Privacy Policy
QarGo Digital Solutions and Car Brokerage Platform
QarGo Digital Solutions and Car Brokerage (“QarGo,” the “Company,” “we,” “us” or “our”) is committed to protecting the privacy of everyone who uses its website, applications and services. This Policy explains, in detail and transparently, the personal data we collect, its sources, the purposes and legal bases for processing, the parties with whom it may be shared, the applicable retention periods, our safeguards, and the rights available to data subjects and how to exercise them. It is intended to be consistent with Qatar Law No. 13 of 2016 on Personal Data Privacy Protection and, where applicable to customers or Partners outside Qatar, relevant principles of the EU General Data Protection Regulation and applicable United States privacy laws.
Creating an Account, downloading the application, browsing the website or booking a Service confirms that the User has read and understood this Policy and accepts the processing described in it. A User who does not agree must refrain from using the Platform.
Article 1: Definitions
“Personal Data” means any data relating to an identified or identifiable natural person, directly or indirectly, by reference to an identifier such as a name, identity number, location data or online identifier, or to one or more factors specific to that person’s physical, physiological, mental, economic, cultural or social identity.
“Sensitive Personal Data” means a special category of Personal Data, including biometric and health data and data concerning religious belief or political affiliation, that is subject to stricter processing controls.
“Processing” means any operation or set of operations performed on Personal Data by automated or non-automated means, including collection, recording, organization, storage, alteration, retrieval, use, disclosure, transfer, combination, restriction, erasure or destruction.
“Data Controller” means QarGo Digital Solutions and Car Brokerage in its capacity as the entity that determines the purposes and means of Processing Personal Data.
“Data Processor” means any natural or legal person that processes Personal Data for the Data Controller and under its documented instructions, such as hosting, analytics and payment providers.
“Data Subject” means the User to whom the Personal Data relates, whether a registered User or a visitor to the Platform.
“Partner” means an independent provider of vehicles or transportation services through the QarGo Platform without an employment relationship with QarGo.
“Third Party” means any natural or legal person other than the User, QarGo and its Data Processors, including public authorities and independent service providers.
“Profiling” means automated Processing used to evaluate personal aspects of a Data Subject, such as performance, preferences or behavior.
“Cookies” means small text files stored on a User’s device when visiting the Platform to recognize the browser and preferences on later visits.
“Account” means the digital record created by a User to access the Services.
Article 2: Scope of this Policy
This Policy applies to all Personal Data processed by QarGo in connection with:
- visiting or browsing the website, whether or not an Account is created;
- downloading or using any interface of the application;
- creating an Account and using self-drive or car-with-driver Services;
- contacting support by telephone, email, electronic chat or social media;
- participating in promotions, surveys or referral programs; and
- applying to work as a Driver or fleet Partner, to the extent not governed by a separate employee or applicant privacy policy.
This Policy does not apply to Third-Party websites, applications or services, even when accessed through links in the QarGo Platform, as explained in Article 17.
Article 3: Personal Data We Collect
The categories collected depend on the User’s interaction with the Platform:
| Category | Examples | When collected |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, identity card, residence permit or passport image, and personal photograph | Account creation and identity verification |
| Driving-Licence Data | Licence number, issue and expiry dates, class, licence image and traffic record | Registration for self-drive Services |
| Contact Data | Telephone number, email address and postal address | Registration and updates |
| Payment and Transaction Data | Encrypted payment-card details, bank-account number, transaction history and invoices | Adding a payment method or completing a Booking |
| Location Data | Real-time and historical location while using a Service and pickup and destination points | Active Booking or trip |
| Device and Technical Data | Device type, operating system, IP address, unique device identifier, application version and network information | Automatically on use |
| Usage Data | Booking history, pages and features used, session duration and referral source | Browsing and use |
| Communications Data | Support correspondence, call recordings after notice, and chat messages | Contacting support |
| Visual and Audio Data | Vehicle pickup and return photographs and available internal or external Vehicle-camera footage | An active Vehicle Booking |
| Third-Party Data | Referral data from another User and identity-verification provider data | Referral or verification |
| Marketing and Preference Data | Communication preferences, campaign responses and survey results | Voluntary participation |
QarGo does not intentionally collect Sensitive Personal Data concerning race, religious belief, political opinion or health unless required by law or voluntarily supplied in a specific context, such as a request for special assistance.
