How CarEjar Uses Cookies and Similar Tracking Technologies
SECTION 1: WHO WE ARE AND HOW TO CONTACT US
This Cookie Policy is issued by CarEjar Portal L.L.C S.O.C, a limited liability company incorporated in the Emirate of Dubai, United Arab Emirates, bearing Trade License Number 1593740 issued by the Department of Economy and Tourism (DET).
|
Contact Detail |
Information |
|
Company Name: |
CarEjar Portal L.L.C S.O.C |
|
Trade License No.: |
1593740 — Dubai, UAE |
|
Registered Address: |
P.O. Box 45195, Dubai, UAE |
|
Data Controller: |
CarEjar Portal L.L.C S.O.C |
|
Website: |
www.carejar.com |
If you have any questions about how we use cookies, or wish to exercise your rights regarding cookie-related personal data, please contact our Data Protection Officer at info@carejar.com. We will respond within 30 calendar days.
SECTION 2: WHAT ARE COOKIES?
Cookies are small text files that are placed on your device (computer, smartphone, or tablet) by websites and applications when you visit or use them. They are widely used to make digital services work efficiently, to remember your preferences, and to provide information to the site or app owner about how their service is being used.
2.1 Types of Storage Technology
CarEjar uses the following types of tracking and storage technologies on its Platform:
2.1.1 HTTP Cookies: Small text files stored in your browser by a web server. Can be Session Cookies (deleted when you close your browser) or Persistent Cookies (remain on your device for a set period or until manually deleted).
2.1.2 Local Storage: A browser-based storage mechanism that allows the Platform to store data locally on your device — typically used to remember app state, preferences, and cached content without an expiry date.
2.1.3 Session Storage: Similar to Local Storage but cleared automatically when you close your browser session.
2.1.4 Pixel Tags / Web Beacons: Tiny invisible images embedded in web pages or emails that allow us to track whether a page has been loaded or an email has been opened.
2.1.5 Device Fingerprinting (Limited Use): Certain fraud prevention tools may collect technical characteristics of your device (browser type, screen resolution, installed fonts, time zone) to help identify suspicious activity. CarEjar uses this technology solely for fraud detection and security purposes.
2.1.6 Mobile SDKs: In our iOS and Android applications, we use software development kits (SDKs) provided by trusted third-party service providers that perform functions equivalent to cookies on mobile platforms (analytics, crash reporting, performance monitoring).
2.2 First-Party vs Third-Party Cookies
Cookies placed directly by CarEjar (from the carejar.com domain or its sub-domains) are called first-party cookies. Cookies placed by third-party service providers (e.g. analytics tools, payment processors, map services) are called third-party cookies. Both types are described in this policy. You can see which domain each cookie comes from in your browser’s developer tools or in our Cookie Preference Centre.
SECTION 3: CATEGORIES OF COOKIES WE USE
CarEjar uses cookies in four categories, described below. The legal basis under UAE Federal Decree-Law No. 45 of 2021 (PDPL) and applicable international standards is stated for each category.
3.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function. They cannot be disabled because without them, the Platform simply would not work. They do not collect any information about you that could be used for marketing. Legal basis: Legitimate interest (Platform operation) and performance of contract (your Booking).
|
Cookie / Technology |
Purpose |
Provider |
Duration |
|
carejar_session |
Maintains your login session so you remain authenticated while browsing the Platform. |
CarEjar (First-Party) |
Session — deleted when browser closes |
|
carejar_csrf_token |
Cross-site request forgery protection token. Prevents malicious third parties from submitting actions on your behalf. |
CarEjar (First-Party) |
Session |
|
carejar_auth_token |
Stores your encrypted authentication token after login to keep you signed in. |
CarEjar (First-Party) |
30 days (Persistent) |
|
carejar_booking_state |
Remembers your in-progress booking details (vehicle selected, dates, payment step) so your booking is not lost if you navigate away. |
CarEjar (First-Party) |
Session |
|
stripe_sid / stripe_mid |
Required by Stripe payment processing. Maintains payment session security and fraud detection during checkout. |
Stripe (Third-Party) |
Session / 1 year |
|
carejar_cookie_consent |
Stores your cookie preference choices so we do not ask again on every visit. |
CarEjar (First-Party) |
12 months (Persistent) |
|
carejar_locale |
Remembers your language and region preference (e.g. English / Dubai). |
CarEjar (First-Party) |
12 months (Persistent) |
|
carejar_app_version |
Tracks which version of the Platform you are using for compatibility purposes. |
CarEjar (First-Party) |
Session |
3.2 Functional Cookies
FUNCTIONAL COOKIES — DEFAULT ON. YOU MAY SWITCH THESE OFF BUT SOME FEATURES WILL BE AFFECTED.
