PRIVACY POLICY

 

This notice describes the privacy policy (hereinafter referred to as the “Privacy Policy” or “Policy”) of www.uva.sa and its related mobile application, namely ‘UVA’ and ‘UVA Driver’ (hereinafter referred to the “Company” or “UVA” or “us” or “our” or “we”). In this Policy, you shall be referred as “you” or “your”, “user” or “users”.

This Privacy Policy explains what information of yours will be collected by us when you access the Website or App or Services; or when you book services on the Website or App, how the information will be used, and how you can control the collection, correction, and/or deletion of the information. We will not knowingly use or share your information with anyone, except as described in this Privacy Policy. The use of information collected through our Website or App shall be limited to the purposes described under this Privacy Policy and our Terms of Use.

By visiting our Website or App or providing your personal information to us or booking our services, you are accepting and consenting to the practices described in this policy. Please note that this includes consenting to the processing of any personal information that you provide, as described below.

 

IF YOU DO NOT AGREE WITH THESE PRACTICES, PLEASE DO NOT USE THE SERVICES OR THE WEBSITE OR PROVIDE US WITH ANY OF YOUR PERSONAL INFORMATION.

 

CONTENT

1. What information about the users do we collect?

2. Data Controller

3. Lawful basis for processing personal information

4. How do we use this information?

5. Deleting your information

6. Cookies and Similar Technologies

7. Sharing of information

8. Storage and Security of Information

9. Links to third party sites

10. Rights of EU, EEA and UK users/service providers

11. How do we respond to legal requests?

12. Children Privacy

13. How do I withdraw my consent?

14. Governing law and Dispute Resolution

15. Do you have any questions or concerns about this privacy policy?

16. Welcoming of suggestions

 

  1. What information about the users do we collect?

    a)  Information that you provide us: We collect the information you provide when you use our services, including without limitation, when you register for an account, browse our Platform, book any service, make the payment, engage with us through any social media platform, share your feedback, submit a complaint, communicate or interact with us in any manner. This can include personally identifiable information (PII) as well as non-personally identifiable information (non-PII). The examples include your full name, contact, email, address, location data, profile details, user name, password, profile picture, payment or banking information, driver’s license, identity proofs, gender, age, emergency contact information, your queries etc. We also collect information about how you use our services, such as the content you engage with or the frequency and duration of your activities. 

    b)  Location Data: 
     

    i) Service Providers: We collect service provider’s (such as Driver) precise or approximate location data, to enable rides and deliveries, to enable ride/delivery tracking and safety features, to prevent and detect fraud, and to satisfy legal requirements. We collect this data when the our mobile App is running in the foreground (i.e. the app is open and on-screen) or background (i.e. the app is open but not on-screen) of their mobile device.

    ii) Riders/Recipients: Similarly, for riders, we collect your precise or approximate location data to enable and enhance use of our apps, including to improve pick-ups, facilitate deliveries, enable safety features, and prevent and detect fraud. 

    iii) Your Rights: However, we collect such data from users’ mobile devices if they enable us to do so. Now, you may use our App without enabling us to collect precise location data from your mobile devices. However, this may affect features and functionality of the App.


    c) Background check (only for service providers). This may include information such as driver history or criminal record (where permitted by law), license status, known aliases and prior addresses, and right to work. This information may be collected by an authorized vendor on our behalf. 

    d) Information that we collect when you use the Website or App: We also collect information while you access, browse, view or otherwise use the Website or App. In other words, when you access the Website or App, we are aware of your usage of the Website or App, and gather, collect and record the information relating to such usage, including geo-location information, IP address, device and connection information, browser information and web-log information. 

    e) Information that we collect from third party sources: You can engage with us through social media websites or mobile applications. When you engage with us through social media sites, you allow us to have access to certain information from your social media profile based upon your privacy preference settings on such platform.

    f) We will also collect your payment method, so as to provide you a quicker access.

    g) We suggest that you exercise good judgment and caution while providing your personal information. 


     

  2. Data Controller
    UVA is the data controller for the personal data collected in connection with your use of our services in all the jurisdictions where such disclosure has to be made as per the applicable law of the land.

    We operate, and process your personal data, globally. We may also transfer such data to countries other than the one where our users live or use our services. Questions, comments, and complaints about our data practices can be submitted at support@uva.sa


     

  3. What is the lawful basis for which we use your personal information?

    ​You hereby acknowledge that all processing of your personal information will be justified by a "lawful ground" for processing. In the majority of cases, processing will be justified on the basis that:

    - you have provided your consent for us to use your personal information for a specific purpose;
    - our use of your personal information is necessary to perform a contract or take steps to enter into a contract with you; and/or
    - the processing is necessary to comply with a relevant legal obligation or regulatory obligation that we have; or it is necessary to support our legitimate business interests, subject to your interests and fundamental rights.

