Privacy Policy - Winch UAE

1. Introduction

BAZ E-SERVICES ("we", "us", "our"), operating under the brand name Winch UAE, is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Winch UAE mobile applications (Customer App and Driver App) and related services.

By using our services, you agree to the collection and use of information as described in this policy.

2. Information We Collect

2.1 Customer Information

Data	Purpose
Phone number	Account creation and authentication
Full name	Identification during service
GPS location	Pickup/drop-off for recovery service
Trip history	Service records and support
Device token	Push notifications about trip status

2.2 Driver Information

Data	Purpose
Phone number	Account creation and authentication
Full name & personal details	Identity verification and registration
National ID photo	Identity verification by admin
Driving license photo	Driving eligibility verification
Vehicle license photo	Vehicle registration verification
Work permit photo	Work authorization verification
Vehicle information	Service matching and display to customers
GPS location (continuous)	Real-time tracking during active duty
Device token	Push notifications for new trip requests

2.3 Payment Information

Payment processing is handled by Stripe, a certified PCI-DSS compliant payment processor. We do not store credit card numbers, CVV codes, or full card details on our servers. Stripe securely processes and stores all payment information.

3. How We Use Your Information

To provide and operate the vehicle recovery service
To match customers with available drivers nearby
To process payments securely through Stripe
To send push notifications about trip status updates
To verify driver identity and eligibility
To improve our services and user experience
To comply with legal obligations under UAE law
To resolve disputes and provide customer support

4. Location Data

      Customer: Location is collected only when you actively request a service (pickup and drop-off points). We do not track your location in the background.
    

      Driver: Location is collected continuously while you are on active duty (online status). This is necessary to show your position to customers and dispatch nearby trip requests. Location tracking stops when you go offline.
    

Location data is used solely for the purpose of providing the recovery service and is not sold or shared with third parties for marketing purposes.

5. Data Storage and Security

Your data is stored securely on Google Firebase cloud infrastructure, which provides enterprise-grade security including:

Data encryption in transit (TLS/SSL) and at rest
Secure authentication via Firebase Authentication
Access controls and security rules on database and storage
Regular security audits by Google Cloud

Driver documents (ID photos, licenses) are stored in Firebase Cloud Storage with restricted access limited to authorized administrators only.

6. Data Retention

We retain your personal information for as long as your account remains active. Upon account deletion:

Your personal data will be removed from our active systems
Trip records may be retained in anonymized form for business analytics
Driver documents will be permanently deleted
Some data may be retained as required by UAE law for regulatory compliance

7. Third-Party Services

We use the following third-party services:

Service	Purpose	Privacy Policy
Google Firebase	Authentication, database, storage, hosting	Link
Google Maps	Maps, navigation, distance calculation	Link
Stripe	Payment processing	Link
Firebase Cloud Messaging	Push notifications	Link

8. Data Sharing

We do not sell your personal information. We share data only in the following cases:

Between customer and driver: Name, phone number, and location are shared during an active trip to facilitate the service
Payment processor: Transaction data is shared with Stripe for payment processing
Legal requirements: When required by UAE law, court orders, or government authorities
Service providers: Firebase (Google) for infrastructure services, under strict data processing agreements

9. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate information
Request deletion of your account and associated data
Withdraw consent for data processing
Lodge a complaint with relevant UAE data protection authorities

To exercise these rights, contact us at winchuae.support@gmail.com.

10. Children's Privacy

Our services are intended for general use. We do not knowingly collect personal information from children under the age of 13. If we become aware that we have collected data from a child under 13, we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Governing Law

This Privacy Policy is governed by the laws of the United Arab Emirates. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts in the UAE.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us:

BAZ E-SERVICES (Winch UAE)
Email: winchuae.support@gmail.com
United Arab Emirates