SaaS Model
(Retailer) Privacy Policy
Retailer & API Data Protection
1. Scope & Overview for Retailers
This Privacy Policy section applies specifically to e-commerce merchants, retailers, and business
users of the World2Door SaaS Platform. World2Door SaaS provides software
infrastructure, store checkout integration plugins, real-time duty & tax calculation engines,
automated shipping dispatch tools, and cross-border logistics management.
By integrating World2Door SaaS APIs, SDKs, or platform extensions into your e-commerce storefront, you
agree to the collection, processing, and protection of data as detailed in this policy.
2. Data Collected from Retailers & Store Customers
When retailers utilize World2Door SaaS, we process data both as a Data Controller (for merchant
accounts) and as a Data Processor (for customer checkout orders):
- Merchant Account & Identity Data: Corporate business name, trade license numbers,
registered address, billing contacts, tax identification numbers, and store administrator account
credentials.
- End-Customer Checkout Data: Customer full names, shipping delivery addresses,
contact telephone numbers, email addresses, order line items, parcel dimensions, declared customs
values, and checkout currency details.
- Integration & API Telemetry: Store API access tokens, webhook logs, domain
endpoints, IP addresses, checkout session IDs, and device interaction metrics gathered during
landed-cost calculations.
- Financial & Billing Information: Payment gateway tokens, merchant payout account
details, SaaS subscription billing records, and automated carrier duty invoicing history.
3. How SaaS Processes & Uses Order Data
World2Door SaaS utilizes merchant and customer data exclusively for essential cross-border e-commerce
operations:
- Dynamic Landed Cost Calculation: Processing basket items to compute precise
import tariffs, local VAT/GST, and carrier shipping fees at cart checkout.
- Automated Carrier Dispatch: Transmitting required shipping details to global air
and courier networks to instantly generate compliant airway bills (AWB) and customs manifests.
- Inventory & Order Synchronization: Syncing real-time fulfillment status updates
between merchant e-commerce platforms (Shopify, Magento, WooCommerce, Custom APIs) and carrier hubs.
- Fraud Mitigation & Compliance: Verifying delivery addresses against international
sanctions lists and trade embargo restrictions to ensure legal compliance.
4. Multi-Tenant Architecture & Data Security
World2Door employs enterprise-grade security protocols to protect retailer software integrations:
- Strict Data Isolation: Retailer datasets and end-customer records are stored in
multi-tenant databases isolated by tenant key authorization, preventing cross-merchant data
visibility.
- Encryption Standards: Data in transit is secured using TLS 1.3 encryption, and
data at rest is protected using AES-256 bit encryption algorithms.
- API Credential Safety: Webhook secrets and API keys are cryptographically hashed
and managed through secure vault storage.
5. Retailer Responsibilities & Data Rights
Under UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection and international privacy
regulations:
- Retailer as Data Controller: Retailers remain the primary Data Controller for
their end-customers' personal information and must maintain clear customer-facing privacy
disclosures.
- Data Subject Rights & Erasure: Retailers can issue automated data deletion or
export requests for specific customer records through the World2Door SaaS Merchant Portal.
6. Contact SaaS Compliance Team
For SaaS integration privacy inquiries, API security audits, or data processing agreements (DPAs):
Email: Info@world2door.com |
Phone: 04-4468444
Cargo &
Logistics Privacy Policy
Freight & Customs Compliance
1. Scope & Overview for Cargo Customers
This Privacy Policy section applies to individuals, commercial shippers, corporate logistics clients,
and consignees using World2Door Cargo. World2Door Cargo provides global air freight,
ocean freight, door-to-door courier logistics, customs clearance, and warehousing services across the
United Arab Emirates and international shipping corridors.
By booking freight, issuing bills of lading, or receiving shipments handled by World2Door Cargo, you
acknowledge the data collection and regulatory sharing practices outlined below.
2. Freight & Shipment Information Collected
To facilitate international cargo movement, complete customs declarations, and verify identity, we
collect:
- Shipper & Consignee Identity Details: Full legal names, company names, contact
numbers, email addresses, pickup and delivery physical addresses, and government-issued
identification numbers (such as Emirates ID, Passport numbers, or Tax Registration Numbers (TRN)
required by customs authorities).
- Cargo Manifest & Valuation Data: Detailed item descriptions, package weights,
volumetric dimensions, Harmonized System (HS) tariff codes, commercial invoices, Packing Lists,
Certificates of Origin, Bill of Lading (BOL), and Air Waybill (AWB) specifications.
