Skip to content
Wosta

Privacy policy

Information on processing of personal data when using Wosta in the UAE and beyond.

Operator details are not configured yet. Set LEGAL_* environment variables (UAE free-zone pattern) so imprint and contact data appear here. Legal page structure is ready.

Missing: LEGAL_COMPANY_NAME, LEGAL_ADDRESS, LEGAL_EMAIL, LEGAL_VAT, LEGAL_REGISTER, LEGAL_REPRESENTATIVE

Contact us while operator details are pending

1. Controller

This Privacy Policy explains how Wosta collects, uses, shares and protects your personal data. It applies to everyone who visits the Wosta website or uses our services.

It is written to comply with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL").

The data controller is: [Wosta Operator L.L.C-FZ — set LEGAL_COMPANY_NAME in env], [Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, UAE — set LEGAL_ADDRESS], email: [Set LEGAL_EMAIL in env — e.g. legal@your-domain.com]

2. Data we process

Depending on how you use Wosta, we may process:

  • Account data (name, email, optional phone)
  • Profile and job data (briefs, offers, messages, reviews)
  • Payment-related data via Stripe (we do not store full card numbers)
  • Technical data (IP, device/browser, push tokens, logs)
  • Marketing parameters (e.g. UTM) when you consent to marketing cookies

3. Purposes and lawful bases

Under the PDPL we process personal data only where we have a lawful basis: contract performance (marketplace features), legal obligation (UAE tax and consumer laws), legitimate interests (security and fraud prevention), and consent (optional push, marketing, non-essential cookies).

4. Recipients / processors

We use processors for hosting, auth/database, email, payments, and optionally maps/SMS/push (e.g. Supabase, Resend, Stripe, Mapbox, Twilio, Firebase/APNs). Some may be outside the UAE with PDPL-consistent safeguards.

5. Retention

We keep data only as long as needed for these purposes or as required by UAE law. You may request account deletion; legally required records may be retained longer.

6. Your rights under the PDPL

You have rights of access, correction, deletion, restriction, objection, and data portability where applicable. You may withdraw consent at any time. Download a JSON copy or delete your account from Profile. Lodge a complaint with the UAE Data Office. Contact [Set LEGAL_EMAIL in env — e.g. legal@your-domain.com] — we aim to respond within one month.

7. Cookies and similar technologies

Essential cookies run for session and security. Optional analytics and marketing cookies run only after consent via the cookie banner. See our Cookie Policy.

8. Email notifications

You can control transactional and activity emails in profile settings. Every email includes an unsubscribe link and references to our legal pages.

9. Delete account

You can delete your account under Profile → Delete account. Active hires, held escrow, or open disputes must be finished first. Legally required records may be retained in anonymized form.

10. Children

Wosta is not directed at children under 18. Contact [Set LEGAL_EMAIL in env — e.g. legal@your-domain.com] if you believe a minor has provided data.