Article 4: Sources of Personal Data
- Data provided directly: during registration, booking, support contact, surveys or promotions.
- Data collected automatically: through Platform use, Cookies, tracking technologies, GPS and in-Vehicle sensors.
- Data from external sources: identity-verification providers, insurers, competent public authorities, referral Partners and, where applicable, credit-data providers.
- Inferred Data: QarGo may infer information, such as usage patterns or risk estimates, from collected data within the purposes authorized by this Policy.
Article 5: Legal Bases for Processing
QarGo processes Personal Data only on a valid legal basis:
| Legal basis | When relied upon |
|---|---|
| Performance of a contract | Processing necessary to create an Account, provide a Service, collect amounts due and manage Bookings |
| Legal obligation | Disclosures to public authorities or retention of financial and accounting records as required by law |
| Legitimate interest | Fraud prevention, service improvement, safety and protection of QarGo’s legal rights, without overriding the Data Subject’s fundamental rights and freedoms |
| Express consent | Non-essential marketing, certain non-essential Cookies and any Processing for which express consent is legally required |
| Vital interest | Exceptional Processing necessary to protect the life or safety of the Data Subject in an emergency |
Article 6: Purposes of Processing
QarGo processes Personal Data to:
- create Accounts and verify identity and legal eligibility;
- provide requested Services, manage Bookings, process payments and issue invoices;
- verify compliance with usage conditions and road-safety rules;
- prevent fraud and Platform misuse and investigate incidents and complaints;
- comply with legal and regulatory obligations and make required disclosures;
- improve service quality, develop Platform features and conduct studies and statistical analysis;
- personalize the User experience and provide relevant recommendations and offers;
- communicate about Bookings, operational notices and security updates;
- send marketing communications and promotions where the User has consented or where law permits them without prior consent; and
- conduct credit or risk assessments, where applicable, before approving certain Services.
Article 7: Cookies and Similar Technologies
QarGo uses Cookies, pixel tags, local storage, device identifiers and similar technologies as follows:
| Type | Purpose | Consent required? |
|---|---|---|
| Necessary Cookies | Core Platform operation, including session management and authentication | No—necessary to provide the Service |
| Performance and Analytics Cookies | Measure Platform use and improve performance | Yes |
| Functionality Cookies | Remember preferences such as language and region | Yes, unless necessary for a feature expressly requested by the User |
| Advertising and Targeting Cookies | Display personalized advertising and measure campaign effectiveness | Yes |
The User can manage non-essential Cookie preferences through the Platform’s privacy-settings tool or browser settings. Disabling necessary Cookies may prevent certain Platform functions from operating.
Article 8: Advertising and Direct Marketing
Where consent is required by law, QarGo may use usage and preference data with the User’s consent to display personalized promotional content through the Platform, email, text message or in-app notification. QarGo does not share personally identifiable information with external advertising networks for advertising without the User’s express consent. The User may unsubscribe from marketing at any time through the unsubscribe link in each message or Account settings. This does not stop necessary operational Service notices.
Article 9: Automated Decision-Making and Profiling
QarGo may use automated systems to assess credit or insurance risk, determine demand-based dynamic pricing or detect fraudulent activity. No decision with a material legal effect on the User, such as a final refusal of Service, will be based exclusively on automated Processing without human involvement. A User may request human review of an automated decision believed to have caused a materially adverse effect by using the channels in Article 25.