- Customs Clearances & Inspection Records: Duty payment receipts, import/export
permits, border inspection notes, and regulatory clearance documents.
- Financial & Payment Information: Freight quotes, credit terms, bank transfer
receipts, customs duty chargebacks, and marine insurance documentation.
3. Mandatory Disclosure to Customs & Carrier Partners
Because cargo logistics operates under international transport conventions and national sovereignty
laws:
- Customs & Regulatory Authorities: Personal identity and cargo documentation are
legally disclosed to UAE Federal Customs Authority, Dubai Customs, port authorities, and destination
border control agencies as required by law.
- Air & Ocean Freight Carriers: Shipment data is transmitted to commercial
airlines, maritime vessel operators, bonded warehouse facilities, and container terminal handlers to
execute transport contracts.
- Last-Mile Couriers & Delivery Logistics: Delivery contact details and address
coordinates are shared with local courier networks and last-mile transport personnel.
4. Geo-Location Tracking & Digital Proof of Delivery (POD)
To provide transparent logistics visibility and ensure chain of custody:
- Container & Vehicle Tracking: Vehicle GPS logs, vessel tracking signals, and
warehouse scanning checkpoints record real-time cargo locations.
- Proof of Delivery (POD): Consignee signatures, timestamped geo-coordinates, and
delivery location photos are captured upon final handover and retained for verification.
5. Data Retention & Cargo Claims
Under UAE Maritime Law, Civil Aviation Regulations, and commercial tax laws:
- 7-Year Statutory Record Keeping: Shipping manifests, customs bills of entry, and
freight contracts are retained for a minimum of seven (7) years.
- Insurance & Claims Data: In cases of cargo loss, damage, or legal dispute,
relevant shipping records are shared with marine cargo underwriters and legal advisors.
6. Contact Cargo Logistics Officer
For cargo privacy inquiries, customs documentation requests, or consignment data updates:
Email: Info@world2door.com |
Phone: 04-4468444
Marketplace & Seller
Privacy Policy
Pre-Launch Policy Notice
Pre-Launch Notice: The World2Door Marketplace & Seller Platform is currently
preparing for launch. Below is our pre-launch privacy framework governing early merchant
onboarding and buyer waitlist registrations.
1. Scope & Pre-Launch Overview
This Privacy Policy section outlines the data management practices for the upcoming World2Door
Marketplace and Seller Platform. The World2Door Marketplace connects
international buyers directly with UAE-based retailers, offering seamless cross-border shopping and
integrated door-to-door delivery.
This policy applies to merchants submitting early-access seller applications and shoppers registering
for marketplace pre-launch notifications.
2. Information Collected During Pre-Launch Phase
During our pre-launch rollout, World2Door collects:
- Seller Onboarding Data: UAE retailer business names, trade license documents,
contact person details, business email addresses, product category portfolios, estimated
cross-border shipping volumes, and store domain URLs.
- Buyer Waitlist Data: Shopper full names, email addresses, preferred shopping
categories, preferred shipping destinations, and language preferences.
- Feedback & Beta Testing Telemetry: Survey responses, merchant portal navigation
logs, and feature request records collected during platform preview testing.
3. Planned Data Processing Upon Marketplace Launch
Once the World2Door Marketplace goes live, the following privacy frameworks will be activated:
- Public Storefront Listings: Merchant brand logos, store profiles, product
descriptions, pricing, and buyer reviews will be published on the marketplace platform.
- Secure Payment Tokenization: Customer transactions will be processed via PCI-DSS
Level 1 compliant payment gateways. World2Door will not store raw credit card numbers.
- Order Fulfillment Data Sharing: Customer shipping addresses and contact numbers
will be shared with the relevant seller and courier solely for order fulfillment and customer
support.
- Merchant Payout & Financial Compliance: Seller bank account details and VAT
registration numbers will be processed to disburse sales proceeds and satisfy UAE tax reporting
standards.
4. Pre-Launch Communications & Opt-Out
If you Sign In for our marketplace waitlist or seller onboarding portal:
- We will send periodic updates regarding platform launch dates, merchant features, and exclusive
early-access invites.
- You may unsubscribe at any time by clicking the "Unsubscribe" link in any promotional
communication or emailing Info@world2door.com.
5. Full Marketplace Policy Update Notice
Prior to official marketplace transactions commencing, an updated Marketplace Terms and Conditions &
Privacy Policy will be published, and active participants will be notified to accept the updated
terms.
6. Contact Marketplace Team
For merchant onboarding privacy queries or pre-launch waitlist assistance:
Email: Info@world2door.com |
Phone: 04-4468444