Privacy Policy | Parkingnb

1. Who We Are & Scope

Parkingnb (“Parkingnb”, “we”, “us”, or “our”) operates the website at parkingnb.com and the Parkingnb mobile applications available on iOS and Android. We provide an independent peer-to-peer technology marketplace connecting private parking space owners (“hosts”) with drivers seeking verified parking (“guests”) in Dubai, United Arab Emirates.

This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of your personal data when you interact with our platform, apps, and services in compliance with the United Arab Emirates Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data (“UAE PDPL”) and applicable international data protection standards.

For inquiries regarding your personal data or this policy, please contact our Data Protection Officer at: privacy@parkingnb.com or support@parkingnb.com.

2. What Data We Collect

To provide, operate, and secure our marketplace and mobile apps, we collect:

Account & Profile Information: Full name, verified email address, UAE phone number, profile image, and user role (guest or host).
Location & Geodata: Precise GPS coordinates (only when permitted by your device permissions) while actively using the mobile app to display nearby parking bays, calculate distances, and deliver turn-by-turn navigation.
Photos, Verification Documents & Vehicle Data: Parking space photographs, vehicle make/model and license plate numbers, title deeds, tenancy contract (Ejari) documents for host space verification, and government identity documents.
In-App Messages & Communications: Text messages, gate coordination photos, and attachments exchanged between hosts and guests via our built-in real-time chat.
Payment & Financial Information: Payment card details processed securely via certified PCI-DSS Level 1 compliant gateways (Stripe) and UAE IBAN details for host payout distributions. Full payment card numbers are never stored on Parkingnb servers.
Technical & Device Identifiers: IP addresses, operating system version, device hardware model, app version, crash diagnostics (via Firebase Crashlytics), and advertising identifiers (Apple IDFA or Google GAID, subject to explicit consent).

3. Legal Bases & How We Use Your Data

We process your personal data under the lawful grounds established by UAE PDPL Article 4:

Contractual Performance: Facilitating reservations, gate barrier access, escrow deposit custody, and payment disbursements.
Legal & Regulatory Compliance: Verifying identity, complying with municipal regulations, maintaining tax records, and preventing fraud.
Legitimate Interests: Protecting the security of our users, enforcing our Zero-Tolerance UGC content policies, and optimizing application performance.
Consent: Delivering push notifications, accessing GPS location, and performing advertising campaign measurement via Apple ATT.

4. App Tracking Transparency (ATT) & Advertising Measurement

On iOS devices (iOS 14.5 and later), Parkingnb complies strictly with Apple's App Tracking Transparency (ATT) framework.

Consent Prompt: We explicitly prompt you for permission before collecting your device advertising identifier (IDFA) to measure marketing campaigns on external platforms (e.g., Meta).
Your Absolute Choice: If you select “Ask App not to Track”, cross-app tracking and IDFA collection are immediately and permanently disabled. All core app functionality (searching, booking, messaging, hosting) remains 100% unrestricted.
Revocation: You can modify your tracking preferences at any time in your iOS device settings at: Settings > Privacy & Security > Tracking > Parkingnb.

5. Third-Party Service Providers & Data Processors

We partner with certified third-party service providers who process data strictly under our contractual instructions:

Firebase & Google Cloud (Google LLC): Cloud database hosting, user authentication, crash reporting (Crashlytics), and app performance metrics.
Stripe, Inc.: PCI-DSS Level 1 certified credit/debit card processing and payout rails.
Meta Platforms, Inc. (Meta App Events): Campaign attribution and install analytics (governed by your ATT consent).

6. Cookies & Local Storage

When you access our web application, we use essential cookies and browser local storage tokens strictly necessary to maintain your authenticated session, remember your language preferences, and secure platform API calls. We do not sell your personal data or cookie profiles to third-party data brokers.

7. UAE PDPL Rights & In-App Account Deletion

Under UAE Federal Decree-Law No. 45 of 2021 (PDPL), data subjects are entitled to statutory rights regarding their personal data:

Right of Access & Portability: Request a copy of the personal data we hold about you.
Right to Rectification: Correct inaccurate or incomplete profile and vehicle records.
Right to Erasure (“Right to be Forgotten”): Request the permanent deletion of your account and personal records.
Right to Restrict or Object: Restrict or object to specific processing operations where applicable.

In-App Account Deletion: You can permanently delete your account and all associated personal data directly within the Parkingnb mobile app by navigating to: Menu > Settings > Delete Account, or by submitting an email to privacy@parkingnb.com. Upon confirmation, your account and identifiable records are permanently purged from active systems within 30 days.

8. Data Security & Cross-Border Transfers

We employ comprehensive technical and organizational measures (including TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access controls, and network firewalls) to safeguard your data. Any international data transfers satisfy the adequacy criteria and safeguard provisions mandated by UAE PDPL Articles 22 and 23.

9. Changes to This Policy

We may revise this Privacy Policy periodically. We will notify you of material changes by updating the effective date on this page and dispatching an in-app notice or email notification prior to changes taking effect. Continued use of Parkingnb confirms your acknowledgment of the updated policy.