Privacy Policy

1. Data Controller Identity

Zenfo Auto Services operates jeepservicemussafah.ae as the data controller responsible for personal data collected through this website. Zenfo Auto Services is registered in the United Arab Emirates and operates as a certified Jeep specialist workshop in Mussafah, Abu Dhabi. Legal name: Zenfo Auto Services Website: jeepservicemussafah.ae Operating jurisdiction: United Arab Emirates Governing privacy regulation: UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) All data processing activities conducted by Zenfo Auto Services comply with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and any subsequent amendments issued by the UAE Data Office.

2. Personal Data Collected

Zenfo Auto Services collects 3 categories of personal data through jeepservicemussafah.ae: data submitted directly by users, data collected automatically, and data received from third-party service providers.

Data Submitted Directly by Users

Zenfo Auto Services collects the following data when users submit service booking requests, contact forms, or inspection requests on jeepservicemussafah.ae:

Full name
Mobile phone number (UAE format)
Location or workshop drop-off address within the UAE
Vehicle make, model, year, and chassis code
WhatsApp contact number (if different from mobile)
Email address (for service report and warranty certificate delivery)

Data Collected Automatically

jeepservicemussafah.ae automatically collects the following technical data when users visit the website:

IP address and approximate geographic location (emirate level)
Browser type and version
Device type (mobile, desktop, tablet)
Pages visited and time spent on each page
Referral source (search engine, direct, referral link)
Date and time of website visit

Data Received from Third-Party Providers

Zenfo Auto Services receives anonymized performance data from Google Analytics 4 and Google Search Console to measure website traffic and search visibility. This data does not include personally identifiable information.

3. Purpose and Legal Basis for Processing

Zenfo Auto Services processes personal data for 4 defined purposes, each with a corresponding legal basis under UAE Federal Decree-Law No. 45 of 2021.

Purpose	Data Used	Legal Basis
Processing and fulfilling Jeep service and repair bookings	Name, phone, location, vehicle details	Performance of a contract (Article 4, PDPL)
Issuing written service reports and repair warranty certificates	Name, email, phone, vehicle and parts details	Performance of a contract (Article 4, PDPL)
Coordinating technician dispatch and workshop scheduling	Location, phone, WhatsApp number	Performance of a contract (Article 4, PDPL)
Website performance analytics	Anonymized traffic data	Legitimate interest (Article 5, PDPL)

No marketing use without consent: Zenfo Auto Services does not send promotional SMS, email, or WhatsApp messages to customers without explicit prior consent. Service booking confirmations and repair warranty communications are service communications, not marketing communications.

4. Data Sharing and Third-Party Disclosure

Zenfo Auto Services does not sell, rent, or trade personal data to any third party. Personal data is shared with 3 categories of service providers strictly for operational purposes.

Operational Service Providers WhatsApp Business (Meta Platforms):

Booking confirmations, service updates, and warranty certificates are delivered via WhatsApp. Meta's Privacy Policy governs Meta's data processing practices. Google LLC: Website analytics are processed through Google Analytics 4. Google processes anonymized traffic data in accordance with Google's Privacy Policy and the Google Ads Data Processing Terms.

UAE-licensed waste and parts disposal partners

Customer vehicle information is not shared with disposal partners. Only physical components are transferred for certified disposal under Federal Law No. 24 of 1999.

Legal Disclosure Requirements

Zenfo Auto Services discloses personal data to UAE government authorities, regulatory bodies, or law enforcement agencies when required to do so by a valid legal order, court judgment, or statutory obligation under UAE law. No voluntary disclosure occurs outside these requirements.

5. Data Retention Periods

Zenfo Auto Services retains personal data for the minimum period required to fulfill the purpose for which it was collected, in accordance with UAE Federal Decree-Law No. 45 of 2021.

Data Type	Retention Period	Reason
Booking records (name, vehicle, location)	24 months	Warranty support and dispute resolution
Service reports and warranty certificates	36 months	12-month warranty coverage plus 24-month post-warranty audit period
Website analytics data	14 months (Google Analytics default)	Year-over-year performance comparison
WhatsApp communication logs	12 months	Customer support and warranty verification

Personal data is deleted or anonymized upon expiry of the applicable retention period, unless a longer retention period is required by UAE law.

6. Your Rights Under UAE Law

UAE residents hold 6 rights over their personal data under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

Right of access: Request a copy of all personal data Zenfo Auto Services holds about you.
Right of rectification: Request correction of inaccurate or incomplete personal data.
Right of erasure: Request deletion of personal data, subject to legal retention obligations.
Right to restrict processing: Request that processing of your data be limited to specific purposes.
Right to object: Object to processing based on legitimate interest grounds.
Right to data portability: Request your personal data in a structured, machine-readable format.

