This Privacy Policy explains how Zaleo ("Zaleo", "we", "us", or "our") collects, uses, discloses, and protects personal data in connection with the website zaleo.ae (the "Site") and the data remediation, automated reconciliation, and custom mini-application services we provide ("Services"). It is written to align with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL") and its Executive Regulations.
Zaleo currently operates in the United Arab Emirates under a trade license that is in the process of being finalized. Full registration details will be added to this page once the license is issued.
1. Scope of This Policy
This Policy covers two categories of personal data:
- Website visitor data, collected when you browse zaleo.ae or submit one of our forms.
- Service Data, meaning personal data belonging to a client's own employees, contractors, or customers that the client shares with us so we can deliver a specific engagement (for example, payroll, pension, or workforce reconciliation).
2. Who We Are
Zaleo is a UAE-based business offering data cleanup and remediation, automated reconciliation, and custom finance mini-applications. For any privacy question or request, contact us at info@zaleo.ae or +971 50 922 6862.
3. Personal Data We Collect From Website Visitors
- Enquiry and audit-request data: name, email address, phone number, company name, and the selections you make in the audit booking form.
- Technical and usage data: IP address, browser and device type, pages visited, and referring pages, collected automatically as you use the Site.
- Cookies: essential cookies and analytics cookies, described in Section 9 below.
4. How We Use Personal Data, and Our Legal Basis
- To respond to enquiries and audit requests, and to take the steps you request before entering into an engagement (contractual necessity).
- To provide, operate, and improve the Site and our Services (legitimate interest).
- To send information you have asked to receive (consent, which you may withdraw at any time).
- To understand how the Site is used, through analytics (legitimate interest).
- To meet our obligations under UAE law.
5. How We Handle Client Business and Employee Data During Engagements
Certain engagements (such as reconciling payroll, pension, insurance, or workforce data) involve Zaleo processing Service Data belonging to a client's own personnel. In these cases:
- Zaleo acts as a data processor, and the client, as the party who collected that data from its employees in the first place, remains the data controller responsible for having a lawful basis to share it with us.
- We process Service Data only to deliver the agreed engagement, only for its duration, and never for marketing or any unrelated purpose.
- Each engagement involving Service Data is governed by a separate signed agreement (a data processing agreement, statement of work, or service contract) that sets out the specific scope, safeguards, retention period, and deletion or return of the data at the end of the engagement. That signed agreement governs over this Policy for anything specific to that engagement.
- We apply access controls and encryption in transit to Service Data, and limit access to the staff working on the relevant engagement.
6. Sharing With Third Parties
We share personal data only with trusted service providers who help us run the Site and deliver our Services, under confidentiality and data protection obligations. These include providers of:
- Form processing, to receive audit and enquiry submissions.
- Business email.
- Website hosting.
- Website usage analytics.
We do not sell personal data to any third party.
7. International Data Transfers
Some of the service providers above may process data on servers located outside the UAE. Where personal data is transferred internationally, we take reasonable steps to keep an adequate level of protection in place, consistent with PDPL requirements, including relying on the service provider's own security and compliance commitments.
8. How Long We Keep Personal Data
Website enquiry data is kept only as long as needed to respond to and follow up on your enquiry, then deleted or anonymized, unless a longer period is required by law or to establish or defend a legal claim. Service Data is kept for the retention period agreed in the relevant engagement and returned or deleted afterward, unless the client asks us to keep it longer for a specific reason.
9. Cookies
zaleo.ae uses essential cookies needed for the Site to function, and analytics cookies to understand how visitors use the Site. You can control or disable cookies through your browser settings; disabling some cookies may affect how parts of the Site work.
10. Your Rights
Under the PDPL, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate personal data.
- Request erasure of your personal data, subject to legal exceptions.
- Request that we restrict how we process your personal data.
- Object to processing, including for direct marketing.
- Receive your data in a structured, commonly used, machine-readable format.
- Withdraw consent at any time, where processing relies on consent, without affecting anything done before the withdrawal.
- Lodge a complaint with the UAE Data Office if you believe your data has been processed unlawfully.
To exercise any of these rights, contact info@zaleo.ae. We will respond within the timeframe required under applicable law.
11. Security
We apply reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or loss, including encryption of data in transit (HTTPS/TLS) and restricted access controls, alongside the engagement-specific safeguards described in Section 5.
12. Children
The Site and our Services are directed at businesses and are not intended for individuals under 18. We do not knowingly collect personal data from children.
13. Changes to This Policy
We may update this Policy from time to time. The "Last updated" date at the top reflects the most recent revision, and we will highlight material changes here.
14. Contact Us
Zaleo
Email: info@zaleo.ae
Phone: +971 50 922 6862
Website: www.zaleo.ae