Privacy Policy
Effective date: 8 August 2026 · Version: 1.0
CoHub is committed to protecting personal data in line with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and its implementing regulations. This Privacy Policy explains what personal data we collect through the CoHub platform at cohub.co (the "Platform"), why we collect it, how long we keep it, who we share it with, and the rights available to you.
1. Who We Are (Controller)
The controller of personal data processed through the Platform is:
Collaboration Hub General Trading L.L.C — [●], United Arab Emirates
Trade License No.: [●] · TRN: [●]
Data Protection Officer / Privacy contact: [email protected] [●]
CoHub is a B2B supply platform. Most of the personal data we process relates to representatives of business customers (owners, procurement staff, finance contacts, delivery recipients).
2. Personal Data We Collect
- Account and identification data: name, job title, employer/legal entity name, trade license details, email address, phone number, account credentials.
- Order and billing data: order history, delivery addresses and site contacts, billing details, the entity's TRN and legal name (for tax invoices), payment acknowledgments for Cash on Delivery.
- Communications: messages, RFQs, calls and correspondence with our supply specialists and support team.
- Technical and usage data: IP address, device and browser information, log data, pages visited, and data collected through cookies and similar technologies (Section 5).
- Delivery data: names and phone numbers of persons designated to receive goods, and delivery confirmations (signatures / acknowledgments).
We do not intentionally collect sensitive personal data, and we ask you not to submit such data through the Platform.
3. Purposes and Legal Bases
| Purpose | Legal basis under the PDPL |
|---|---|
| Creating and managing your account; verifying business credentials | Performance of a contract; legitimate interest |
| Processing orders: expert review, order confirmation, delivery scheduling, COD collection | Performance of a contract |
| Issuing proforma invoices, tax invoices and credit notes; maintaining tax and accounting records | Compliance with legal obligations (UAE VAT and tax procedures legislation) |
| Arranging facilitated services with duly licensed third-party providers at your request | Performance of a contract; your request |
| Customer support and complaint handling | Performance of a contract; legitimate interest |
| Fraud prevention, security of the Platform, cash-handling controls | Legitimate interest; compliance with legal obligations |
| Direct marketing about CoHub products and offers | Consent (you may withdraw at any time — Section 11) |
| Analytics and improvement of the Platform | Legitimate interest; consent where required for non-essential cookies |
| Responding to lawful requests of competent authorities | Compliance with legal obligations |
4. How We Collect Data
Directly from you (registration, orders, correspondence), automatically through the Platform (cookies, logs), and — in limited cases — from your organization (when a colleague registers you as a contact) or from public commercial registers used to verify business details.
5. Cookies and Similar Technologies
We use:
- Strictly necessary cookies — sign-in, session security, cart/order flow. These cannot be disabled.
- Functional cookies — remembering language (English/Arabic) and preferences.
- Analytics cookies — aggregate usage statistics to improve the Platform. Used with your consent where required.
You can manage non-essential cookies through the cookie banner or your browser settings. Blocking necessary cookies may prevent parts of the Platform from working.
6. Sharing of Personal Data
We share personal data only as needed and under appropriate safeguards with:
- Logistics partners — delivery contact name, phone number and address, to schedule and complete delivery and COD collection.
- Duly licensed third-party service providers — where you request a facilitated service, we share the details reasonably required for the provider to perform it.
- IT and hosting providers — who process data on our behalf under data processing agreements.
- Professional advisers and auditors — under confidentiality obligations.
- Competent UAE authorities — including the Federal Tax Authority and courts, where legally required.
We do not sell personal data.
7. International Transfers
Personal data is stored and processed primarily in the United Arab Emirates. Where data must be transferred outside the UAE (for example, to a cloud provider), we do so only in accordance with the PDPL — to jurisdictions with an adequate level of protection or subject to appropriate safeguards such as contractual clauses, or otherwise as permitted by the PDPL.
8. Retention
We keep personal data only as long as needed for the purposes above:
- Tax and accounting records (including tax invoices and credit notes): at least 5 years as required by UAE tax legislation.
- Account and order data: for the duration of the business relationship plus the period needed to establish, exercise or defend legal claims.
- Marketing data: until you withdraw consent or object.
- Technical logs: for short, defined periods appropriate to security needs.
When data is no longer needed, it is deleted or irreversibly anonymized.
9. Security
We apply appropriate technical and organizational measures — access controls, encryption in transit, least-privilege access, logging, staff confidentiality obligations and vendor due diligence — to protect personal data against unauthorized access, alteration, loss or disclosure. In the event of a personal data breach, we will act in accordance with the PDPL, including notification of the UAE Data Office and affected persons where required.
10. Your Rights
Subject to the conditions of the PDPL, you have the right to:
- Access your personal data and receive information about its processing;
- Rectification of inaccurate or incomplete data;
- Erasure of data that is no longer necessary or unlawfully processed;
- Restriction of processing in defined cases;
- Portability of data you provided, in a structured, machine-readable format;
- Object to processing, including for direct marketing purposes;
- Withdraw consent at any time, without affecting prior lawful processing;
- Complain to the UAE Data Office if you believe your rights have been infringed.
To exercise any right, contact [email protected] [●]. We may verify your identity and will respond within the timelines required by the PDPL.
11. Marketing Communications
We send marketing about CoHub products, pricing and offers only with consent or as otherwise permitted by law, and every message includes an opt-out. Opting out does not affect transactional messages (order confirmations, delivery notifications, invoices).
12. Third-Party Links
The Platform may contain links to third-party sites (including licensed service providers). Their privacy practices are governed by their own policies, which we encourage you to review.
13. Children
The Platform is a business platform and is not directed at individuals under 18. We do not knowingly collect data from minors.
14. Changes to This Policy
We may update this Policy from time to time. The current version, with its effective date, is always published on the Platform; material changes will be notified through the Platform or by email.
15. Contact
Collaboration Hub General Trading L.L.C — [●], United Arab Emirates
Privacy / DPO: [email protected] [●] · General: [email protected] [●]
This Policy is published in English and Arabic. In case of inconsistency, the English version prevails to the maximum extent permitted by applicable UAE law.