Whizz Exim FZE — Privacy Policy

1. Scope

This Privacy Policy describes how Whizz Exim FZE ("Whizz Exim", "we", "us") collects, uses, discloses, and safeguards personal data when you access our websites, communicate with us, or use our products and services. By using our services, you agree to the practices described here.

Regional laws: We operate from the UAE and handle personal data in line with applicable laws, including the UAE Federal Decree‑Law No. 45/2021 on Personal Data Protection ("UAE PDPL"). If you are located in other jurisdictions (e.g., EU/UK), we will respect rights afforded by local laws where required.

2. Data we collect

2.1 Data you provide

• Contact details (name, company, email, phone, address).
• Business correspondence (RFQs, purchase orders, invoices, support requests).
• Account & authentication (if you create an account on our portals).
• Payment information (billing details; we use compliant payment processors and do not store full card numbers).

2.2 Data we collect automatically

• Device & usage (IP address, browser, operating system, pages viewed, time on page).
• Cookies & similar (to remember preferences, analyze traffic, and improve services).
• Logs (security, error, and performance logs).

2.3 Data from third parties

• Logistics & compliance partners (KYC/AML checks, trade compliance screening).
• Marketing & analytics providers (traffic insights; aggregated reporting).

3. How we use data

• Provide, operate, and improve our websites, products, and services.
• Process and fulfill RFQs, quotes, orders, deliveries, and after‑sales support.
• Communicate with you about inquiries, account notices, policy changes, and service updates.
• Personalize content and measure engagement and site performance.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Comply with legal obligations, trade controls, sanctions, and audit requirements.
• With your consent where required, send marketing communications (you can opt out at any time).

4. Legal bases

Where required by law (e.g., under GDPR/UK GDPR), we process personal data on one or more of the following legal bases:

• Contract: to perform a contract with you or take steps at your request before entering into a contract.
• Legitimate interests: to run and protect our business, improve services, and communicate with customers.
• Consent: where we rely on your consent (e.g., certain marketing or cookie categories).
• Legal obligation: to comply with applicable laws, regulations, and requests from authorities.

5. Sharing

We share personal data with:

• Service providers (hosting, IT, payment processing, logistics, customer support) under contracts requiring confidentiality and appropriate safeguards.
• Business partners for fulfillment and trade compliance where necessary.
• Professional advisors (legal, accounting, audit) under duties of confidentiality.
• Authorities when required by law or to protect rights, safety, and property.
• Corporate transactions in the event of a merger, acquisition, or asset transfer, subject to this policy or a substantially similar one.

We do not sell personal data.

6. International transfers

Your data may be processed in countries other than your own. Where required, we implement appropriate safeguards (such as contractual clauses) to protect your information when it is transferred internationally.

7. Security

We use administrative, technical, and physical safeguards proportionate to the risks involved, including access controls, encryption in transit, secure development practices, and regular monitoring. However, no system is 100% secure.

8. Retention

We retain personal data only as long as necessary for the purposes described above, including to satisfy legal, tax, accounting, or reporting requirements and to establish or defend legal claims.

9. Your rights

Your rights may include the ability to request access, correction, deletion, restriction, objection, portability, or to withdraw consent. To exercise these rights, contact us at info@whizzexim.com. We will respond as required by applicable law.

10. Cookies

We use essential and optional cookies. You can control cookies through your browser settings and, where available, our cookie banner or preferences center. Disabling some cookies may affect site functionality.

11. Third‑party links

Our websites may link to third‑party sites. We are not responsible for their privacy practices. We recommend reviewing the privacy policies of those sites.

12. Children

Our services are not directed to children under the age required by local law. We do not knowingly collect personal data from such children.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Effective" date. Material changes will be communicated where required.

14. Contact