     

  4. How do we use this information?

    We use all of the information and user data that we have to help us provide, support and improve our services. We use the information collected from you for one or more of the following purposes:-

    a) To enable you to create or update accounts or otherwise access and use the Platform and Services;
    b) To facilitate your bookings;
    c) To process payments;
    d) For internal decision making purposes;
    e) To track and share the progress of rides or deliveries;
    f) To perform necessary operations to maintain our services, including to troubleshoot software bugs and operational problems; to conduct data analysis, testing, and research; and to monitor and analyze usage and activity trends;
    g) To contact you about your booking or request or complaint;
    h) To process your refund (if you are eligible for one);
    i) To enhance your online experience, including as a way to recognize you and welcome you to the Website or App;
    j) To improve our site, services, and customer service;
    k) To be able to deliver our services, personalize content, and make suggestions for you by using this information to understand how you use and interact with our services and the people or things you’re connected to and interested in on and off our services;
    l) We may use personal data for testing, research, analysis, product development, and machine learning to improve the user experience. This helps us make our services more convenient and easy-to-use, enhance the safety and security of our services, and develop new services and features;
    m) We use your information to send you marketing communications, newsletter, communicate with you about our services and let you know about our policies and terms. We also use your information to respond to you when you contact us;
    n) We use the information we have to help verify accounts and activity, and to promote safety and security on of our services, such as by investigating suspicious activity or violations of our terms or policies;
    o) We also use your information to ensure our services are working as intended, such as tracking outages or troubleshooting issues that you report to us. And we use your information to make improvements to our services;
    p) We use information to help improve the safety and reliability of our services. This includes detecting, preventing, and responding to fraud, abuse, security risks, and technical issues that could harm Company, our users, or the public;
    q) To respond to summons, court orders, directions or other judicial processes;
    r) To provide information to law enforcement agencies or in connection with an investigation on matters related to public safety.

     

  5. Deleting your information
    Your information, account and the feedback that you share on our platform is yours. You can at any time delete the same. However, you acknowledge that we may retain some of the information so deleted for a reasonable period of time in order to comply with legal requests. You can request us to delete your information by writing to us at support@uva.sa

     

  6. Cookies and Similar Technologies

    Cookies are bits of electronic information that a website may transfer to a visitor’s computer to identify specific information about the visitor’s visits to another website. We may use automated technologies including the use of web server logs to collect IP addresses, device details, cookies and web beacons. The Website or App uses a browser feature known as a cookie, which assigns a unique identification to your computer. However, in case you do not wish for us to collect such information, simply change the cookie settings on your web browser. 

     

  7. Sharing of Information

    a) We may share certain personal information with our drivers and service providers. For example, we may share your first name, contact, and pickup and/or drop-off locations with the drivers;

    b) We provide personal data to our vendors, consultants, marketing partners, research firms, and other service providers or business partners. This can include payment processors, background check and identity verification providers, cloud storage providers, etc.

    c) Whether you are a user or a service provider, we may share certain information, including your Personally Identifiable Information (PII) with our service providers, users, partners, associates, affiliated entities/subsidiaries/branch offices for legitimate business purposes.

    d) We keep your information safe and do not share your information with any other third party. However, if we merge with or are acquired by another company or we sell our Website or App or business unit, or if all or a substantial portion of our assets are acquired by another company, in those cases, your information will likely be one of the assets that would be transferred.

    e) We may also share your information in response to a legal request. Please refer to Section 12.

     

  8. Storage and Security of Information

    a) Storage: Your data is stored on the servers of a third-party hosting service provider, namely Amazon Web Services multi-region setup Europe and the middle east. The servers and databases in which your information may be stored may be located outside the country from which you accessed this website and, in a country, where the data protection and other laws may differ (and maybe be less stringent) from your country of residence. You hereby consent to any such cross-border transfer of your personal information

    b) Retention: Personal information that we collect, access or process will be retained only so long as necessary for the fulfillment of the purposes for which it was collected, as necessary for our legitimate business purposes, or as required or authorized by law. Personal information that is no longer required to fulfil the identified purposes will be destroyed, erased, or made de-identified or anonymous

    c) Security: AWS employs reasonable security practices to ensure that your information is safe and secure with it. However, no information on the internet is 100% safe, and you accept and acknowledge such risk. Also, we will disclose the information so collected for limited purposes as mentioned in this Privacy Policy.

     

  9. Links to other sites

    The Website or App and the Service may contain links to third-party websites, service providers and online services that are not owned or controlled by us, such as third-party payment gateway service provider. We have no control over, and assume no responsibility for such websites and online services. Be aware when you leave the Website or App; we suggest you read the terms and privacy policy of each third-party websites, service provider and online service that you visit.

     

  10. Rights of EU, EEA and UK users/service providers

    This section of the Policy applies to you if you are in the EU, the European Economic Area (EEA) or UK. 

