Privacy Policy

Last updated: 30 April 2026  ·  Zafira AI FZ-LLC, UAE

Zafira AI ("we", "us", "our") is committed to protecting the personal data of everyone who visits our website or contacts us. This policy explains what data we collect, why we collect it, how we use it, and the rights you have over it.

This policy applies to zafiraai.com and is written to comply with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) and aligned with principles of the EU General Data Protection Regulation (GDPR) where applicable.

1. Who we are

Data controller: Zafira AI FZ-LLC
Contact: [email protected]
WhatsApp: +971 52 389 8910
Jurisdiction: United Arab Emirates

2. What data we collect

We only collect data you choose to provide through our contact form:

• Your name — to address you personally in our reply.
• Company name — to understand the context of your inquiry.
• Email address — to respond to your message.
• Your message — the details of the automation challenge you describe.

We do not collect payment information, identification documents, or any sensitive personal data.

3. How we use your data

We use the information you submit solely to:

• Respond to your inquiry within our stated 24-hour window.
• Follow up on any ongoing conversation about a potential engagement.

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not add you to any mailing list without your explicit consent.

4. Legal basis for processing

Under UAE PDPL and GDPR principles, we process your data on the basis of legitimate interest (responding to a business inquiry you initiated) and, where required, explicit consent provided by submitting the contact form.

5. Data retention

We retain contact form submissions for a maximum of 12 months from the date of last communication, after which they are permanently deleted. If an engagement proceeds to a commercial agreement, data retention is governed by that agreement.

6. Cookies and analytics

This website uses Google Analytics 4 with IP anonymisation enabled. GA4 collects aggregated, anonymised usage data (pages visited, session duration, device type) to help us improve the site. No personally identifiable information is linked to analytics data.

We use only technically necessary cookies. We do not use advertising, tracking, or profiling cookies.

7. Your rights

Under UAE PDPL and applicable law, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — request that we delete your data, subject to any legal obligation to retain it.
• Objection — object to processing of your data for legitimate interests.
• Portability — request your data in a machine-readable format.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. Data security

We take reasonable technical and organisational measures to protect your data against unauthorised access, disclosure, or loss. Our website is served over HTTPS with HSTS enforced. Contact form submissions are transmitted over encrypted connections.

9. International transfers

Our primary operations are in the UAE. If data is processed by any service provider outside the UAE, we ensure adequate safeguards are in place consistent with UAE PDPL requirements.

10. Changes to this policy

We may update this policy as our services evolve or as regulations change. Material changes will be reflected in the "Last updated" date above. We encourage you to review this page periodically.