Privacy Policy

1. Introduction

Trufast ("Trufast", "we", "us" or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect when you visit www.trufastco.com (the "Website"), contact us, or use our road transport and logistics services, how we use it, who we share it with, and the choices and rights you have.

This policy applies to personal data we process in connection with the Website and with enquiries about, and the performance of, our services. Where you have a transport or logistics agreement with us, the terms of that agreement may also govern how personal data is handled in performing it.

2. Personal data we collect

Personal data means any information that identifies you, directly or indirectly, on its own or in combination with other information.

Information you give us

When you contact us by email, request a quotation, book a shipment or apply for a position with us, we collect the information you choose to provide. This typically includes your name, company name and job title, email address, telephone number, postal or site address, details of the cargo, origin, destination and timing of the transport you require, and any identification or licensing details needed for customs, border or security procedures.

Information about other people

When arranging a shipment you may give us personal data about other people, such as consignors, consignees, site contacts or drivers. By providing it you confirm that you are entitled to share that information with us and that those people have been informed of, and where required have consented to, its use for the purposes described in this policy.

Information collected automatically

When you visit the Website, our hosting provider and any analytics tools we use may automatically record technical information such as your IP address, browser type and version, device type, operating system, referring website, pages viewed and the dates and times of your visits. Cookies and similar technologies may also collect a unique identifier and your preferences. See section 11 for details.

Information from other sources

We may receive personal data from our customers, transport partners, customs brokers and agents, from public registers and commercial databases used to verify businesses and comply with sanctions and licensing rules, and from customs, port and other authorities in the course of a shipment.

3. How we use personal data

We use personal data to:

respond to your enquiries and prepare quotations;
enter into and manage contracts and accounts with our customers and partners;
plan, coordinate and perform transport and logistics services, including pickup, delivery, customs and cross-border formalities;
keep you informed about the status of your enquiry or shipment and about relevant changes affecting it;
operate, secure and improve the Website, and understand how it is used;
evaluate applications for employment or driving positions with us;
send you marketing communications where permitted (see section 5);
prevent, detect and investigate fraud, security incidents and misuse of the Website or our services;
comply with legal, regulatory, customs, tax, sanctions and licensing obligations;
establish, exercise or defend legal claims and resolve disputes;
tell you about significant changes to this policy or to our services.

We do not sell personal data.

4. Legal basis

We process personal data in accordance with applicable data protection law in the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and any other laws that apply to our operations in the GCC. We rely on one or more of the following grounds: your consent; the need to take steps at your request before entering into a contract, or to perform a contract with you; compliance with a legal obligation; and our legitimate interests in operating, protecting and promoting our business and the Website, provided those interests are not overridden by your rights and freedoms.

5. Marketing communications

We will only send you marketing by email or other electronic means where you have consented, or where you are an existing customer and applicable law allows us to contact you about services similar to those you have used. Every marketing message we send includes a simple way to unsubscribe. You can also opt out at any time by emailing info@trufastco.com. Opting out of marketing does not affect service messages about your enquiry or shipment.

6. Profiling and automated decisions

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. We may analyse Website usage and enquiry patterns in aggregate to improve our services and to tailor the information we present to business visitors. You can object to any such analysis of your data by contacting us. [Confirm with Trufast whether any CRM scoring, retargeting or similar tools are used.]

We share personal data only where reasonably necessary and with appropriate safeguards, with:

transport partners, drivers, customs brokers, warehouse operators and other subcontractors involved in performing a shipment;
customs, port, border, road transport and other government authorities where required for clearance, permits or by law;
service providers who host the Website, provide email, IT, analytics, payment processing or professional services to us, acting on our instructions;
insurers, loss adjusters, banks, auditors, lawyers and other professional advisers;
courts, regulators, law enforcement and other third parties where required by law, court order or legal process, or to investigate suspected fraud, identity theft or other unlawful activity;
a prospective or actual purchaser, investor or successor in connection with a sale, merger, financing or reorganisation of our business, under appropriate confidentiality terms;
any other person where you have asked us to, or have consented.

8. International transfers

Because we arrange cross-border transport within the GCC, and because some of our service providers may operate from other countries, your personal data may be transferred to and processed in countries other than the one in which you are located. Those countries may have data protection rules that differ from your own. Where we transfer personal data abroad, we take steps to ensure it receives an adequate level of protection in line with applicable law, for example through contractual safeguards with the recipient.

9. Retention

We keep personal data only for as long as necessary for the purposes described in this policy, which includes meeting our business needs, legal and regulatory obligations and resolving disputes. Enquiry details that do not result in a contract are generally kept for no longer than 12 months. Records relating to shipments, customs declarations and invoices are retained for the period required by customs, tax and commercial law in the relevant jurisdictions. Unsuccessful job applications are retained for no longer than 6 months unless you ask us to keep them. [Retention periods to be confirmed by Trufast.]

10. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, including access controls, encrypted connections, firewalls and internal policies and procedures for our staff and subcontractors. Please note that no method of transmission over the internet or of electronic storage is completely secure, and we cannot guarantee absolute security.

11. Cookies and similar technologies

The Website currently uses only the cookies and local storage that are strictly necessary for it to function, such as remembering your motion preference for the session. These do not require your consent.

If we introduce analytics, advertising or social media tools (for example Google Analytics or a Meta Pixel), we will ask for your consent when you first visit the Website, list the tools and what they collect in this section, and allow you to change your choice at any time. [Complete when tools are selected.]

You can also control cookies through your browser settings. Blocking some cookies may affect how the Website works.

12. Third-party websites

The Website may contain links to websites operated by others, such as partners, authorities or social media platforms. We do not control those websites and are not responsible for their content or privacy practices. This policy applies only to personal data collected through the Website and our own services, and we encourage you to read the privacy notice of any other website you visit.

13. Children

The Website and our services are intended for business users and are not directed at children. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us with personal data, please contact us so that we can delete it.

14. Your rights

Subject to applicable law, you may have the right to request access to the personal data we hold about you, to have inaccurate data corrected, to have your data erased or its processing restricted, to object to processing, to receive your data in a portable format, and to withdraw any consent you have given at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at info@trufastco.com. We may need to verify your identity before responding, and we will respond within the period required by law. You also have the right to lodge a complaint with the UAE Data Office or another competent data protection authority.

15. Visitors from the EEA and UK

If you are located in the European Economic Area or the United Kingdom, the General Data Protection Regulation or the UK GDPR may apply to our processing of your personal data. In that case, in addition to the rights set out in section 14, you may have the right to object to processing based on our legitimate interests, and you may lodge a complaint with the supervisory authority in the country where you live or work. Where we transfer your personal data outside the EEA or the UK, including to the UAE, we rely on safeguards recognised under those laws, such as standard contractual clauses. [Confirm whether Trufast markets to, or handles shipments for, EEA or UK based customers; if not, this section can be shortened.]

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology or the law. Changes will be published on this page with an updated "Last updated" date, and where a change is significant we will take reasonable steps to bring it to your attention, for example by email to existing customers. We encourage you to review this page periodically.

17. Contact

Questions, requests or concerns about this Privacy Policy or our handling of your personal data can be sent to info@trufastco.com. [Add the postal address of the responsible Trufast entity and, if appointed, the name or role of the data protection contact.]