    Under applicable EU regulation, you have the following rights in respect of your personal information: 

    - to obtain information about how and on what basis your personal information is processed and to obtain a copy; 
    - to rectify inaccurate personal information; 
    - to erase your personal information in limited circumstances where (a) you believe that it is no longer necessary for us to hold your personal information; (b) we are processing your personal information on the basis of legitimate interests and you object to such processing, and we cannot demonstrate an overriding legitimate ground for the processing; (c) where you have provided your personal information to us with your consent and you wish to withdraw your consent and there is no other ground under which we can process your personal information; and (d) where you believe the personal information we hold about you is being unlawfully processed by us; 
    - to restrict processing of your personal information where: (a) the accuracy of the personal information is contested; (b) the processing is unlawful but you object to the erasure of the personal information; (c) we no longer require the personal information for the purposes for which it was collected, but it is required for the establishment, exercise or defence of a legal claim or (d) you have objected to us processing your personal information based on our legitimate interests and we are considering your objection; 
    - to object to decisions which are based solely on automated processing or profiling; 
    - where you have provided your personal information to us with your consent, to ask us for a copy of this data in a structured, machine-readable format and to ask us to share (port) this data to another data controller; or 
    - to obtain a copy of or access to safeguards under which your personal information is transferred outside of the EEA.

    Under certain circumstances, you may have the right to object, on grounds relating to your particular situation, to the processing of your personal data by us and we may be required to no longer process your personal data. Moreover, if your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case your personal data will no longer be processed for such purposes by us.

    In addition to the above, you have the right to lodge a complaint with a supervisory authority for data protection. Please note that the right of access and the right to erasure do not constitute absolute rights and the interests of other individuals may restrict your right of access or erase in accordance with local laws. 

    We will ask you for additional data to confirm your identity and for security purposes, before disclosing data requested by you. We reserve the right to charge a fee where permitted by law. We will decline to process requests that jeopardize the privacy of others, are extremely impractical, or would cause us to take any action that is not permissible under applicable laws. Additionally, as permitted by applicable laws, we will retain where necessary certain personal information for a limited period of time for record-keeping, accounting and fraud prevention purposes.

     

  11. How do we respond to legal requests?

    We may access, preserve and share your information in response to a legal request (like a search warrant, court order or subpoena) if we have a good faith belief that the law requires us to do so. This may include responding to legal requests from law enforcement agencies, courts, tribunals and government authorities. We may also access, preserve and share information when we have a good faith belief it is necessary to: detect, prevent and address fraud and other illegal activity; to protect ourselves, you and others, including as part of investigations; or to prevent death or imminent bodily harm. For example, we may provide information to third-party partners about the reliability of your account to prevent fraud and abuse on and off of our Services. We also may retain information from accounts disabled for violations of our terms for at least a year to prevent repeat abuse or other violations of our terms.

     

  12. Children Privacy

    Protecting children's privacy is important to us. We do not direct the Website or App to, nor do we knowingly collect any personal information from, such children. If you are not of majority (or above) as per the law of jurisdiction that applies to you, you are not authorized to use the Services. If the Company learns that a child has provided personally identifiable information to the Website or App, it will use reasonable efforts to remove such information from its database. Please contact us at support@uva.sa if you believe we knowingly or unknowingly collected information described in this Section.

     

  13. How can I withdraw my consent (OPT-OUT)?

    If you register your account with us or make a booking, you might automatically start receiving promotional emails, SMS, and direct mail from us. If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting us at:
    - support@uva.sa
    support@uva.uk
    - support@uva.eg

     

  14. Governing law and Dispute Resolution

    i) Governing Law: The Terms and any dispute arising out of or relating to the same will be governed by applicable laws of the Saudi Arabia

    ii) Dispute Resolution:

    a) Amicable Resolution: If in case, any controversy, conflict or dispute of any nature arises between the user and UVA, in connection with the provisions of these Terms, or our Privacy Policy, or out of or relating to or in connection with the use of our Website, the parties shall spend at least 30 days to try and use all means to amicably resolve that dispute or conflict or controversy, with mutual discussions.

    b) Binding Arbitration: If however, the attempt to settle such a dispute amicably fail, then such controversy, conflict or dispute between the user and UVA, shall be submitted to the binding expedited Arbitration, to be submitted to an Arbitration Institute, selected by UVA, and the proceeding shall be presided over by a sole Arbitrator, which is to be appointed by the Arbitration Institute so appointed. The proceedings shall be conducted as per the applicable rules of the Arbitration Institute. The language of Arbitration proceedings (including that of any documents to be submitted therein) shall be English and the seat shall be at Saudi Arabia

    c) Cost and Expenses: The parties to the Arbitration proceedings shall mutually bear all the costs and expenses relating to the appointment of Arbitrator, and of the Arbitration proceedings. However, the Arbitrator shall be free to allocate the costs on the breaching party.

    d) Challenge to the Arbitration: In case of any dispute as to the Arbitration clause above or in case of enforcement of the Arbitration award, and in any circumstances where the foregoing Arbitration Agreement permits the parties to litigate in court, the parties hereby agree to submit to the personal jurisdiction of the courts located within Saudi Arabia

     

  15. Do you have questions or concerns about this Privacy Policy?

    In the event you have any grievance regarding anything related to this Privacy Policy or with any content or service of Website or App, in that case you may freely write your concerns through your registered email to Designated

    Grievance Representative at:
    - Name: Mohammad Alghamdi
    - Email: mohammad@innovationlabs.ai
    - Contact: +966533264140

     

  16. Welcoming of suggestions
    We welcome your comments regarding this Privacy Policy. Please write to us at support@uva.sa

     

Last updated on Nov 8, 2021