Privacy Policy
Last updated: 30 September 2026 · Applies to the website zouqdelivery.com and the ZOUQ Delivery Android app (package ae.zouqdelivery.rider).
1. Who we are
Al ZOUQ Delivery Services L.L.C ("ZOUQ", "we", "us") is a delivery services company established in the United Arab Emirates. We are the controller of the personal information described in this policy. This policy is about ZOUQ Delivery only; it does not cover any other company or brand.
If you have a question about this policy or about your information, email us at info@zouqdelivery.com or contact the ZOUQ office through our contact page. Riders can also raise a request from the Help section inside the app.
2. What this policy covers
It has two parts. Part A covers our public website. Part B covers the ZOUQ Delivery Android app, which is a private tool for riders and staff who work with ZOUQ — it is not for the general public and cannot be used without an account issued by the ZOUQ office. Part C applies to both.
Part A — The website
A1. What we collect on the website
You can browse the whole website without giving us any personal information. We collect information only when you use one of our three forms: the rider application ("Join as a Rider"), the business enquiry, or the contact form. Depending on the form, that is your name, telephone number, email address, the emirate you are in, your location, driving licence and delivery experience details, your company name, the service and volume you are interested in, and the text of your message.
With each submission we also record the page the form was sent from, your browser's user-agent string, and a one-way hashed (irreversible) form of your network address. We use these only to protect the forms against spam and abuse; we do not store your actual IP address with the enquiry.
A2. Why we use it
We use form data to answer your enquiry, to assess rider applications and start our recruitment process if you proceed, and to keep the website secure. We do not sell personal information and we do not use website form data for unrelated marketing.
A3. Cookies and third-party services
The website sets one session cookie from our own server so that the forms are protected against forged submissions. It contains no personal information, is not used for advertising or tracking, and expires when you close your browser. The website does not use analytics, advertising or social-media tracking cookies.
Page fonts are loaded from Google Fonts, so your browser makes a request to Google when a page loads; Google's privacy policy applies to that request. Links to WhatsApp or Google Maps take you to those services, which have their own policies.
A4. Who sees website enquiries
Enquiries are stored in ZOUQ's own management system and are seen by ZOUQ operations, recruitment and management staff with permission to handle them. A copy may be emailed to the ZOUQ mailboxes configured to receive enquiries. We share enquiries with third parties only where needed to provide the service you asked about, or where the law requires it.
A5. How long we keep website enquiries
Enquiries are kept while they are open and afterwards for our records. We do not currently apply an automatic deletion period to enquiries; you can ask us to delete your enquiry at any time using the contact details above, and we will do so unless we have a legal reason to keep it.
Part B — The ZOUQ Delivery Android app
B1. Who the app is for
The app is issued to delivery riders and staff who work with ZOUQ. It connects to ZOUQ's own management system over an encrypted (HTTPS) connection. You sign in with the login ID or mobile number registered with the ZOUQ office and a PIN. There is no self-registration.
B2. Information the app sends to ZOUQ
Sign-in details. Your login ID (or registered mobile number) and PIN, and where you choose to use it, a device-bound secret for face or fingerprint sign-in. Your PIN is stored only as a salted hash. For each sign-in we also record the date and time, your network (IP) address, your device platform and the app version.
Device information. When you open the app, and about every five minutes while it is open, the app reports a device identifier (derived from Android's device ID), the device make and model, the Android version, the app version, the state of the location permission and whether location services are on, and — if push notifications are enabled — a push notification token. This lets the office see which device is signed in and whether location sharing is working.
Location. See section B3.
Things you submit. Help requests (subject, message and any JPEG, PNG or PDF attachments up to 15 MB), replies to requests, pre-arrival travel details (expected arrival date, flight number, departure and arrival airports, remarks and a copy of your ticket), and PIN changes. Files are stored as you upload them; we do not currently remove embedded metadata (such as camera location tags) from photos you attach, so please check a photo before you send it if that concerns you.
Face or fingerprint sign-in. Your biometrics never leave your phone. Android's own biometric prompt unlocks a key kept in your phone's secure hardware; the app then sends only a random secret that ZOUQ issued to that device. ZOUQ never receives your face, fingerprint or PIN.
B3. Background location — how, when and why
Why. ZOUQ uses your location so that the operations team can coordinate and support riders on duty, respond to safety incidents and manage delivery work. It is not used for advertising and is not sold.
Consent first. Location sharing starts only after you accept the in-app consent screen. Your acceptance is recorded with the date, the consent version, your device and the permission you granted. The app then asks Android for location permission and, on Android, for "Allow all the time" so that sharing continues while the app is in the background. ZOUQ's server refuses location reports from any account that has no recorded active consent.
How it works. While you are signed in and location sharing is active, the app runs an Android foreground service with a persistent notification ("ZOUQ Delivery" location sharing). It reads your position from the phone's fused location provider about every 30 seconds (never more often than every 25 seconds) and sends your latitude, longitude, accuracy, speed, heading, the time of the reading and your device identifier to ZOUQ. Readings with an accuracy worse than 100 metres are discarded and never sent. If you have granted "Allow all the time", Android may restart the service after a reboot or app update so that sharing resumes.