These cookies enable enhanced functionality and personalisation on the Platform. They remember your preferences, previous searches, and choices to provide a more tailored experience. Disabling them will not prevent you from using CarEjar but may result in a less personalised experience. Legal basis: Your consent, obtained via the Cookie Preference Centre.
|
Cookie / Technology |
Purpose |
Provider |
Duration |
|
carejar_search_prefs |
Remembers your recent vehicle search filters (location, dates, vehicle type, price range) to pre-fill on return visits. |
CarEjar (First-Party) |
30 days |
|
carejar_map_pref |
Stores your preferred map view (list view vs map view) on the search results page. |
CarEjar (First-Party) |
6 months |
|
carejar_recent_views |
Records recently viewed vehicle listings so you can quickly return to vehicles you were considering. |
CarEjar (First-Party) |
7 days |
|
carejar_currency |
Remembers your selected display currency (AED default). |
CarEjar (First-Party) |
12 months |
|
google_maps_pref |
Google Maps integration preference settings for displaying pick-up and drop-off locations. |
Google LLC (Third-Party) |
Session / 6 months |
|
intercom_session_* |
Live chat support session data — allows our support team to maintain context during a support conversation. |
Intercom Inc. (Third-Party) |
Session / 8 months |
3.3 Analytics & Performance Cookies
These cookies collect information about how visitors use the Platform — which pages are visited most, how long users spend on each page, where they come from, and what errors they encounter. All data collected by analytics cookies is aggregated and anonymized — it does not identify you personally. This information helps us improve the Platform. Legal basis: Your consent, obtained via the Cookie Preference Centre.
|
Cookie / Technology |
Purpose |
Provider |
Duration |
|
_ga / _ga_XXXXXX |
Google Analytics — identifies unique sessions and users for aggregated usage statistics. Used to measure platform performance and user behaviour trends. |
Google LLC (Third-Party) |
2 years |
|
_gid |
Google Analytics — distinguishes users. Stores and updates a unique value for each page visit. |
Google LLC (Third-Party) |
24 hours |
|
_gat_gtag_* |
Google Analytics — throttles the rate of page tracking requests. Does not store user data. |
Google LLC (Third-Party) |
1 minute |
|
mixpanel_* |
Mixpanel product analytics — tracks in-app user actions (search, booking steps, payment completion rates) to identify friction points in the booking funnel. |
Mixpanel Inc. (Third-Party) |
1 year |
|
sentry_* |
Sentry error monitoring — records technical errors and crashes to help our engineering team identify and fix bugs. Does not record personally identifiable information. |
Functional Software Inc. (Third-Party) |
Session |
|
hotjar_* |
Hotjar session recording and heatmaps — records anonymised recordings of how users interact with the Platform (mouse movements, clicks, scroll depth). IP addresses are automatically anonymised. |
Hotjar Ltd. (Third-Party) |
1 year |
|
carejar_ab_test |
A/B testing cookie — assigns you to a test variant so we can measure the performance of new features before full rollout. Records variant assignment only, not personal data. |
CarEjar (First-Party) |
30 days |
3.4 Marketing & Targeting Cookies
MARKETING COOKIES — DEFAULT OFF. ONLY ACTIVATED WITH YOUR EXPLICIT CONSENT.
These cookies track your browsing activity to help us and our partners deliver relevant content and service reminders (e.g. reminding you about a vehicle you viewed but did not book). CarEjar does not sell your cookie data to third-party advertisers. Marketing cookies are only used to deliver CarEjar’s own promotional communications (email retargeting, push notifications for abandoned bookings). Legal basis: Your explicit consent, obtained via the Cookie Preference Centre.
