Skip to Content

Privacy Policy

Last updated: 9 August 2026. This Privacy Policy applies to Shredit Me LLC ("Shredit Me", "we", "our" or "us"), a company carrying on the business of secure document and media destruction, on-site and off-site shredding, secure collection and the onward recycling of destroyed material.

We are committed to protecting your privacy and to handling personal data lawfully, fairly and securely. This Privacy Policy explains what personal data we collect, why we collect it, who we share it with and what rights you have. It is written to meet the requirements of Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and other applicable laws of the United Arab Emirates.

1. Who we are

Shredit Me LLC is the controller responsible for the personal data described in this policy. You can contact us at:

Shredit Me LLC
10 San'a Road, Ras Al Khor Industrial Area, Dubai, United Arab Emirates
Email: info@shreditme.ae
Telephone: +971 4 340 3588
Website: https://www.shreditme.ae

2. Scope of this policy

This Privacy Policy applies to:

  • Our website at https://www.shreditme.ae and any related pages we operate.
  • Our mobile applications (Sales, Management, Operations, Processing, Recycle and Ecommerce), published on the Google Play Store and the Apple App Store under the developer account "Theloyaltyapp.eu". Shredit Me LLC is the company responsible for these applications and for the processing of personal data within them.
  • Our services, platforms, customer and supplier accounts, and related business operations.

It does not apply to third-party websites, applications or services that we link to. Those are governed by their own privacy policies.

3. Personal data we collect

Depending on how you deal with us, we may collect the following categories of personal data:

  • Identity and contact data - name, job title, employer, email address, postal address and telephone number.
  • Account data - username, password (stored in hashed form), user role, permissions and account preferences.
  • Transaction data - orders, quotations, collections, deliveries, invoices, payment status and correspondence about them. We do not store full payment card numbers; card payments are handled by our payment providers.
  • Operational data - records created as you use the applications, such as collection and processing records, asset and serial numbers, weights, photographs of items, checklists, inspection results and certificates.
  • Device and usage data - device model and operating system, application version, IP address, log files, crash reports, timestamps and pages or screens viewed.
  • Location data - see the section on location data below.
  • Communications - messages you send us by email, contact form, helpdesk ticket or in-app messaging.

We do not seek to collect sensitive personal data as defined in Article 1 of the PDPL. Where such data is unavoidably present in material handed to us (for example, in documents submitted for secure destruction, or on storage media handed over for erasure), we treat it as confidential, do not use it for any purpose other than performing the service, and destroy or erase it in accordance with the agreed service.

4. Location data

Our mobile applications may collect and process location data to support operational features. Location data is used for:

  • Verifying attendance of field staff at assigned work locations;
  • Planning, dispatching and evidencing collections, deliveries and on-site work;
  • Giving managers visibility of field activity and supporting operational workflows and logistics;
  • Geo-stamping operational records such as collection confirmations and proof of service.

Location data may be collected while the application is in use and, where it is required for work-related tracking, in the background. Users are informed before location access is enabled and are asked to grant permission. You can review or withdraw location permissions at any time in your device settings, although some operational features will not work if you do. We do not use location data for advertising and we do not sell it.

5. Why we use your personal data, and on what basis

Article 4 of the PDPL permits processing with the data subject's consent, and also without consent in the cases it lists. We rely on the following:

  • Performance of a contract - to create and administer your account, process orders and collections, deliver goods and services, issue certificates, invoice you and provide support.
  • Compliance with a legal obligation - to keep accounting, tax, environmental, waste-tracking and health and safety records, and to respond to lawful requests from competent authorities.
  • Protection of the public interest and of our lawful interests - to secure our systems, prevent and investigate fraud, theft or misuse, evidence the performance of our services, and manage and improve our operations, provided this does not prejudice your rights.
  • Your consent - for optional processing such as marketing communications and non-essential cookies. Where we rely on consent you may withdraw it at any time, without affecting processing carried out before withdrawal.

