Privacy Policy

Last updated October 10, 2026

Introduction

This policy explains how Khalifa Economic Zones Abu Dhabi – KEZAD Group – LLC (the Company, we, us or our) handles personal information in connection with Josoor. It covers the website, enquiries and registration, and the platform features available to you. Personal information is information that identifies you or can reasonably be linked to you, including business contact information.

Different features use different information. Describing a feature here does not mean it is enabled for every visitor or account. Independent businesses you contact through Josoor are responsible for their own handling of information outside our operation of the service.

Information you provide

Enquiries and registration: your name, business email, telephone number, job title, company name, business activity, registration answers, consent choices and correspondence. Information may include whether your business is an existing KEZAD customer and the services in which it is interested.

Accounts and business verification: account identifiers, profile details, authorised contacts and business information such as an address, website, trade licence and tax registration number. Where documents are requested, we receive the document and any personal information it contains. Please provide only information needed for the stated purpose.

Business activity: profiles, product and service listings, images, sourcing requests, quotations, attachments, messages and their associated status, timestamps and participants. These records may contain contact details, specifications and commercial information that you or another participant supplies.

Learning, events and preferences: learning activity and progress, event registration details, including attendee details supplied by an organiser or colleague, selected topics, interests, saved preferences and communication choices, where these features are used. Support requests and feedback may also contain information you choose to include.

Information received from other sources

We may receive account and business information from the identity or business-registration service used to sign you in or verify your organisation, and from relevant KEZAD customer relationship systems. A company administrator, colleague or trading participant may provide information about you when managing authorised contacts or communicating with you.

When you visit or use the service, technical records may include your IP address, browser and device information, requested pages, interaction and error records, timestamps and identifiers needed to maintain sessions or deliver notifications. Cookies and similar storage are explained below. We do not treat such information as anonymous merely because it does not include your name.

How we use information

We use information to respond to enquiries; assess registration and business eligibility; create and administer accounts; authenticate users; maintain business profiles; and provide the features you request. This includes routing sourcing requests and quotations, delivering messages and notifications, registering event participants and recording learning progress where those functions are available.

We also use relevant information to provide support, diagnose errors, protect the service, investigate suspected misuse, maintain appropriate business records and respond to legal requirements or disputes. Enquiry information may pass through customer relationship and notification systems so the relevant team can follow up.

Where drafting, rewriting or translation assistance is offered, the text you submit to that feature may be processed by a specialist service provider to return the requested output. Avoid entering unnecessary personal or confidential information, and review the result before sharing it.

Processing must have a basis permitted by the law that applies. Depending on the activity, this may involve your consent, steps needed to provide a requested service or perform an agreement, or a legal obligation or other applicable legal permission. Where consent is required, we will request it separately.

Information shared through the platform

Business profiles and listings are intended to help users find and contact businesses. Approved business profiles and their published contact fields may be visible to other signed-in users. Do not put private personal details into fields intended for business visibility. Trade licence details, tax registration details and verification documents are restricted to authorised business members and administrators rather than published as ordinary profile content.

Requests, quotations, messages and attachments are disclosed to the participants or audiences served by the relevant feature. A recipient can retain a copy or use it for the business discussion. A deletion request or account closure does not necessarily retrieve information already delivered to another person. Contact us if you are uncertain about an intended audience before submitting sensitive information.

Other recipients

Relevant teams within the Company and its affiliates may handle information to administer Josoor and respond to your request. Service providers may process information needed for hosting, storage, identity and business verification, customer relationship management, email, text and push notifications, security, technical support or assisted content functions.

We may disclose relevant information where required by law or lawful authority, to investigate misuse or protect legal rights, or in connection with a lawful transfer or reorganisation of the service. We limit disclosures to the relevant purpose and the protections required by applicable law. Contact us for information about processing relevant to your use of Josoor.

Cookies and similar technologies

Cookies and browser storage can maintain sessions, security settings, preferences and work in progress. They may also support measurement or third-party services where enabled. Browser storage can contain information you enter, such as a saved draft; take care when using a shared device.

The website's Cookie Settings provide categories labelled Necessary, Functional, Analytics, Performance and Advertisement. Necessary technologies are shown as always active. Review the descriptions and choices shown there and use the available controls for optional categories. Your browser can also restrict or remove cookies and stored data, although this may affect sign-in, preferences or other functions. Changing a choice does not automatically remove records already lawfully collected.

Third-party security checks or embedded services can process technical information when they are used. Their own privacy notices also apply to their independent processing. The presence of a cookie category does not mean every technology in that category is used on every page.

Communications and choices

We use your contact details to respond to requests and send relevant account, security and service communications. We respect your promotional communication choices and request consent where required. You can ask to stop promotional messages using the available unsubscribe option or by contacting ask@josoor.ae. Essential service messages may still be needed while your account or request remains active.

Providing information is generally your choice, but we may be unable to verify a business, answer an enquiry or provide a requested feature without the information it needs. Do not send unnecessary identity documents or financial details through general enquiry forms.

Security, retention and international processing

We use organisational and technical measures intended to protect information and control access. No online service can guarantee complete security. Keep your credentials secure and contact us promptly if you suspect unauthorised access or accidental disclosure.

We keep personal information for as long as needed for these purposes or as required by law. Retention depends on the record and the reason it is held, including account administration, business communications, support, security, applicable recordkeeping requirements and legal claims. Some information may remain in operational records, temporary delivery records or backups after it is no longer displayed. A request for deletion is considered against applicable legal duties and the rights of other people; closing an account does not necessarily erase every related record.

Service providers or recipients may process information outside the country in which you use Josoor. Any international processing must follow applicable legal requirements, including any required safeguards or other lawful transfer conditions.

Your rights and contacting us

Subject to applicable law and its conditions, you may request information about processing, access to your personal information, correction, erasure, restriction or cessation of certain processing, portability, or review of relevant automated decisions. You may withdraw consent where processing relies on it, without changing the lawfulness of earlier processing. You may also raise a concern with the competent authority where that right applies.

Contact ask@josoor.ae to exercise a right or raise a privacy concern. Explain the request and the Josoor service involved. We may need proportionate information to verify your identity or authority before releasing or changing records. Do not send passwords or verification codes. We will consider the request under the law that applies, including any permitted limitations.

External websites and policy updates

External websites and services have their own privacy arrangements. Review their notices before providing information to them. We may update this policy as Josoor or applicable requirements change; the date above identifies this version. Where a change requires a further notice or choice, it must be provided as required by law.