IMPORTANT: CarEjar products are ad-free. We do not allow third-party advertisers to place cookies on our Platform. All marketing cookies listed below are used solely by CarEjar to communicate with you about CarEjar services.
|
Cookie / Technology |
Purpose |
Provider |
Duration |
|
carejar_retarget |
Identifies Users who have viewed a vehicle listing or started a booking but not completed it. Used to send a single abandoned-booking reminder notification. |
CarEjar (First-Party) |
7 days |
|
fbp / _fbp |
Facebook Pixel — tracks conversions and allows CarEjar to measure the effectiveness of its own Facebook/Instagram promotional campaigns. Only activated if you consent. |
Meta Platforms (Third-Party) |
90 days |
|
snapchat_pixel |
Snapchat Pixel — measures conversion events from CarEjar’s Snapchat promotional campaigns. Only activated if you consent. |
Snap Inc. (Third-Party) |
13 months |
|
carejar_push_opt_in |
Records whether you have opted in to browser push notifications from CarEjar (e.g. booking reminders, special offers). |
CarEjar (First-Party) |
12 months |
SECTION 4: LEGAL BASIS FOR COOKIE PROCESSING — UAE PDPL
CarEjar processes personal data collected via cookies in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). The legal basis for each cookie category is as follows:
|
Cookie Category |
Legal Basis Under UAE PDPL |
|
Strictly Necessary Cookies |
Article 5(b) — Processing necessary for the performance of the Booking contract. Article 5(e) — Legitimate interest (operating a secure and functional Platform). User consent is NOT required for strictly necessary cookies. |
|
Functional Cookies |
Article 4 — Explicit user consent, obtained through the Cookie Preference Centre prior to activation. You may withdraw this consent at any time. |
|
Analytics & Performance Cookies |
Article 4 — Explicit user consent. Where analytics data is fully anonymised and aggregated (no personal data involved), processing is also justified under Article 5(e) — legitimate interest in improving the Platform. |
|
Marketing & Targeting Cookies |
Article 4 — Explicit user consent only. These cookies are NOT activated without your affirmative opt-in. This is the highest standard of consent under PDPL. |
CarEjar does not rely on ‘legitimate interest’ as a legal basis for any marketing or profiling activities conducted via cookies. Where consent is required, it is obtained through a clear, specific, informed, and unambiguous action by the User.
SECTION 5: COOKIE CONSENT & YOUR PREFERENCES
5.1 How We Obtain Your Consent
When you first visit the CarEjar website (www.carejar.com), you will be shown a Cookie Consent Banner. This banner:
- Explains clearly what cookies are and why CarEjar uses them;
- Provides a simple one-click option to ‘Accept All Cookies’ or ‘Reject All Non-Essential Cookies’;
- Provides a ‘Manage Preferences’ option that allows you to accept or reject each cookie category individually; and
- Does not pre-tick any non-essential cookie categories — you must actively opt in to Functional, Analytics, and Marketing cookies.
CarEjar will not activate any non-essential cookies before you have made your choice. Strictly Necessary cookies are activated immediately as they are required for the Platform to load.
5.2 Changing or Withdrawing Your Consent
You may change or withdraw your cookie consent at any time through the following methods:
5.2.1 Cookie Preference Centre: Click the ‘Cookie Settings’ link in the footer of any page on www.carejar.com to open the Cookie Preference Centre and update your choices. Changes take effect immediately.
5.2.2 Email Request: Send a written request to help@carejar.com stating your preferred cookie settings. We will update your preferences within 5 business days and confirm by email.
5.2.3 Browser Settings: You may block or delete cookies directly through your browser settings. Instructions for the most common browsers are provided in Section 6 of this policy.
5.2.4 Mobile App Settings: In the CarEjar iOS or Android app, go to Profile → Settings → Privacy & Cookie Preferences to manage your in-app cookie and tracking preferences.
Please note: withdrawing consent for non-essential cookies does not affect the lawfulness of any processing that took place before withdrawal, and does not affect Strictly Necessary cookies which are always active.
