Privacy Policy

1. Who We Are

Xoomi Dubai is a same-day delivery service operating in the United Arab Emirates through its website and mobile apps. References to "Xoomi Dubai", "we", "us", or "our" in this policy mean the Xoomi Dubai service and its operators.

2. Information We Collect

We collect information you provide directly and information generated when you use the service:

• Order and contact data: sender and recipient names, phone numbers, email addresses, pickup and delivery addresses, map coordinates (precise location) for pickup and delivery points, delivery instructions, scheduled times, item details, and tracking codes.
• Delivery proof photos: photos taken by couriers at collection and delivery (for example the item and the door or surroundings), stored in our file storage and linked to the order.
• Courier data: name, phone, email, Emirates ID number, identity and driving licence document images, vehicle details, bank and IBAN details for payouts, availability, live location while working, earnings, and messages exchanged with our staff.
• Customer account and purchase data: where you sign in, your email, name, phone, saved address and location, and your order and purchase history.
• Payment data: card payments are entered on pages hosted by Stripe; we do not store full card numbers. We do receive and store payment records from Stripe, including payment status, amounts, Stripe identifiers, and billing details and card metadata (such as card brand, last four digits, and expiry) synchronised from Stripe.
• Messages and temperature readings: messages between couriers and staff, and temperature readings recorded for temperature-controlled deliveries.
• Usage data: technical information such as timestamps, device type, and browser information in server logs.

3. How We Use Your Information

• To arrange, track, and complete deliveries, including proof of collection and delivery.
• To match couriers to orders and pay couriers.
• To take payments and keep financial records.
• To communicate order status and support with senders, recipients, and couriers.
• To handle temperature requirements for deliveries that need them.
• To comply with applicable law and to keep the service reliable and safe.

Optional Meta advertising measurement

On our website, if you accept Meta tracking in Privacy choices, we use Meta Pixel to measure a successfully calculated delivery quote when its price is visible and a booking after it is saved. A saved booking is not proof of payment. We do not send Meta your name, contact details, precise addresses, parcel descriptions, payment details, order identifiers or private booking and tracking links. Only the event name and a random event identifier are supplied by our application. Meta can receive technical information such as IP address, browser information and its own cookies.

Your choice is remembered on this browser for up to 180 days. You can decline or withdraw through Privacy choices without affecting delivery services. Withdrawal stops future Meta measurement; it cannot recall events already sent. We keep local hashed deduplication markers to avoid counting the same success again. This Meta choice does not change our existing Google Analytics configuration. We do not load Meta on visitors who have not accepted it.

4. Legal Basis for Processing

We process personal data to perform the delivery service you request, for our legitimate interests in operating and securing the service, and where applicable law requires us to keep or disclose data.

5. Sharing of Information

We do not sell your personal data. We share information with:

• Assigned couriers: the names, phone numbers, addresses, and locations needed to complete the order they are handling.
• Anyone holding a tracking code or link: tracking shows order progress and delivery proof photos. Keep your tracking code and link private.
• Service providers: including Stripe for payments and our hosting, database, and file storage providers, which process data on our behalf.
• Authorities: where required by law.

6. Data Retention

We keep order, payment, and financial records, delivery proof photos, and related contact and location details after a delivery is completed, because they are needed for records, disputes, and accounting. Photo links shown in tracking are temporary, but when a link expires only the link stops working; the photo and order record are not erased. Courier records, messages, and payout records are kept after an account stops being active where needed for these purposes. We review deletion requests individually and will tell you which records, if any, must be kept and why.

7. Your Rights

Subject to applicable law, you may ask to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data, except records we must keep.
• Object to certain processing.

Approved couriers who can sign in can send a deletion request from the Driver screen in supported mobile app versions; staff reply in Driver Messages. This is a request for staff processing, not immediate deletion. Others can contact us at privacy@xoomidubai.ae.

8. Security

We use technical and organisational measures intended to protect your data, including restricting staff access, private file storage for photos and documents, and handing card entry to Stripe. No system is completely secure.

9. Changes to This Policy

We may update this Privacy Policy. Material changes will be shown on this page with an updated date.

10. Contact

For privacy enquiries, contact us at privacy@xoomidubai.ae.