Submit all data rights requests to info@zenfoautoservices.ae. Zenfo Auto Services responds to all verified data rights requests within 30 calendar days of receipt, in accordance with UAE PDPL requirements.

7. Cookie Policy

jeepservicemussafah.ae uses 3 categories of cookies: strictly necessary cookies, analytics cookies, and preference cookies.

Strictly Necessary Cookies Strictly necessary cookies enable core website functions, including session security, cookie consent, and mobile-responsive layout. These cookies are active on all visits and cannot be disabled without impairing website functionality.
Analytics Cookies Google Analytics 4 cookies measure website traffic, user journey, and page performance. These cookies collect anonymized data and are activated only upon user consent, where required by applicable law.
Preference Cookies Preference cookies store user settings such as language selection and previously entered vehicle information to improve the repeat visit experience. These cookies expire after 30 days.
Cookie consent: Users are presented with a consent banner on their first visit to jeepservicemussafah.ae. Analytics and preference cookies are activated only after consent is granted.

8. Data Security Measures

Zenfo Auto Services implements 4 technical and organizational measures to protect personal data collected through jeepservicemussafah.ae against unauthorized access, disclosure, alteration, and destruction.

SSL/TLS encryption: All data transmitted between users and jeepservicemussafah.ae is encrypted using TLS 1.2 or higher, indicated by the HTTPS protocol in the browser address bar.
Access controls: Personal data is accessible only to Zenfo Auto Services personnel with a verified operational need, protected by role-based access controls and multi-factor authentication.
Data minimization: Zenfo Auto Services collects only the personal data strictly necessary to fulfill the stated booking or service purpose.
Third-party vetting: All third-party service providers processing personal data on behalf of Zenfo Auto Services are assessed for compliance with applicable data protection standards before engagement.

Zenfo Auto Services notifies affected users and the relevant UAE regulatory authority within 72 hours of identifying a personal data breach that poses a risk to user rights, in accordance with UAE PDPL requirements.

9. Children's Privacy

jeepservicemussafah.ae is not directed at individuals under the age of 18. Zenfo Auto Services does not knowingly collect personal data from individuals under 18 years of age. If Zenfo Auto Services identifies that personal data has been collected from a minor without verifiable parental consent, that data is deleted within 48 hours of identification.

Parents or guardians who believe personal data belonging to a minor has been submitted through jeepservicemussafah.ae are directed to contact info@zenfoautoservices.ae immediately.

10. Changes to This Privacy Policy

Zenfo Auto Services updates this Privacy Policy when changes occur in data processing practices, applicable UAE law, or third-party service provider agreements. The effective date displayed at the top of this page reflects the date of the most recent update.

Users who have provided contact information are notified of material changes to this Privacy Policy via WhatsApp or email prior to the changes taking effect. Continued use of jeepservicemussafah.ae following notification constitutes acceptance of the updated Privacy Policy.

11. Legal Basis and Supervisory Authority

This policy is issued under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and the implementing regulations issued under it. Where the PDPL applies, Zenfo Auto Services acts as the data controller for personal data collected through this website and at the workshop.

Personal data is processed on one or more of the lawful bases recognised by the PDPL: your consent; performance of a contract to which you are a party; compliance with a legal obligation; or a legitimate interest that does not override your rights and freedoms.

Breach notification

Where a personal data breach is likely to prejudice the privacy, confidentiality or security of your data, we notify the UAE Data Office without undue delay and, where the PDPL requires it, within 72 hours of becoming aware of the breach. Affected individuals are informed where the breach is likely to result in a risk to their rights.

Supervisory authority

The UAE Data Office is the federal supervisory authority responsible for the PDPL. You may lodge a complaint with it at any time. Doing so does not require you to contact us first, and nothing in this policy limits that right.

Which regime applies

Personal data processed in connection with activity inside a UAE financial free zone may fall under that zone’s own data protection regime instead. Our operations are in mainland Abu Dhabi, so the federal PDPL applies.

12. Contact the Data Controller

Send privacy enquiries, data subject requests and breach notifications to Zenfo Auto Services, marking them for the attention of the data controller. Every route is listed on our contact page, and requests may also be emailed directly to info@zenfoautoservices.ae.

Please include enough detail to identify your record - the name and contact details you gave us, and the vehicle or booking the request relates to. We respond within 30 calendar days of receipt, and will tell you if we need longer and why.