When it runs. The app collects location whenever you are signed in with location sharing active and the permission granted — including while the app is in the background. The app does not itself check your shift or duty roster before sending a reading. Sharing stops when you sign out, when the app's sign-in expires or is revoked, when the ZOUQ office switches your location sharing off, or when you remove the location permission in your phone's settings. There is no stop switch inside the app; the persistent notification opens the app. If you turn off the permission or location services, the app reports that state to the office and stops sending positions.
Who can see it. Your current position is shown on a live map inside ZOUQ's management system to a small number of authorised administrators. Managers who view your rider record can see whether location sharing is on, when you consented and which permission your phone reports, but not your coordinates. Location history is stored on ZOUQ's server and is not shown in day-to-day screens; it is accessed only by authorised ZOUQ administrators when needed, for example to investigate an incident.
How long it is kept. Your latest position is overwritten by each new reading. Individual location readings and your consent record are kept on ZOUQ's server; we do not currently apply an automatic deletion period to them. You can ask the ZOUQ office what location data we hold about you, and ask for it to be deleted, at any time (see Part C).
B4. Information the app shows you
The app displays information that ZOUQ already holds about you as your employer or engaging company: your profile (name, ZOUQ ID, mobile, email, nationality, project, branch, route, employment status and joining date), the expiry dates of your passport, Emirates ID, visa, labour card and driving licence, documents the office has shared with you, your platform IDs and assigned vehicle, SIM and equipment, published payslips, traffic fines and loan or advance recoveries, your help requests and notifications. Each download of a shared document is logged with the date and your network address.
B5. Push notifications
If you allow notifications, the app registers with Firebase Cloud Messaging (a Google service) and sends the resulting token to ZOUQ. When there is an update for you, ZOUQ sends Google a message containing your token, a generic title and body ("ZOUQ — you have an update"), and internal reference numbers such as a ticket number. The content of your request is never included in the push message; you see it only after opening the app.
B6. Permissions the app asks for
Internet and network state (to reach ZOUQ's server); precise location, background location, foreground service and notifications (for on-duty location sharing and the persistent notification); receive boot completed (to resume sharing after a restart when you have allowed it); biometric (face or fingerprint sign-in); and "install unknown apps", which is used only for the in-app updater described in B7. The app does not request access to your contacts, camera, microphone, calendar, call logs or SMS.
B7. App updates and security on your phone
The app can download a new signed version of itself from ZOUQ's own server and ask Android's installer to install it; you approve every installation on Android's own screen. Your sign-in token is stored in Android's encrypted storage, never in plain text. The app blocks screenshots and task-switcher previews so that your documents cannot be captured by other apps, and it does not back up its data to cloud backup. The app contains no advertising, analytics or crash-reporting software.
B8. Third parties
The app talks only to ZOUQ's own server (erp.zouqdelivery.com), Google Fonts (page fonts) and, if you enable notifications, Google's Firebase Cloud Messaging. We do not share rider data with data brokers or advertisers. We disclose personal information to government authorities, courts or regulators where UAE law requires it, and to our banks, insurers or service providers only as needed to run our business with you (for example to pay you).
B9. How long we keep app data
Employment and HR records shown in the app are kept for the duration of your engagement with ZOUQ and afterwards for as long as UAE labour, immigration, tax and accounting laws require. Sign-in tokens expire after 90 days and are revoked when you sign out, when a device is removed or when your account is blocked. Device, consent, notification and location records are kept on ZOUQ's server and, as explained in B3, are not currently deleted automatically; they are deleted on request or when the office reviews the record, except where we must keep them by law.
Part C — For both the website and the app
C1. Security
All traffic between your browser or phone and ZOUQ is encrypted with HTTPS. PINs and sign-in tokens are stored only as hashes. Access to the management system is limited to ZOUQ staff with a role that needs it, and sensitive actions are recorded in an audit log.
C2. Your rights
You may ask us what personal information we hold about you, ask for it to be corrected, ask for it to be deleted where we have no continuing legal or contractual need for it, or object to a particular use. Riders may withdraw their location-sharing consent by asking the ZOUQ office, or stop the collection immediately by removing the location permission in the phone's settings or signing out of the app. To exercise any of these rights, email info@zouqdelivery.com or use the contact page; riders can also use the Help section in the app. We may need to verify your identity before acting on a request.
C3. Children
The website's forms and the app are intended for adults. We do not knowingly collect information from anyone under 18.
C4. Where data is processed
ZOUQ's systems are operated for a UAE company. Google services referred to above (Fonts, Firebase Cloud Messaging) may process the limited data described in this policy outside the UAE under Google's own terms.
C5. Changes to this policy
We may update this policy as the website or app changes. The date at the top shows when it was last revised. Material changes that affect riders will also be announced through the app or the ZOUQ office.
C6. Governing law
This policy and our handling of personal information are governed by the laws of the United Arab Emirates, including applicable federal data protection law.