This Privacy Policy (“Policy”) describes the privacy practices of TwoCollect Portal LLC, a company registered in the United Arab Emirates, and its affiliates (collectively referred to as “TwoCollect,” “we,” “us,” or “our”). This Policy outlines how we collect, use, store, and protect information about you when you interact with our websites, applications, and services (collectively, “Services”). This Policy also explains your rights regarding your personal data under applicable laws, including the UAE Personal Data Protection Law (PDPA).
This Policy applies to all personal data we collect, process, and store in relation to our customers, suppliers, service recipients, and website visitors. Additional country-specific or region-specific provisions may apply, as outlined in the Addendums at the end of this Policy.
1. When This Policy Applies
This Policy applies to our Services that link to this Policy, where we act as the data controller. If a Service you use links to this Policy, this Policy applies to you. It also applies in conjunction with any terms of service or agreement between you and TwoCollect for the Services you use.
This Policy does not apply to personal data for which we act as a data processor. In such cases, our handling of personal data is governed by the applicable terms of service or data processing agreement between you and TwoCollect.
When our clients use our platform to generate shipments through third-party carriers, TwoCollect acts as a data processor on behalf of the client. However, for all platform-related services such as account creation, billing, or support, TwoCollect acts as the data controller
2. What We Do With Your Information
We are committed to being transparent about the information we collect and how we use it to deliver our Services, operate our business, and improve your experience. This Policy describes how we collect, use, share, and secure your personal data, which includes any information that can directly or indirectly identify you or your household.
a. Types of Information We Collect
We may collect the following types of personal data:
- Identifiers: Name, email address, phone number, postal address, and account credentials.
- Commercial Information: Records of products or services purchased, obtained, or considered.
- Internet Activity: IP address, browser type, pages visited, and interactions with our Services.
- Geolocation Data: Precise location information if you enable location-based services.
- Payment Information: Credit card details, billing address, and transaction history.
- Other Information: Information you provide in surveys, feedback forms, or customer support interactions.
We may also collect information from third parties, such as service providers or partners, to supplement the data you provide.
b. How We Use Your Information
We use your personal data for the following purposes:
- Account Registration: To create and manage your account.
- Service Delivery: To provide and improve our Services, including customer support.
- Communication: To send you important updates, offers, and marketing communications (with your consent where required).
- Business Operations: To operate our business, detect fraud, and comply with legal obligations.
- Analytics and Improvement: To analyze usage patterns and develop new features or services
We may also use aggregated or anonymized data, which cannot identify any individual, for analytics, service improvement, and market research purposes.”
c. How We Share Your Information
We only share your personal data in the following circumstances:
- Service Providers: With third-party vendors who assist us in delivering our Services (e.g., payment processors, shipping carriers).
- Legal Compliance: To comply with legal obligations, respond to lawful requests, or protect our rights and property.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner.
- With Your Consent: For any other purpose disclosed to you at the time of collection.
We do not sell your personal data to third parties for marketing purposes
3. Your Rights Under UAE Law
Under the UAE PDPA, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request corrections to inaccurate or incomplete personal data.
- Deletion: Request deletion of your personal data, subject to legal obligations.
- Withdraw Consent: Withdraw your consent for processing where applicable.
To exercise these rights, please contact us using the details provided in the “How to Contact Us” section.
4. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required by law. When your data is no longer needed, we will securely delete or anonymize it.
5. Security of Your Information
We implement reasonable technical and organizational measures to protect your personal data from unauthorized access, disclosure, or misuse. However, no method of transmission over the internet or electronic storage is 100% secure.
6. International Data Transfers
Your personal data may be transferred to and processed in countries outside the UAE, where data protection laws may differ. We ensure that such transfers comply with applicable laws and that your data is protected through appropriate safeguards.
7. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will notify you through our Services or other communication channels. Your continued use of our Services after such changes constitutes your acceptance of the updated Policy.
8. Children’s Privacy
Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.
9. How to Contact Us
- Address: TwoCollect Portal LLC, Business Bay, Dubai, UAE
For unresolved privacy concerns, you may also contact the UAE Data Office or another relevant regulatory authority.
10. Addendums
Additional provisions may apply based on your location or specific circumstances. Please refer to the relevant addendum below:
- Addendum for UAE Residents
- Addendum for European Economic Area (EEA) and United Kingdom (UK) Residents
- Addendum for California Residents
- Addendum for Other Regions
Addendum for UAE Residents
This section supplements the Policy and applies to individuals located in the UAE. Under the UAE PDPA, you have the right to access, correct, and delete your personal data, as well as object to its processing. To exercise these rights, please contact us using the details above.
11. Document Upload and OCR-Based Verification
To enhance security and verify user identities and business legitimacy, TwoCollect uses Optical Character Recognition (OCR) technology to process uploaded identification documents and trade licenses.
a. Emirates ID Verification:
When individual users upload their Emirates ID, we extract essential data including the ID number, full name, and expiry date using OCR tools. This data is then cross-referenced with the information provided during registration. The original ID file and extracted data are stored securely on our servers using AES-256 encryption. Access is restricted through RBAC (RoleBased Access Control) and data is automatically deleted after a retention period of 90 days unless required for legal purposes.
b. Trade License Verification:
For business clients, a copy of the trade license must be uploaded. Using the same OCR technology, we extract the license number, business name, and expiry date. This information is verified against the submitted business details and securely stored in our encrypted infrastructure with limited access. Documents are retained for up to 90 days unless required otherwise.
c. User Consent and Compliance:
Before document upload, users must provide explicit consent for processing. The following statement is presented:
“I consent to the processing of my Emirates ID/Trade License for identity verification purposes, in accordance with the UAE PDPL.”
All document handling complies with the UAE Personal Data Protection Law (PDPL) and follows international best practices for data security and privacy.
Effective: May 26, 2025