How we handle your data.

Zaitoon HR is operated by Zaitoon Enterprises, a UAE-licensed business under Trade Licence No. 8150, based at Block B-B41-060, Sharjah Research, Technology & Innovation Park.

For the purposes of UAE PDPL, we are the data controller for any personal data you provide via our website, our contact channels, or our consulting engagements.

We try to collect the minimum personal data needed to do our work. Specifically:

• Identification data — name, employer, job title, email address, and phone number when you contact us or sign up for early access.
• Communication data — the content of messages you send us via the contact form, email, or WhatsApp.
• Usage data — anonymised page-view and aggregate session data via our analytics provider (no cross-site tracking, no user-level identifiers).
• Employment data — when you engage us for HR consulting, we may need access to employee records, contracts, payroll figures, or other HR information. We treat this as confidential and process it under a written engagement letter.

We use personal data only for the purposes you would reasonably expect:

• Replying to enquiries and delivering the services or content you request.
• Sending you updates about Zaitoon HR if you opt in to the early-access list (you can unsubscribe from any email).
• Performing the consulting work we've been engaged to do.
• Improving our website and product through aggregate, anonymised analysis.
• Complying with our legal obligations under UAE law.

We do not sell your data. We do not share it with marketing networks. We do not use it to train third-party AI models.

We keep enquiry data for as long as we may reasonably need it to respond to and follow up on your request — typically up to 24 months — after which it is deleted or anonymised.

Consulting-engagement data is kept for the duration of the engagement and for the period required by UAE labour law and our professional record-keeping obligations (typically seven years), unless you instruct us to delete it sooner where lawful.

Our customer database and the Zaitoon HR platform are hosted in the UAE and the wider Middle East region wherever possible. Some operational tooling (email, calendar, document storage) is provided by reputable third parties whose servers may be located outside the UAE. We choose providers with adequate data-protection commitments and we minimise the personal data we send to them.

Under UAE PDPL — and any equivalent law that applies to you — you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete data we no longer have a lawful reason to keep.
• Object to our processing in certain circumstances.
• Withdraw consent for any processing that relies on consent.
• Lodge a complaint with the relevant UAE supervisory authority.

To exercise any of these rights, email support@zaitoon.ae. We will respond within 30 days and free of charge for the first request in any 12-month period.

We use a small number of cookies and similar technologies — see our Cookie Policy for the full list and how to control them.

Our services are intended for businesses and the adults who run them. We do not knowingly collect personal data from anyone under 18.

If we make material changes to this policy we will update the 'Last updated' date at the top and, where appropriate, notify you by email or via a prominent notice on the website.

For any privacy question, email support@zaitoon.ae or write to us at Block B-B41-060, Sharjah Research, Technology & Innovation Park, Sharjah, UAE.