We collect information necessary to provide IOR compliance services and operate our website effectively.

Personal Information

• Contact Information — Full name, business email address, phone number, job title, and company name.
• Transactional Information— Billing details, shipping addresses, invoice records, and payment information related to IOR service engagements.
• Shipment & Compliance Data — Product specifications, HS codes, country of origin, destination details, import documentation, and regulatory records related to goods we process as Importer of Record.
• Communication Data — Records of correspondence via email, phone, or our website contact forms, including support requests and service inquiries.
• Identity Verification — Where required by UAE, Egyptian, or Saudi customs regulations, we may collect copies of business registration documents or authorized signatory information.

Non-Personal Information

• Usage Data — Pages visited, time on site, referring URLs, browser type, device type, and IP address.
• Cookies & Tracking Data — Data collected via cookies, web beacons, and similar technologies to improve site functionality and measure performance. See Section 6 for full details.

We use the information we collect solely for legitimate business and legal purposes.

• Service Delivery — To fulfill IOR and EOR obligations, process import declarations, manage customs documentation, and execute compliance frameworks on behalf of our clients.
• Client Communication — To respond to inquiries, provide service updates, send compliance notifications, and manage ongoing IOR programs.
• Legal & Regulatory Compliance— To meet our obligations under UAE Federal Law, Egyptian customs regulations, Saudi ZATCA requirements, and applicable international trade law.
• Invoicing & Payments — To generate invoices, process payments, and maintain accurate financial records.
• Website Performance — To analyze how visitors use our website, troubleshoot technical issues, and improve the user experience.
• Marketing Communications — To send relevant service updates and industry insights. You may opt out at any time by contacting us or clicking the unsubscribe link in any marketing email.

We do not sell, rent, or trade your personal information to third parties for commercial or marketing purposes under any circumstances.

We may share your information only in the following limited circumstances:

• Customs & Government Authorities — Where legally required, we share shipment and importer data with the UAE Federal Customs Authority, Egyptian Customs Authority, Saudi ZATCA, and other regulatory bodies as part of our IOR obligations.
• Service Providers — Trusted third-party partners — including logistics providers, freight carriers, compliance platforms, and payment processors — who support our operations. All are bound by confidentiality agreements and may only process data for the specific purpose for which it was shared.
• Legal Advisors — Legal counsel and compliance consultants who assist us in fulfilling obligations or resolving disputes, under strict confidentiality terms.
• Business Transfers — In the event of a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. We will notify affected parties before any such transfer takes place.
• Legal Obligation — We may disclose your information where required by law, court order, or to protect the rights, safety, or property of IOR UAE or its clients.

Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy and comply with applicable legal and regulatory retention requirements. Import and customs documentation is retained in accordance with UAE, Egyptian, and Saudi regulatory schedules, which may require records to be kept for a minimum of 5 years. When data is no longer required, we securely delete or anonymize it.

Security Measures

• Encryption — Data transmitted between you and our systems is protected using TLS/SSL encryption protocols.
• Access Controls — Personal data is accessible only to authorized IOR UAE personnel who require it to perform their professional duties.
• Secure Infrastructure — We use enterprise-grade hosting environments with regular security audits and vulnerability assessments.
• Incident Response— In the event of a data breach that poses a risk to your rights, we will notify affected individuals and relevant authorities within the timeframes required by applicable law.

No method of electronic transmission or storage is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security.

Depending on your location and applicable law — including the UAE Personal Data Protection Law (PDPL), the GDPR (for EU-based individuals), and the CCPA (for California residents) — you may have the following rights:

• Right to Access — Request a copy of the personal information we hold about you and how it is being used.
• Right to Rectification — Request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Deletion — Request that we delete your personal data, subject to legal retention obligations.
• Right to Restrict Processing — Request that we limit how we process your data in certain circumstances.
• Right to Data Portability — Receive your personal data in a structured, machine-readable format for transfer to another provider.
• Right to Object — Object to processing of your data for marketing purposes or where processing is based on legitimate interests.
• Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
• Right to Complain— Lodge a complaint with your local data protection authority if you believe your rights have been violated.

To exercise any of these rights, contact us at privacy@ioruae.com. We will respond within 30 days of receiving your request.

We use cookies and similar tracking technologies to operate our website and deliver a consistent experience. A cookie is a small text file stored on your device when you visit our site.

We use five types of cookies. Essential cookies are required for core website functionality such as navigation and form submissions — the site cannot operate without them. Performance cookies collect anonymized data on how users navigate the site, helping us improve content and functionality, and can be disabled via your browser settings. Functional cookies remember your preferences such as language and region to personalize your experience across sessions, and can also be disabled via browser settings. Analytics cookies, used by third-party tools such as Google Analytics, measure website performance in aggregate form and can be disabled via your cookie preferences. Marketing cookies track browsing activity to deliver relevant advertising and measure campaign effectiveness, and can equally be disabled via your cookie preferences.

You can manage or disable cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of our website.

IOR UAE operates from the UAE and Egypt, with service delivery extending across KSA and global markets. As a result, your personal data may be transferred to, stored in, or processed in countries outside your country of residence — including the UAE, Egypt, Saudi Arabia, and the countries where our service providers operate.

Where data is transferred outside the European Economic Area (EEA), we apply appropriate safeguards as required by GDPR, including standard contractual clauses or equivalent protections recognized under applicable law.

By engaging our services, you acknowledge and consent to the transfer of your data to the jurisdictions in which IOR UAE operates.

We may update this Privacy Policy periodically to reflect changes in our services, legal obligations, or data handling practices. When we make material changes, we will update the "Last Updated" date at the top of this document and, where appropriate, notify clients directly via email.

Continued use of our website or services following any update constitutes acceptance of the revised policy.

IOR UAE's website and services are designed exclusively for business entities and professionals. We do not knowingly collect personal information from individuals under the age of 18.

If we become aware that we have inadvertently collected personal data from a minor, we will delete it promptly. If you believe we may have collected data from a child under 18, please contact us immediately at privacy@ioruae.com.

If you have any questions, concerns, or requests regarding this Privacy Policy or how IOR UAE handles your personal data, please contact us:

IOR UAE — IOR HUB TRADING L.L.C Operating from UAE · Egypt · KSA. We aim to respond to all privacy-related requests within 30 days.