5.3 Consent Renewal
Your cookie consent preferences are stored for 12 months. After 12 months, we will ask you to renew your preferences. If you clear your browser cookies or use a different device or browser, you may be asked to provide your preferences again.
SECTION 6: HOW TO MANAGE COOKIES IN YOUR BROWSER
Most browsers allow you to control cookies through their settings. The following table provides links to cookie management instructions for the most common browsers and mobile operating systems:
|
Browser / Platform |
How to Manage Cookies |
|
Google Chrome (Desktop) |
Settings → Privacy and Security → Cookies and other site data → See all cookies and site data. Or visit: support.google.com/chrome/answer/95647 |
|
Mozilla Firefox |
Options → Privacy & Security → Cookies and Site Data → Manage Data. Or visit: support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences |
|
Apple Safari (Mac) |
Preferences → Privacy → Manage Website Data. Or visit: support.apple.com/en-gb/guide/safari/sfri11471 |
|
Microsoft Edge |
Settings → Cookies and site permissions → Cookies and stored data. Or visit: support.microsoft.com/en-us/microsoft-edge/delete-cookies |
|
Apple Safari (iPhone / iPad) |
Settings → Safari → Block All Cookies. Or visit: support.apple.com/en-gb/HT201265 |
|
Google Chrome (Android) |
Chrome Menu → Settings → Site Settings → Cookies. Or visit: support.google.com/chrome/answer/95647?co=GENIE.Platform%3DAndroid |
|
Opt-Out of Google Analytics |
Install the Google Analytics Opt-out Browser Add-on: tools.google.com/dlpage/gaoptout |
|
Opt-Out of Hotjar |
Visit: hotjar.com/legal/compliance/opt-out/ — click ‘Disable Hotjar’ |
Please note: blocking all cookies will prevent you from logging into CarEjar, completing bookings, or using many core Platform features. We recommend using the Cookie Preference Centre to selectively disable only the non-essential cookies you are not comfortable with.
SECTION 7: THIRD-PARTY COOKIES — DETAILED PROVIDER LIST
The following third-party service providers may place cookies on your device when you use the CarEjar Platform. Each provider has its own privacy policy and cookie policy which we recommend you review:
|
Third-Party Provider |
Purpose, Data Processed & Privacy Policy Link |
|
Stripe Payments |
Payment processing and fraud detection. Processes payment session data and device fingerprinting for PCI-DSS compliance. Privacy Policy: stripe.com/gb/privacy |
|
Google LLC (Analytics / Maps) |
Google Analytics (aggregated usage statistics) and Google Maps (pick-up/drop-off location display). Data may be processed in the USA. Privacy Policy: policies.google.com/privacy |
|
Mixpanel Inc. |
Product analytics — booking funnel and feature engagement tracking. Privacy Policy: mixpanel.com/legal/privacy-policy |
|
Functional Software Inc. (Sentry) |
Application error monitoring and crash reporting. No personal data stored. Privacy Policy: sentry.io/privacy/ |
|
Hotjar Ltd. |
Anonymized session recordings and heatmaps. IP addresses are automatically anonymized. Privacy Policy: hotjar.com/legal/policies/privacy/ |
|
Intercom Inc. |
In-app customer support chat. Processes your name, email, and support conversation content. Privacy Policy: intercom.com/legal/privacy |
|
Meta Platforms (Facebook Pixel) |
Marketing campaign measurement only — activated with your consent. Privacy Policy: facebook.com/policy.php |
|
Snap Inc. (Snapchat Pixel) |
Marketing campaign measurement only — activated with your consent. Privacy Policy: snap.com/en-US/privacy/privacy-policy |
CarEjar reviews its third-party cookie providers at least annually and updates this policy whenever a new provider is added or an existing provider is removed. The current version of this policy reflects all active third-party cookies as of the Effective Date shown on the cover page.
SECTION 8: CROSS-BORDER DATA TRANSFERS
Some third-party cookie providers listed in Section 7 (including Google LLC, Mixpanel Inc., Functional Software Inc., Intercom Inc., Meta Platforms, and Snap Inc.) are based in the United States of America. When cookies collect personal data, that data may be transferred to and processed in the USA or other countries outside the UAE and the EEA.
