1. Who We Are

RyderX Delivery Services W.L.L. (“RyderX”, “we”, “us”, “our”) is a limited liability company registered in the State of Qatar (Commercial Registration No. 240530), with its principal place of business in Doha, Qatar. We provide last-mile delivery services, rider fleet management, and related logistics solutions to businesses operating in Qatar.

For the purposes of applicable data protection legislation, RyderX acts as the data controller in respect of personal data collected through this website and in the course of our business operations.

Our designated contact for data-protection matters is reachable at: info@ryderx.qa

2. Personal Data We Collect

We collect personal data in the following categories, depending on how you interact with us:

• Contact & identity data: name, job title, company name, email address, phone/WhatsApp number. Collected when you submit a contact form, quote request, or partner application.
• Business & operational data: commercial registration number, establishment card details, delivery zone preferences, order volumes, and service requirements. Collected in the context of entering into or performing a service contract.
• Communications data: the content of messages, emails, or enquiries you send us, including any attachments.
• Usage & device data: IP address, browser type and version, operating system, referring URL, pages visited, time on page, and other diagnostic data collected automatically when you visit our website via cookies and server logs.
• Cookie & analytics data: identifiers set by first-party or third-party analytics tools (see Section 5 for full details).
• Payment & financial data: where applicable, billing information such as bank account details or payment references, collected only through secure, industry-standard channels. We do not store raw card numbers.

We collect only the minimum data necessary for the specific purpose for which it is collected (data minimisation principle).

3. How & Why We Use Your Data

We use personal data for the following purposes:

• Providing our services: processing enquiries, preparing proposals, entering into service agreements, dispatching riders, and managing delivery operations.
• Account & contract management: maintaining records of clients and partners, billing, invoicing, and SLA reporting.
• Communication: responding to your enquiries, sending operational updates, and providing customer support.
• Marketing communications: with your consent where required, sending information about our services, promotions, or events. You may opt out at any time.
• Website analytics & improvement: understanding how visitors use our site so we can improve content and user experience.
• Security & fraud prevention: detecting and preventing fraudulent or malicious activity, protecting our systems and our clients.
• Legal & regulatory compliance: meeting obligations under Qatar law, including record-keeping, responding to lawful requests from public authorities, and resolving disputes.

4. Legal Bases for Processing

Where the GDPR or similar frameworks apply to our processing of your personal data, we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR): processing necessary to deliver our services to you, or to take steps at your request before entering a contract.
• Legitimate interests (Art. 6(1)(f) GDPR): where we have a genuine business interest that is not overridden by your rights — for example, security, fraud prevention, analytics, and improving our services.
• Consent (Art. 6(1)(a) GDPR): where you have freely given, specific, informed consent — for example, for optional marketing emails or the placement of non-essential cookies.
• Legal obligation (Art. 6(1)(c) GDPR): where processing is required to comply with applicable law.

For California residents: we do not “sell” personal information as defined under CCPA/CPRA, and we do not share personal information for cross-context behavioural advertising without opt-in consent.

5. Cookies & Tracking Technologies

Our website may use cookies and similar technologies (such as pixel tags and local storage) to operate correctly, remember your preferences, and understand usage patterns.

Categories of cookies we may use:

• Strictly necessary: essential for the site to function (e.g., session management). These cannot be disabled.
• Analytics & performance: help us understand visitor behaviour (e.g., Google Analytics or similar tools). We anonymise IP addresses where possible.
• Functional: remember your preferences to improve your experience.
• Marketing (optional): used only with your explicit consent. May include retargeting pixels.

Managing cookies: you can manage or disable non-essential cookies via your browser settings (typically under Privacy or Security). Disabling cookies may affect the functionality of certain parts of the site. Where required by law, we display a cookie consent banner before placing non-essential cookies.

6. Data Sharing with Third Parties

We do not sell, rent, or trade your personal data. We may share data with the following categories of third parties, only to the extent necessary and under appropriate contractual protections:

• Cloud hosting & infrastructure providers: who host our website and store data securely on our behalf.
• Analytics providers: (e.g., web analytics platforms) who help us understand site performance — subject to data processing agreements and, where applicable, EU Standard Contractual Clauses.
• Email & communications service providers: used to send transactional and marketing emails.
• Payment processors: licensed and PCI-DSS compliant, processing financial transactions on our behalf.
• Professional advisers: lawyers, accountants, and auditors who require access to data in the context of professional advice.
• Regulatory and public authorities: where we are legally required to disclose information, such as in response to a court order or government investigation.

We require all third-party processors to implement appropriate technical and organisational measures to protect your data.

7. Data Storage, Security & Retention

Your data is stored on secure servers, protected by industry-standard measures including:

• Encryption in transit (TLS/HTTPS) and at rest where appropriate
• Access controls and role-based permissions limiting who can view personal data
• Regular security assessments and vulnerability monitoring
• Secure deletion procedures when data is no longer required

Retention periods are determined by the purpose for which data was collected:

• Contact form enquiries: retained for up to 2 years, or until you request deletion.
• Active client and contract data: retained for the duration of the contract plus 7 years, to comply with commercial and tax record-keeping obligations under Qatar law.
• Website analytics data: typically retained in aggregated form for up to 26 months.
• Marketing consent records: retained until you withdraw consent plus a reasonable period for compliance evidence.

No method of transmission or storage is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights, we will notify you and any applicable regulatory authority as required by law.

8. Your Rights

Depending on your location and applicable law, you may have the following rights in relation to your personal data:

For California residents, you additionally have the right to opt out of the sale or sharing of personal information (we do not engage in such practices), and the right not to be discriminated against for exercising your privacy rights.

To exercise any of these rights, please contact us at info@ryderx.qa with the subject line “Data Rights Request”. We will respond within 30 days (or within the legally required period under applicable law). We may need to verify your identity before processing your request.

9. International Data Transfers

RyderX operates primarily in Qatar. Some of our third-party service providers (such as cloud hosting or analytics platforms) may store or process data in countries outside of Qatar, including within the European Economic Area, the United Kingdom, or the United States.

Where data is transferred to countries that may not provide an equivalent level of data protection to your home jurisdiction, we ensure appropriate safeguards are in place, such as:

• EU Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms
• Contractual obligations requiring third-party processors to maintain comparable data protection standards
• Adequacy decisions recognised by applicable regulatory authorities

If you would like more information about the safeguards we use for international transfers, please contact us at info@ryderx.qa.

10. Children & Minors

Our website and services are directed at businesses and business professionals. We do not knowingly collect personal data from individuals under the age of 18 (or the applicable age of majority in your jurisdiction).

If we become aware that we have inadvertently collected personal data from a minor without appropriate consent, we will take prompt steps to delete that data. If you believe we may have collected data from a minor, please notify us immediately at info@ryderx.qa.

11. Changes to This Policy

We may update this Privacy & Data Protection Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the “Last updated” date at the top of this page
• Post a prominent notice on our website for a reasonable period following the change
• Where required by law or where changes are significant, notify you directly (e.g., via email)

We encourage you to review this policy periodically. Your continued use of our website or services after changes are posted constitutes your acknowledgement of the updated policy.

12. How to Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

• Email: info@ryderx.qa (subject: “Privacy Enquiry”)
• Company: RyderX Delivery Services W.L.L.
• Address: Doha, State of Qatar
• CR No.: 240530

If you are located in the EU/UK and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or the relevant EU DPA). If you are in California, you may contact the California Privacy Protection Agency (CPPA).