6. Who we share personal data with

  • Companies within our group, where they are involved in providing the service;
  • Service providers and technology partners acting on our instructions - hosting and cloud providers, software suppliers, payment providers, couriers and logistics partners, certified recyclers and downstream treatment facilities, and professional advisers;
  • Competent authorities, regulators and courts where we are required or permitted by law to disclose;
  • A purchaser or successor in the event of a sale, merger or reorganisation of our business.

We require our service providers to process personal data only on our instructions and to apply appropriate security measures. We do not sell personal data.

7. Transfers outside the UAE

Some of our service providers, including hosting providers, are located outside the United Arab Emirates. In line with Articles 22 and 23 of the PDPL, we transfer personal data outside the UAE only where the receiving jurisdiction is recognised as providing an adequate level of protection, or where appropriate safeguards are in place, such as contractual commitments obliging the recipient to protect the data to the standard required by the PDPL, or where one of the exceptions permitted by the PDPL applies.

8. How long we keep personal data

We keep personal data only for as long as necessary for the purpose it was collected for, and then for as long as we are required to keep it by law. Accounting and tax records are ordinarily retained for the period required under UAE tax and commercial legislation. Operational, environmental and waste-tracking records are retained for the period required by the applicable environmental permits and legislation. Account data is retained for the life of the account and for a reasonable period afterwards to deal with queries and legal claims. When data is no longer needed we delete it or irreversibly anonymise it.

9. Security

We apply technical and organisational measures appropriate to the risk, in accordance with Article 20 of the PDPL, including:

  • Encryption of data in transit using TLS;
  • Role-based access control, so that staff and contractors can reach only the data they need for their role;
  • Individual named accounts and password policies;
  • Logging of administrative activity;
  • Regular backups, and physical and environmental controls at our hosting provider;
  • Contractual confidentiality and data protection obligations on our staff and suppliers.

No system can be guaranteed completely secure. If a breach of personal data occurs that would prejudice your privacy, confidentiality or security, we will notify the UAE Data Office and affected individuals as required by Article 9 of the PDPL.

10. Your rights

Subject to the conditions and exceptions in the PDPL, you have the right to:

  • Be informed about how we process your personal data, and to request access to it and a copy in a structured, machine-readable format (Articles 13 and 14);
  • Request correction of inaccurate or incomplete data, and erasure of your data (Article 15);
  • Request restriction of processing (Article 16);
  • Object to processing carried out for purposes based on our lawful interests, and to object to direct marketing (Article 17);
  • Object to decisions based solely on automated processing that produce legal consequences for you (Article 18);
  • Withdraw your consent where processing is based on consent.

To exercise any of these rights, email us at info@shreditme.ae. We may ask for proof of identity. We will respond within the period required by the PDPL. If you are an employee or contractor of one of our customers, please note that your employer may be the party that decides how your data is used in our applications; we will pass your request to them where that is the case.

11. Complaints

If you are not satisfied with how we have handled your personal data, please contact us first at info@shreditme.ae so that we can try to resolve the matter. You also have the right to complain to the UAE Data Office, the federal authority responsible for supervising the application of the PDPL.

12. Children

Our website, applications and services are intended for business users and adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Cookies and similar technologies

Our website uses cookies that are strictly necessary for it to function, such as session and security cookies. Where we use analytics or other non-essential cookies, we ask for your consent first and you can change your choice at any time. Most browsers also let you block or delete cookies, although parts of the site may then not work correctly.

14. Changes to this policy

We may update this Privacy Policy from time to time. The version published on this page is the current one and the date at the top shows when it was last changed. Where a change is significant we will take reasonable steps to bring it to your attention.

15. Contact us

Questions about this policy or about how we handle personal data should be sent to:

Shredit Me LLC
10 San'a Road, Ras Al Khor Industrial Area, Dubai, United Arab Emirates
Email: info@shreditme.ae
Telephone: +971 4 340 3588
Website: https://www.shreditme.ae