are read locally and are never uploaded to us or to anyone else — only the fact that the tool was used is recorded.
- Your email is remembered in your own browser so you are not asked for it again. See section 6.
5. Why we use it, and our lawful basis
Article 4 of the PDPL requires your consent unless one of its listed exceptions applies. Where we do not rely on consent, the basis is shown below.
We do not make decisions about you by automated means alone, and we do not profile you in a way that produces legal consequences.
7. Advertising on Meta and Google
We advertise on Meta platforms — Facebook, Instagram, Messenger and WhatsApp — and on Google. When a campaign is running we use Meta Business Tools, meaning the Meta Pixel and/or the Conversions API, together with Google advertising tags on this website.
What is shared with Meta
- Events describing what happened on the site: a page view, a click on a call-to-action, a completed contact form.
- Technical identifiers that come with those events, such as cookie identifiers, your IP address, browser and device information, and the page address.
- Where you have given it to us, a hashed email address, used only to match the event to an account and improve measurement accuracy.
We do not send Meta or Google any sensitive personal data, any payroll or HR records, or any data belonging to our customers’ systems.
Meta processes this information partly on our instructions and partly for its own purposes, as described in the Meta Privacy Policy . Google’s handling is described in the Google Privacy Policy .
Your controls
- Your activity off Meta technologies lets you see and disconnect what businesses like ours send to Meta.
- Meta ad preferences and Google My Ad Center control the ads you are shown.
- Blocking third-party cookies in your browser stops most of this collection at source.
Lead forms
If you fill in a lead form inside Facebook or Instagram, Meta passes us the details you entered. We use them only to respond to your enquiry, on the basis described in section 5, and keep them as set out in section 10.
9. Transfers outside the UAE
Some of the providers above process data outside the United Arab Emirates, including in the European Union and the United States.
Where the UAE Data Office has decided that a country provides an adequate level of protection, we rely on that decision. Where it has not, we transfer data under contractual safeguards obliging the provider to protect it to UAE standards, or under one of the exceptions in Articles 22 and 23 of the PDPL — in particular where the transfer is necessary to perform a contract with you, or where you have consented and the transfer does not conflict with UAE public or security interests.
10. How long we keep it
- Enquiries that do not become projects: up to 24 months after our last contact, then deleted or anonymised.
- Customer and contract records: for the life of the relationship and afterwards for at least five years, as UAE commercial and tax law requires.
- Free tool records: up to 24 months.
- Analytics data: up to 14 months in Google Analytics.
- Local storage in your browser: until you clear your browsing data.
When a retention period ends the data is deleted, or anonymised so it can no longer be linked back to you.
11. How we protect it
The site is served over HTTPS, access to enquiry data is limited to the people who need it, accounts use strong authentication, and we review the providers we rely on. No system is perfectly secure, and we do not claim otherwise.
If a breach occurs that is likely to prejudice the privacy, confidentiality or security of your data, we will notify the UAE Data Office and, where required, you — as Article 9 of the PDPL requires.
12. Your rights under UAE law
Under the PDPL you may ask us to:
- Give you access to the personal data we hold about you, and a copy of it in a readable format.
- Transfer it to you or to another controller in a structured, machine-readable form, where that is technically possible.
- Correct data that is inaccurate or incomplete.
- Delete data we no longer need, unless we must keep it by law.
- Restrict or stop processing, including stopping direct marketing at any time.
- Object to automated processing that produces legal consequences for you.
- Withdraw consent you previously gave, without affecting anything done before you withdrew it.
Email hello@zaadcore.com with “Data request” in the subject line. We may ask you to confirm your identity, and we aim to respond within 30 days. Exercising these rights is free.
If you are not satisfied with our response, you may complain to the UAE Data Office — the federal authority supervising personal data protection in the United Arab Emirates.
13. Children
This website sells business software and services. It is not directed at children, we do not knowingly collect personal data from anyone under 18, and if we learn that we have, we delete it. If you believe a child has sent us personal data, contact us and we will remove it.
14. Other websites
Our pages link to third-party sites — WhatsApp, our social profiles, partner sites and the ZaadWorks application at its own address. We are not responsible for their content or their privacy practices. Read their notices before giving them personal data.
15. Changes to this policy
We update this notice when the site or the law changes. The date at the top always shows the current version, and where a change materially affects how we use your data we will say so on this page before it takes effect.
16. Contact us
Questions, requests or complaints about privacy:
- Email: hello@zaadcore.com
- Phone and WhatsApp: +971 54 146 2454
- Post: ZAADCORE FZC LLC, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates
This notice is provided for transparency and is not legal advice. If your organisation needs a data protection assessment of its own, we are happy to point you to a UAE adviser.