Article 10: Sharing Personal Data
QarGo does not sell Personal Data to any Third Party for monetary consideration. It may share the minimum data necessary for the Processing purpose with:
| Recipient | Purpose |
|---|---|
| Vehicle-operating Partners and Drivers | Perform the Booking and provide the requested Service |
| Insurers | Cover risks and settle accident claims |
| Electronic-payment providers and banks | Complete financial transactions and process payments |
| Government, judicial and security authorities | Comply with a legal obligation, execute a valid official request or report a traffic violation |
| Technical service providers acting as Data Processors | Cloud hosting, analytics, text messaging and email under binding data-processing agreements |
| Legal and financial advisers | Obtain advice or defend QarGo’s legal rights |
| Parties to a corporate restructuring | A merger, acquisition or sale of assets, with notice of any material change |
QarGo will enter into a written data-processing agreement with each Data Processor requiring protection standards no lower than QarGo’s own and prohibiting use outside documented instructions.
Article 11: International Data Transfers
QarGo may use cloud or technical providers located outside Qatar for storage or Processing. Before an international transfer, QarGo will apply at least one of the following safeguards:
- verify that the recipient country provides an adequate level of Personal Data protection;
- enter into standard contractual clauses requiring the recipient to apply the required protection standards; or
- obtain the Data Subject’s express consent after explaining potential risks where other safeguards are unavailable.
The Data Subject may request a copy of the safeguards applied to an international transfer through the contact channels in this Policy.
Article 12: Data Retention
QarGo retains Personal Data only for the period necessary to achieve the purpose of collection, according to the following indicative schedule, unless law or ongoing litigation requires longer retention:
| Data category | Indicative retention period |
|---|---|
| Basic Account Data | While the Account remains active and up to two years after closure to evidence the relationship |
| Financial Transactions and Invoices | Ten years from the transaction, in accordance with accounting-record requirements |
| Driving-Licence and Identity-Verification Data | While the Account remains active and up to three years after closure |
| Detailed Location Data | Ninety days after the trip, unless subject to an ongoing investigation |
| Call Recordings and Support Correspondence | One year after the communication |
| Marketing and Preference Data | Until consent is withdrawn or the User unsubscribes |
| Accident and Insurance-Claim Records | Ten years after the file is closed or until the applicable limitation period expires |
At the end of the retention period, QarGo will erase the data or irreversibly anonymize it unless a legal basis requires continued retention.
Article 13: Information Security
QarGo applies technical and organizational measures to protect Personal Data, including:
- encryption of Sensitive Data in transit and at rest;
- strict need-to-know access controls and least-privilege permissions;
- multi-factor authentication for sensitive internal systems;
- continuous system monitoring for unauthorized access attempts;
- periodic penetration tests and security assessments; and
- staff training on data-protection standards and secure handling.
Despite these measures, QarGo acknowledges that no method of internet transmission or electronic storage is absolutely secure and undertakes to exercise the care of an ordinarily prudent person.
Article 14: Personal-Data Breach Notification
If a security incident results in a Personal Data breach likely to create a risk to Data Subjects’ rights or freedoms, QarGo will:
- notify the competent Personal Data authority in Qatar within the period prescribed by law after becoming aware of the incident;
- notify affected Data Subjects without undue delay where the incident is likely to create a high risk to their rights; and
- explain the nature of the incident, the affected data, the containment measures and recommended protective steps.
