Goobii Legal
Privacy Policy
Last updated 6 September 2026
Data controller: Goobii Car Washing LLC ("Goobii", "we", "us", "our")
TRN: 104973441900001
Registered address: WH3, Orbit Way Warehouses, Al Qouz Ind. 1, Dubai, UAE
Privacy contact: privacy@goobii.ae
Effective date: 20 June 2026 · Version: 1.0
This Privacy Policy explains how Goobii collects, uses, discloses, transfers and protects your personal data when you use our website (goobii.ae), mobile application, WhatsApp assistant ("Jamal") and services. Goobii acts as the data controller of your personal data and processes it in accordance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the "PDPL") and its implementing regulations, as supervised by the UAE Data Office.
1. Scope
This Policy applies to personal data of customers, prospective customers, and users of our channels. It should be read together with our Terms & Conditions.
2. Personal data we collect
(a) Data you provide:
- Identity and contact data: name, mobile/WhatsApp number, and email (if provided).
- Vehicle data: make, model, category and plate number where provided.
- Location and access data: address, parking/access notes and location pin.
- Booking data: service history, preferences, nicknames, and notes.
- Communications: messages, photos and media you send us, including WhatsApp conversations with Jamal.
- Service documentation: before-and-after photographs and short videos of your vehicle taken by our team at each service, used for quality control, proof of completion and dispute resolution. We capture the vehicle and immediate working area only and take reasonable care to avoid capturing people; this material is not used for marketing without your separate consent.
(b) Data collected automatically:
- Usage and device data from the app and website, and approximate location where you permit it.
- Cookies and similar technologies on goobii.ae (see clause 9).
- On Android, to speed up sign-in, the app may automatically detect the one-time verification code in the SMS we send you. This uses Google's SMS Retriever service, which exposes only that single verification message (matched to our app) and never your other messages; no SMS-reading permission is requested.
(c) Data from third parties:
- Your WhatsApp profile name and number when you message us, via the WhatsApp Business Platform (Meta).
- Payment confirmation and status from our payment service provider.
We do not collect or store your full payment-card number (see clause 5).
3. Purposes and legal bases for processing
We process personal data only where the PDPL permits. Our purposes and corresponding legal bases are:
| Purpose | Examples | Legal basis (PDPL Art. 4) |
| Providing the Service | Scheduling, routing, performing and completing washes; assigning team members | Necessary for performance of a contract |
| Bookings and communication | Confirmations, arrival updates, support and service messages via Jamal/WhatsApp | Performance of a contract / consent |
| Payments, invoicing and VAT | Charging for services, issuing tax invoices, refunds and store credit | Compliance with a legal obligation / contract |
| Subscriptions | Managing recurring plans, renewals and billing | Performance of a contract |
| Service improvement and quality | Quality checks, dispute handling, improving vehicle recognition | Legitimate interests not overridden by your rights |
| Marketing (where you opt in) | Offers, referral and promotional codes | Consent |
| Legal, safety and fraud prevention | Complying with law, preventing fraud, establishing or defending legal claims | Legal obligation / legitimate interests |
Where we rely on consent, you may withdraw it at any time (clause 8) without affecting processing carried out before withdrawal.
4. Automated processing (Jamal)
Jamal is an AI-assisted assistant that helps process and manage your bookings automatically. This automated processing supports the delivery of the Service and does not produce legal effects on you without human involvement; binding bookings are based on confirmed order details. You may contact us to request human assistance at any time. This disclosure is provided in line with the PDPL's provisions on automated processing.
5. Payments
Card payments are processed by our authorised third-party payment service provider (Paymob). Card details are collected and handled directly by the provider under its own security standards and privacy terms; Goobii does not receive or store your full card number. We retain transaction records (amount, date, status, and VAT/invoice data) as required for accounting and tax.
6. Disclosure of personal data
We disclose personal data only as necessary to operate the Service and as permitted by law:
- Payment service provider (Paymob) — to process payments and refunds.
- Cloud and hosting providers (for example Amazon Web Services) — to host our systems securely.
- Messaging provider (WhatsApp / Meta) — to communicate with you.
- Our service team / washers — limited data needed to perform your booking (location, vehicle, access notes).
- Professional advisers, insurers, and competent authorities — where required by law or to establish, exercise or defend legal claims.
- Successors — in connection with a reorganisation, merger or sale of the business, subject to this Policy.
We do not sell your personal data.
7. International data transfers
Some of our processors may store or process personal data outside the UAE. Where we transfer personal data outside the UAE, we do so only in accordance with the PDPL — either to jurisdictions recognised as providing an adequate level of protection, or subject to appropriate safeguards (such as contractual data-protection obligations with the recipient), or on another lawful basis permitted under the PDPL.
8. Your rights
Subject to the PDPL, you have the right to:
- Access the personal data we hold about you and obtain information about its processing.
- Rectification of inaccurate or incomplete data.
- Erasure of your data where there is no overriding lawful reason to retain it.
- Restriction or objection to certain processing.
- Withdraw consent at any time where processing is based on consent.
- Data portability — to receive certain data in a structured, machine-readable format, where applicable.
- Stop processing for direct marketing.
To exercise any right, contact privacy@goobii.ae. We will verify your identity and respond within the period required by the PDPL. You also have the right to lodge a complaint with the UAE Data Office.
9. Cookies and similar technologies
goobii.ae uses cookies and similar technologies for essential functionality. We also count anonymous booking steps to see where the booking process is unclear; this records no personal data and cannot be linked to you. Where we place non-essential cookies, we will request your consent first, and you can manage cookies through your browser settings.
10. Marketing preferences
We send marketing messages only where you have opted in to receive them. You can opt out at any time by telling us — message us on WhatsApp or email support@goobii.ae — and we will action your request. Messages that are necessary to your bookings (such as confirmations, arrival updates, and payment or subscription notices) are not marketing and will continue while you use the Service.
11. Data retention
We retain personal data only for as long as necessary for the purposes described in this Policy and to meet legal, tax and accounting obligations. Financial and tax records are retained for the period required by UAE law (generally a minimum of five years under the VAT Law). Operational records and service photos may be retained to support quality, safety and dispute resolution. When no longer required, data is securely deleted or anonymised.
12. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, including access controls, encryption in transit, and secure hosting. No system is entirely secure; however, we maintain measures consistent with the PDPL and will notify the UAE Data Office and affected individuals of a personal-data breach where and as required by law.
13. Children
The Service is intended for adults (18+). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact privacy@goobii.ae and we will take appropriate steps.
14. Changes to this Policy
We may update this Policy from time to time. The current version, with its version number and effective date, is always available on goobii.ae and on request. Material changes will be notified by a reasonable method where practical.
15. Contact
Goobii Car Washing LLC — Privacy
WH3, Orbit Way Warehouses, Al Qouz Ind. 1, Dubai, UAE
Email: privacy@goobii.ae
Data-protection supervisory authority: UAE Data Office