Privacy Policy

How we collect, use, and protect your personal data

Last updated: May 2026 · Version 1.0

This Privacy Policy explains how Foodio Global Foods FZE LLC (“Laziz”, “we”, “us”) collects, uses, stores, and protects your personal data when you use the Laziz platform. We are committed to protecting your privacy in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“PDPL”). Please read this policy carefully before using Laziz.

1. Who We Are

Laziz is operated by Foodio Global Foods FZE LLC. The Operator is the data controller for all personal data collected through the Laziz platform at laziz.ae and through its associated mobile and progressive-web applications.

We act as a payment collection agent for our Merchant partners and as a delivery service operator. In these capacities we process personal data to fulfil orders, coordinate delivery, and communicate with you about your use of the platform.

2. What Data We Collect

2.1 Data You Provide Directly

• Account details: your name, phone number, and email address.
• Delivery information: your delivery address, building name, floor, and any access instructions you provide.
• Payment information: payment card details, processed securely through our regulated payment service provider. We do not store full card numbers on our systems.
• Order information: the items you order, your preferences, dietary notes, and order history.
• Communications: messages you send to our support team, reviews you submit, and feedback you provide.
• Referral information: your referral code usage and any referral contacts you choose to share.

2.2 Data We Collect Automatically

• Device information: device type, operating system, browser type, and app version.
• Location data: your delivery address and, where you grant permission, your approximate real-time location to assist with delivery coordination.
• Usage data: how you interact with the platform — pages you visit, items you view, and features you use.
• Cookies and similar technologies: session cookies, preference cookies, and analytics identifiers. See Section 9.
• Log data: IP address, access times, referring URLs, and error logs.

2.3 Data We Receive from Third Parties

• Payment status confirmations from our payment service provider.
• Where you sign in using a third-party service (such as Apple or Google), the profile information you authorise that service to share with us.

3. How We Use Your Data

• Order fulfilment: to process your orders, communicate order status, coordinate delivery, and resolve issues.
• Account management: to create and maintain your Laziz account, authenticate you, and manage your preferences.
• Delivery operations: to share your address and contact information with our delivery personnel.
• Payment processing: to process payments and manage refunds.
• Customer support: to respond to enquiries, complaints, and feedback.
• Platform improvement: to analyse usage patterns and improve features.
• Marketing communications: to send you promotional offers and updates — only where you have opted in. You may opt out at any time via your account settings or the unsubscribe link in any marketing message.
• Legal compliance: tax reporting, fraud prevention, and other UAE regulatory requirements.
• Safety and security: to detect and prevent fraud, abuse, and unauthorised access.

4. Legal Basis for Processing

We process your personal data on the following legal bases under PDPL:

• Contract performance — processing necessary to fulfil your order and deliver the services you have requested.
• Legitimate interests — improving the platform, detecting fraud, and managing our business, balanced against your rights.
• Legal obligation — tax, regulatory, and anti-money-laundering requirements.
• Consent — marketing communications and non-essential cookies. You may withdraw consent at any time.

5. Who We Share Your Data With

We do not sell your personal data. We share it only as necessary and only with the following recipients:

• Merchant restaurants: your name, phone number, and order details, solely so the Merchant can prepare your order.
• Delivery personnel: your delivery address, building details, and contact phone number, solely so we can complete your delivery.
• Payment service providers: payment information shared with our regulated payment processor to authorise and settle transactions.
• Technology service providers: cloud hosting, transactional email, push notifications, analytics, and customer support tools that process data on our behalf under written agreements.
• Legal and regulatory authorities: where required by UAE law, court order, or regulatory directive.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the successor entity under the same protections.

We never share your personal data with advertisers, data brokers, or any third party for their own marketing purposes.

6. Data Retention

We keep your personal data only for as long as necessary to provide our services and to meet our legal obligations. The applicable periods are:

• Active account data: retained while your account is active. If you request account deletion via your profile, we apply a 30-day recovery window during which you may restore your account by contacting support@laziz.ae. After day 30 we permanently anonymise your personal identifiers (name, email, phone, delivery addresses) in line with PDPL Article 12.
• Order, invoice, and payment records: retained for 5 years from the date of the transaction in accordance with UAE Federal Tax Authority record-keeping requirements (VAT Decree-Law No. 8 of 2017) and UAE commercial law. After anonymisation, these records cannot be linked back to your identity but remain for tax purposes.
• Marketing consent records: retained until you withdraw consent. We keep the record of withdrawal itself as long as needed to honour your choice.
• Support communications: retained for 24 months from the date the ticket is resolved, then deleted, unless a longer period is required to resolve an ongoing dispute or comply with law.
• Log and security data: retained for 12 months for fraud detection and security monitoring.

7. Your Rights

Under PDPL you have the following rights in respect of your personal data:

• Right to access — request a copy of the personal data we hold about you.
• Right to correction — request that inaccurate or incomplete data be corrected.
• Right to deletion — request that we delete your data where we no longer have a lawful basis to retain it.
• Right to restriction — request that we limit processing in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact info@laziz.ae. We will respond within 30 days. We may ask you to verify your identity before we act on a request.

8. Data Security

We apply technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or loss. These include:

• Encryption of all data in transit using TLS, enforced via HTTP Strict Transport Security at our edge.
• Access controls restricting personal data to authorised personnel under a least-privilege model.
• Secure server infrastructure hosted in reputable, audited data centres.
• Regular security assessments, dependency scanning, and code review.

In the event of a personal data breach that poses a risk to your rights, we will notify the competent UAE authority and affected users in accordance with PDPL.

9. Cookies

The Laziz platform uses cookies and similar technologies to operate the platform, remember your preferences, and analyse how the platform is used:

• Essential cookies: necessary for the platform to function. These cannot be disabled.
• Preference cookies: remember your language, location, and other settings.
• Analytics cookies: help us understand how users interact with the platform so we can improve it. Set only with your consent.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core ordering functions of the platform.

10. Children

The Laziz platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with their personal data, please contact info@laziz.ae and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. We will notify you of material changes at least 30 days in advance by email or by a prominent notice on the platform. The updated policy will state the date it was last revised. Your continued use of the platform after the effective date constitutes acceptance of the revised policy.

12. Contact Us

This Privacy Policy is effective as of May 2026 and applies to all users of the Laziz platform.