Privacy Policy

Who is responsible for your data

Zenfo Auto Services operates paintprotectionfilm.ae and installs paint protection film at its own enclosed workshop in Abu Dhabi. For everything described in this policy, Zenfo Auto Services is the data controller: we decide what personal data is collected, why, and how long it is kept.

Our processing is governed by UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, known as the PDPL, which has applied in the United Arab Emirates since 2 January 2022. The federal supervisory authority is the UAE Data Office, established under Federal Decree-Law No. 44 of 2021. Where the PDPL's Executive Regulations introduce further requirements, we will update this policy and note the change in the version history above.

You can reach the person responsible for data protection questions through our contact page.

What this website collects, and what it cannot

Most privacy policies describe forms and tracking that the website in question may or may not actually have. This section describes what paintprotectionfilm.ae genuinely does, and it is written so that you can check it.

What is not on this website

There is no contact form, no quote form, no booking form, no user account, no login, no newsletter sign-up and no payment page anywhere on paintprotectionfilm.ae. There is nowhere on this site to type your name, your email address, your phone number or your vehicle's registration number, so the website does not collect them.

There is also no analytics platform, no advertising pixel, no remarketing tag, no heatmap or session-recording tool, and no social media tracker. We do not build a profile of you as you read, and we cannot follow you to other websites.

What the website does record

Delivering a web page necessarily creates a server access log. Our hosting provider records the following each time a page is requested:

• The IP address the request came from
• The browser and operating system reported by your device (the user-agent string)
• The address of the page requested, and the page that referred you to it, if any
• The date and time of the request, and the response status

These logs exist so that the site stays available and so that abuse (scraping, denial-of-service attempts, attacks) can be investigated. They are held by our hosting provider for a short, rolling period. They are not linked to your name, they are not combined with any other record, and they are not used to build a profile of you.

Fonts, maps and embedded content

The typefaces used on this site are served from our own domain, not from a font provider's servers, so reading a page here does not send a request to a third party on your behalf. We do not embed third-party video players, comment systems or chat widgets.

Where a page links to an external service (a map, a WhatsApp conversation, a social profile), that link is clearly a link. Nothing loads from those services until you choose to follow it.

Cookies

This website sets no cookies, and stores nothing in your browser's local or session storage. That is why you have never been shown a cookie banner here: there is nothing to consent to. Our Cookie Policy explains this in full, including how to verify it yourself in your browser.

What we collect when you contact us

We hold personal data because you chose to start a conversation with us, not because you read a page. What we hold depends on how far that conversation goes.

When you enquire

When you message us on WhatsApp, call us, or email us, we hold what you tell us. In practice that is your name, the number or address you contacted us from, your vehicle's make, model and year, the coverage you are asking about, and any photographs of the car you choose to send.

When you book an installation

To schedule work and to prepare computer-cut film for your specific car, we additionally record the vehicle's registration details, the agreed service and film grade, the appointment date and, where the film manufacturer's warranty registration requires it, the chassis or VIN number.

When work is carried out

We record the condition of the paint before installation, including photographs taken during the pre-installation inspection, the film batch or serial number applied, the warranty certificate issued, and the invoice and payment record. This is the file that lets us honour a warranty claim years later, and it is the main reason we keep customer records at all.

Why we are allowed to process it

Article 5 of the PDPL requires a lawful basis for every processing activity. Ours are as follows.

We do not carry out automated decision-making or profiling that produces legal effects for you, and we do not use personal data for purposes you have not been told about.

Who we share it with

We share personal data only where it is necessary to deliver the service or where the law requires it. In every case we share the minimum needed.

• The film manufacturer: where a manufacturer-backed warranty is registered in your name, the details required to register it. This is what allows a claim to be verified against the manufacturer's system later.
• Our hosting provider: which processes the server logs described above on our behalf.
• Payment providers and our bank: where you pay by card or transfer, the transaction is processed by the provider under its own terms. We do not store full card numbers.
• Professional advisers and insurers: where we genuinely need advice or cover in relation to a specific matter.
• Government authorities and courts: where we are legally required to disclose, or where disclosure is necessary to establish or defend a legal claim.

Where your data is held

Customer and warranty records are held in the United Arab Emirates. Website server logs are processed by our hosting provider on infrastructure that may sit outside the UAE, which makes them a cross-border transfer under Articles 22 and 23 of the PDPL.

Where personal data leaves the UAE, we rely on the conditions those articles permit: transfer to a jurisdiction recognised as providing an adequate level of protection, or a contract with the recipient imposing equivalent safeguards. You can ask us which applies to a particular transfer through our contact page.

How long we keep it

We do not keep personal data indefinitely, and we do not keep it "just in case".

When a retention period ends, records are deleted or anonymised. Where a record is needed for an active dispute or an ongoing legal obligation, it is retained until that ends.

Your rights under UAE law

The PDPL gives you the following rights over your personal data. They apply to the records we hold about you, and exercising any of them is free.

To exercise any of these, contact us through the contact page and tell us which right you are relying on. We may ask you to confirm your identity before we release or delete records. That check protects you, not us. We respond within 30 days. If a request is unusually complex and will take longer, we will tell you why before that deadline passes.

Some rights are qualified. We may not be able to erase a record we are legally required to keep, such as a tax invoice, or one we need to defend a live claim. Where we cannot do what you have asked, we will tell you plainly which exception applies rather than simply declining.

How we protect your data

The strongest protection on this website is structural: paintprotectionfilm.ae is built as a set of pre-rendered pages with no customer database behind it and no administrator login exposed to the internet. There is no customer record on this website for anyone to breach, because customer records are not held here.

Beyond that:

• The site is served only over HTTPS, so what passes between your browser and our pages is encrypted in transit.
• Customer, warranty and payment records are held on business systems with access restricted to the staff who need them to do their work.
• Card payments are handled by the payment provider's own terminal; we do not record or store full card numbers.
• Where a personal data breach occurs that poses a risk to you, we will notify the UAE Data Office and, where the law requires it, you.

No system is perfectly secure, and we will not claim otherwise. What we will say is that we do not collect data we do not need, which is the only protection that never fails.

Children's data

Our services are directed at vehicle owners and drivers, who in the UAE are adults. This website is not aimed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child's data has reached us, tell us through the contact page and we will delete it.

Changes to this policy

We update this policy when our services change, when the way we handle data changes, or when UAE law changes, including when the PDPL's Executive Regulations are issued. The version number and effective date at the top of this page tell you which version you are reading, and what it replaced.

Where a change materially affects your rights, we will not rely on a silent update: we will say so clearly on this page. Continued use of the site after a change takes effect means the current version applies.

How to reach us about privacy

Requests under this policy, questions about how your data is handled, and complaints all go to the same place.