Privacy Policy

VEXL Logistics Services LLC is a freight forwarding and logistics company based in Dubai, United Arab Emirates, at M04 Alhammadi Bldg, Masalla St, Deira, Dubai. We are the controller of the personal data described here. You can reach us at info@vexl.ae or +971 58 830 9229.

We process personal data under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and applicable UAE freight, customs and tax legislation.

We collect the following, and nothing beyond what our services require:

• When you request a quote: your name, email address, phone number and company name; the receiver’s name and phone number; and the shipment details you enter (origin, destination, weights, dimensions, service type).
• When you create an account: the above, plus a password, which is stored only as a one-way hash and never in a readable form.
• When you track a shipment: the waybill number you enter, together with the technical data described below. Tracking does not require an account and we do not ask who you are.
• When we carry a shipment for a customer: the consignee’s name, phone number and delivery address, and on delivery a signature and a proof-of-delivery photograph. This information usually reaches us from our customer rather than from the consignee directly — see below.
• Operational records: shipment status history, scan events, invoices, cash-on-delivery amounts where we collect payment on your behalf, and where relevant the location recorded when a driver updates a shipment’s status.
• Automatically, on every visit: your IP address and basic request details. We use these to rate-limit abuse of our quote, tracking and sign-in forms and to keep security records. We do not use them to build a profile of you.

We do not collect payment card details. We do not operate any advertising, analytics, profiling or session-recording technology, and we do not buy personal data from third parties.

• To perform the contract — quoting, booking, carrying, tracking, delivering and invoicing shipments.
• To meet legal obligations — customs and transport documentation, and tax records that UAE law requires us to retain.
• For our legitimate business interests — operating and securing the platform, preventing abuse, and keeping an audit trail of actions taken on shipments and invoices.
• With your consent — marketing messages only. Consent is off by default. We record it either when you tell us directly or when our staff record your agreement on your behalf, and we send marketing only to contacts whose consent is currently recorded.

If someone has sent you a shipment through VEXL, we hold your name, phone number and delivery address because our customer gave them to us so that we could deliver to you. We use that information to complete the delivery, to prove it happened, and to keep the records that transport and customs rules require. Your name is also shown on the package page that a waybill or package label number opens, so that whoever is handling the parcel can confirm they have the right one. We do not use consignee details for marketing.

Anyone who has a valid waybill number can see that shipment’s status, estimated arrival, and the sequence of milestones it has passed — for example that it departed a named airport. This is deliberate: it lets a sender and a receiver follow a shipment without an account.

Free-text notes recorded by our staff and drivers against a shipment are shown on that tracking page. A waybill or package label number also opens a package page showing the consignee’s name and the waybill and flight references.

Precise vehicle or driver coordinates are not shown to unauthenticated visitors. They are visible only to our own staff.

We use a small number of cookies and no tracking technologies:

• Session, sign-in and security cookies — set when you visit our sign-in page or while you are signed in, to keep you signed in and to protect forms against cross-site request forgery. These are strictly necessary; the site cannot offer accounts without them.
• A language preference cookie (NEXT_LOCALE) — remembers whether you chose English or Arabic. It holds nothing but that choice.

We set no advertising, analytics or profiling cookies, and the site stores nothing else in your browser.

We do not sell personal data. We share it only where running the service requires it:

• Our own systems. Our customer relationship system and our email-campaign system run on our own server infrastructure rather than on a third-party service.
• Message delivery providers. To send you an email, SMS, WhatsApp or Telegram message, the message and your address or number pass through the relevant delivery provider.
• Mapping services. Pages that display a map load map imagery from OpenStreetMap. As with any image loaded from another website, your IP address and browser details are visible to that service. We also send shipment destination cities — never a consignee’s address — to OpenStreetMap’s geocoding service and to a public routing service, in order to plan delivery routes.
• Carriers, airlines, handling agents and customs authorities — where a shipment cannot be carried or cleared without them.
• Professional advisers and authorities — where we are legally required to disclose.

We keep personal data for as long as we need it for the purpose it was collected, and then for as long as UAE tax, customs and transport law requires records to be retained. Shipment and invoice records are kept for the statutory minimum period. Security and audit records are kept so that we can investigate incidents and demonstrate what was done to an account or a shipment.

You can ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, or restrict or object to how we use it. You can ask us to delete it, and we will do so unless we are required to keep it — for example because it forms part of a customs or tax record.

If you hold a portal account, you can change your notification and marketing preferences yourself at any time in your account settings. We act on a withdrawal without delay; a campaign already being sent may take a short time to stop. If you do not have an account, email us and we will action it.

To exercise any of these, contact info@vexl.ae. We may need to verify your identity first, so that we do not disclose your data to someone else, and we aim to respond within 30 days.

You may also ask us to provide the personal data you gave us in a structured, commonly used machine-readable format, or to transfer it to another provider where that is technically feasible.

If you believe we have not handled your personal data properly, you can complain to the UAE Data Office. We would ask you to raise it with us first so we have a chance to put it right.

Passwords are stored using a one-way hashing algorithm designed for the purpose, and are never recoverable in readable form. Password-reset and account-invitation links are stored only as hashes, expire, and can be used once. Sign-in attempts are rate-limited, and access to each part of the platform is restricted by role and checked on every request against a signed session, and a deactivated account loses access without waiting for its session to expire. Access to delivery photographs and signatures is restricted to our staff, the customer the shipment belongs to, and the assigned driver.

No system is perfectly secure, and we do not claim otherwise. If a breach affects your personal data we will act on it and notify you and the relevant authority where the law requires it.

Our systems are operated from the United Arab Emirates. Some of the message delivery and mapping services described above may process data outside the UAE. Where a shipment crosses a border, the information needed to carry and clear it necessarily travels with it to carriers and authorities in the destination country.

Where we transfer personal data outside the UAE, we do so because it is necessary to perform the contract with you — for example to deliver a shipment to its destination country — or under contractual terms with the provider concerned requiring them to protect it to a standard consistent with UAE law.

Our services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will remove it.

We may update this policy as our services change. The date at the top of this page shows when it was last revised. Where a change materially affects how we use your data, we will take reasonable steps to tell you.

Questions about this policy or about your data: info@vexl.ae, +971 58 830 9229, or M04 Alhammadi Bldg, Masalla St, Deira, Dubai, UAE. See also our Terms of Service.