Privacy Policy
Draft — review with your legal advisor before launch.
Draft revised: 16 September 2026
This policy explains how ZwQ Kitchens collects, uses, shares, and protects personal data when you visit our website, place an order, use your account or wallet, contact us, or leave feedback.
Who is responsible for your data
ZUBDAH WA QASHDA RESTAURANT CO. L.L.C, trading as ZwQ Kitchens, is the data controller. Our address is Shop No. 6, Sajaya Plaza, Dubai, United Arab Emirates.
Data we collect
We may collect your name, UAE mobile number, delivery address and map pin, optional email address, order items and notes, payment method and status, order history, wallet or promotional-credit activity, feedback, messages you send us, and account verification records. We also receive basic technical information such as IP address, browser or device information, request times, and security logs. Your basket, recent order references, language choice, and login session may be stored on your device.
How we use it
We use personal data to accept and prepare orders; calculate delivery eligibility and fees; take payment; arrange and track delivery; send order updates and login codes; provide order history, wallet credit, support, and feedback rewards; prevent duplicate, fraudulent, or abusive activity; secure and operate the website; keep business and tax records; and comply with legal obligations. We do not sell personal data.
Why we may process it
We process data when it is needed to fulfil your order or another request, to meet legal obligations, with your consent where consent is required, and for legitimate business interests such as service security, fraud prevention, customer support, and improving operations, provided those interests do not override your rights.
Who we share data with
We disclose only what is reasonably needed to staff and service providers that help us operate. These may include our courier or dispatch provider (including Slider when used); Wio Pay when card payment is enabled; Meta's WhatsApp service for login codes, order updates, and support messages; Google Maps for address search, geocoding, and map pins; Supabase for cloud database services; Vercel for website hosting and security; and professional advisers or authorities when required by law. Each provider processes data under its own terms and privacy obligations.
International processing
Some service providers may process or store data outside the UAE. We are reviewing the applicable provider locations and transfer arrangements for this draft policy.
How long we keep it
Order, payment, refund, and accounting records may need to be retained for tax, accounting, consumer matters, and disputes. Login codes are short-lived. We are reviewing actual retention and deletion procedures for each system. Contact us if you want to request access, correction, or deletion; we will assess the request against records we must keep.
Cookies and device storage
We use necessary browser storage for the basket and recent orders. A language cookie may remain for up to one year, and an encrypted or signed login-session cookie may remain for up to 90 days unless you log out sooner. These features are needed for the choices or services you request. We store your analytics choice in local storage. Optional Vercel Analytics loads only after you select Allow analytics. You can reject or withdraw this permission in Privacy choices at the bottom of the page. Google Analytics and Meta Pixel are disabled.
Your choices and rights
Subject to applicable law, you may ask whether we process your data and request access, correction, deletion, restriction or cessation of processing, or transfer of eligible data. You may object to certain processing and withdraw consent where processing relies on consent. Withdrawal does not affect earlier lawful processing. We may need to verify your identity and may retain information where the law requires it or where it is needed to establish, exercise, or defend legal claims.
Security
We use reasonable technical and organisational safeguards designed to protect personal data, including access controls, protected administrative systems, secure connections, and restricted service credentials. No internet or storage system can be guaranteed completely secure.
Children
The website is intended for people who can lawfully place an order. We do not knowingly collect personal data directly from children under 13 without the consent of a parent or guardian. A parent or guardian may contact us to request deletion of a child's data.
Changes to this policy
We may update this policy when our services, providers, or legal obligations change. We will publish the revised policy here and change the effective date. We will provide additional notice where a material change requires it.
Contact and complaints
For a privacy request or complaint, contact ZwQ Kitchens by phone at +971 56 534 7016, or write to us at Shop No. 6, Sajaya Plaza, Dubai, United Arab Emirates. Please describe your request and provide enough information for us to verify that the data relates to you. You may also raise a complaint with the competent UAE data-protection authority.