Article 15: Data-Subject Rights and How to Exercise Them
| Right | Description |
|---|---|
| Right to be informed | Know whether QarGo processes the Data Subject’s data and the purposes of Processing |
| Right of access | Obtain a copy of Personal Data being processed |
| Right to rectification | Correct inaccurate data or complete missing data |
| Right to erasure | Request deletion when no valid reason remains for continued Processing |
| Right to restriction | Temporarily stop certain Processing without permanently deleting the data |
| Right to data portability | Receive supplied data in a structured, machine-readable electronic format and transfer it to another Controller where technically feasible |
| Right to object | Object to Processing based on legitimate interests or for marketing |
| Right to withdraw consent | Withdraw prior consent at any time without affecting Processing lawfully completed before withdrawal |
| Right not to be subject solely to an automated decision | Request human intervention for an automated decision with a material legal effect |
| Right to complain | Lodge a complaint with the competent Personal Data authority in Qatar |
To exercise a right, the Data Subject must submit a written request through the Article 25 channels with information necessary to verify identity. QarGo will respond within thirty days of receipt, extendable once for a similar period in complex cases after notice stating the reason. No fee will be charged except for clearly repetitive or malicious requests where permitted by law.
Article 16: Children’s Privacy
QarGo Services are not directed to persons below the legal age for contracting under Qatar law, and QarGo does not knowingly collect children’s Personal Data. If QarGo learns that it collected such data without the consent of a parent or legal guardian, it will take the necessary steps to erase it without delay. A parent or guardian may contact QarGo to request this.
Article 17: Third-Party Links and Services
The Platform may contain links to Third-Party websites or applications, such as payment gateways or third-party maps. QarGo is not responsible for their privacy practices or content. Users are advised to review separately the privacy policy of every website they visit.
Article 18: Sign-In Through Third-Party Accounts
A User may sign in through an account held with a Third-Party platform, such as an email or social-media account. QarGo receives only the information that the User expressly authorizes through that account’s settings and is not responsible for the original account provider’s privacy practices.
Article 19: Data Accuracy and User Responsibility
The User is responsible for the accuracy and completeness of information provided to QarGo and must update it promptly when it changes. QarGo is not liable for damage caused by inaccurate information or failure to update it in a timely manner.
Article 20: Data-Protection Officer and Governance
QarGo has appointed a data-protection officer, or an internal function assigned that responsibility, to oversee compliance with this Policy and Personal Data law, monitor Data-Subject requests and coordinate with the competent government authority where appropriate. The officer may be contacted through the channels in Article 25. QarGo maintains an internal record of Processing activities and conducts data-protection impact assessments before introducing Processing likely to create a high risk to Data Subjects’ rights.
Article 21: Additional Regional Rights
Where Users are subject to additional foreign data-protection laws because of their residence or dealings with QarGo outside Qatar, including the EU General Data Protection Regulation or United States state privacy laws, QarGo will respect applicable additional rights. These may include the right to know categories of data sold or shared, noting that QarGo does not sell Personal Data for monetary consideration, and the right not to be discriminated against for exercising privacy rights. Affected Users may contact QarGo for jurisdiction-specific details.
Article 22: Changes to this Policy
QarGo may update this Policy from time to time to reflect legal, technical or operational developments. An updated version takes effect when published on the Platform. A material amendment will be notified through registered email or an in-app notification a reasonable period before taking effect. Users are advised to review this Policy periodically.
Article 23: Conflicts and Controlling Language
This Policy may be made available in other languages for convenience. If there is any conflict or difference in meaning between the Arabic text and a translation, the Arabic text alone prevails.
Article 24: Governing Law and Dispute Resolution
The validity, interpretation and enforcement of this Policy are governed by the laws of the State of Qatar, principally Law No. 13 of 2016 on Personal Data Privacy Protection. The courts of Qatar have jurisdiction over any dispute arising from or connected with this Policy, without prejudice to the Data Subject’s right to complain to the competent government authority for Personal Data protection.
Article 25: Contact and Complaints
All questions or requests concerning this Policy, the exercise of rights under it, or a suspected Personal Data breach must be sent to:
- email: info@qargo.qa; or
- the official support channels approved in the QarGo application and website.
If a Data Subject considers QarGo’s response inadequate, the Data Subject may lodge a complaint with the competent government authority for Personal Data protection in the State of Qatar.
Have a question?
For questions or complaints concerning this document, contact us at info@qargo.qa.