Privacy Notice · PDPL

Privacy Notice

Last updated: 4 July 2026

See also our Customer Terms.

9. Who is responsible for your data

9.1 For the Jareb page itself (what you see in your browser), the data controller is Jareb (TRY F&B TECHNOLOGIES, a sole establishment, Dubai, UAE), contact hello@jareb.ae.

9.2 Once you tap through to WhatsApp to order — your phone number, messages, and order details — the Business you contact is the controller, and WhatsApp/Meta processes the message under its own terms. Jareb is not a party to and does not receive or store that conversation.

10. What Jareb collects — and does not

10.1 Jareb does not collect or store your identity. Jareb does not store your name, phone number, or WhatsApp number (in any form, including hashed). No account or login is needed to view a page or start an order.

10.2 What Jareb stores: only aggregated, non-identifying counters — for example, that a page was viewed, which menu items were tapped, that an order was started, and which link source brought a visit (e.g. an Instagram bio or story link). Jareb does not store visitor-level event logs, and does not store your IP address, user-agent string, cookie or device IDs, persistent visitor IDs, WhatsApp number, message contents, or draft cart contents in its analytics database.

10.3 Technical data and IP addresses are personal data when retained or linkable. Jareb does not store them in its analytics database. They may be processed transiently by our hosting/security/CDN provider to deliver and protect the page and prevent abuse, subject to that provider's own retention and security controls.

10.4 On your device: the order page may use your browser's local storage to remember items you've added to a draft order so the page works smoothly. This stays on your device, is not a tracking cookie, and is not sent to Jareb as personal data.

11. Why we process it and our lawful basis

11.1 Jareb deliberately avoids collecting personal data from customers. Truly aggregated, anonymized counters are not personal data under the PDPL once they cannot identify a natural person, and most of this notice therefore describes processing that falls outside personal-data rules.

11.2 For the limited transient technical data needed to deliver and secure the page, Jareb (and its providers) process it as necessary to provide the page you requested and to protect the service, and to meet legal or security obligations — not on a general "legitimate interests" balancing basis. If Jareb ever introduces analytics that could identify or single out a visitor, it will update this notice and use an appropriate PDPL basis, including consent where required.

11.3 Personal data about your order is processed by the Business and by WhatsApp/Meta under their own notices, not by Jareb.

12. Sharing and recipients

Jareb does not sell personal data. Recipients are limited to: hosting/security/CDN providers that deliver and protect the site (acting on Jareb's instructions or as independent providers for technical data); Businesses, who receive only aggregate counts that do not identify individual customers; and legal or regulatory recipients where required by law.

13. International transfers

Our hosting/security/CDN provider(s) may process technical data (such as IP addresses) on servers outside the UAE, only as needed to deliver and protect the site. Where personal data is transferred internationally, Jareb relies on providers offering contractual, technical, and organizational safeguards and on PDPL-permitted transfer mechanisms (Federal Decree-Law No. 45 of 2021, Articles 22–23). Jareb does not transfer customer-identity data because it does not collect it.

14. Retention

• Aggregate analytics: kept only as long as needed for business reporting — broadly, while a Business's page is active and for a limited period afterwards — then deleted or kept only in non-identifying form.
• Technical logs: held by our hosting/security provider under its own retention controls; Jareb does not export visitor-level logs into its systems.
• Unfinished applications: if you start setting up a Business page but do not finish, the details you entered (business name, contact number, and progress reached) are kept for up to 30 days so we can help you complete setup, then deleted automatically.
• Dashboard usage signals: when a Business uses its private dashboard, Jareb records basic usage signals (when it was opened and which sections were used) to operate and improve the service. These are visible only to Jareb and are not shared.
• On-device local storage: remains on your device until your browser clears it or you clear site data.
• Because Jareb stores no customer identity, there is no customer-identity record to retain or delete.

15. Your rights under the PDPL

15.1 Subject to the PDPL and its conditions, you may have rights to access, correct, delete, or restrict processing of your personal data, to object to processing, and to data portability.

15.2 How to make a request: email hello@jareb.ae with the page URL and the nature of your request. Jareb may need information to verify your identity and to locate any data. Because Jareb holds no information that identifies you, it usually cannot link a record to you and may be unable to act on data that is anonymous or not linkable to you. Jareb will not ask for your WhatsApp chat contents; for anything about your order conversation, contact the Business (and WhatsApp/Meta) as the controllers.

15.3 You may also complain to the competent UAE data-protection authority (the UAE Data Office / competent bureau).

16. Data Protection Officer

Jareb has not appointed a Data Protection Officer at launch, because it does not carry out high-risk processing or process large volumes of sensitive personal data (PDPL Art. 10). Privacy questions go to hello@jareb.ae. This will be reviewed if Jareb's processing expands.

17. Data breach

If a personal-data breach occurs that requires notification under the PDPL (Articles 9 and 13), Jareb will notify the competent authority and affected data subjects as required, and will investigate, mitigate, and take steps to prevent recurrence.

18. Children

Jareb's pages are intended for adults placing food orders and are not directed at children.

19. Changes and contact

We may update this notice; the "last updated" date will change. Questions or requests: hello@jareb.ae.