CarEjar only engages third-party cookie providers that offer adequate levels of data protection for cross-border transfers, including through: Standard Contractual Clauses (SCCs) recognised under UAE PDPL and equivalent international frameworks; membership of the EU-US Data Privacy Framework or equivalent; and/or binding corporate rules approved by a competent data protection authority.
You may request information about our specific cross-border transfer safeguards by emailing info@carejar.com.
SECTION 9: YOUR RIGHTS REGARDING COOKIE-RELATED PERSONAL DATA
To the extent that cookies collect personal data about you, you have the following rights under UAE Federal Decree-Law No. 45 of 2021 (PDPL):
|
Your Right |
How to Exercise It |
|
Right of Access — Request a copy of the personal data collected about you through cookies. |
Email info@carejar.com with the subject line ‘Cookie Data Access Request’. We will respond within 30 days. |
|
Right of Rectification — Request correction of inaccurate cookie-related data. |
Email info@carejar.com. We will correct the data and notify relevant third-party processors within 5 business days. |
|
Right of Erasure — Request deletion of personal data collected through cookies. |
Use the Cookie Preference Centre to switch off non-essential cookies. For deletion of existing cookie data already collected, email info@carejar.com. |
|
Right of Restriction — Request that we limit processing of your cookie data. |
Email info@carejar.com or adjust preferences in the Cookie Preference Centre. |
|
Right to Object — Object to processing based on legitimate interest. |
Email info@carejar.com. We will assess the objection and respond within 30 days. |
|
Right to Withdraw Consent — Withdraw your consent at any time. |
Use the Cookie Preference Centre or email info@carejar.com. Withdrawal takes effect immediately. |
Complaints: If you are dissatisfied with how CarEjar handles your cookie-related data rights request, you may file a complaint with the UAE Data Office (the supervisory authority under UAE PDPL) at: www.uaedataoffice.gov.ae.
SECTION 10: CHILDREN AND COOKIES
The CarEjar Platform is not intended for use by persons under the age of 21 years. CarEjar does not knowingly use cookies to collect personal data from persons under 21 years of age. If we become aware that cookie data has been collected from a person under 21 without appropriate consent, we will delete that data promptly. If you believe a child has provided personal data through our Platform, please contact info@carejar.com.
SECTION 11: COOKIES AND MOBILE APPLICATIONS
The CarEjar mobile applications for iOS (Apple App Store) and Android (Google Play Store) use mobile-equivalent tracking technologies in the form of SDKs rather than traditional HTTP cookies. The same four categories (Strictly Necessary, Functional, Analytics, and Marketing) apply to mobile tracking as to the website.
In addition to the CarEjar in-app Cookie Preference settings (Profile → Settings → Privacy & Cookie Preferences), you may also manage mobile tracking through your device’s operating system settings:
- iOS (iPhone/iPad): Settings → Privacy & Security → Tracking — disable ‘Allow Apps to Request to Track’. Also: Settings → Privacy & Security → [each category such as Location Services, Analytics & Improvements].
- Android: Settings → Privacy → Ads → Opt out of Ads Personalisation. Also: Settings → Privacy → Permission Manager to manage location, camera, and microphone permissions.
Disabling mobile tracking through operating system settings may limit certain app personalisation features but will not prevent you from using core CarEjar booking functionality.
SECTION 12: DO NOT TRACK SIGNALS
Some browsers include a ‘Do Not Track’ (DNT) signal that sends an automated request to websites not to track your browsing activity. There is currently no universally accepted standard for how websites should respond to DNT signals, and UAE law does not mandate a specific response. Accordingly, CarEjar does not currently change its cookie practices in response to DNT browser signals. However, you may always use our Cookie Preference Centre to manually opt out of non-essential cookies — this provides you with direct, granular control over your preferences regardless of your browser’s DNT setting.
SECTION 13: UPDATES TO THIS COOKIE POLICY
CarEjar reserves the right to update this Cookie Policy at any time to reflect changes in the cookies we use, changes in applicable law, or changes in how we operate the Platform. When we make material changes to this policy:
- We will update the ‘Effective Date’ shown on the cover page;
- We will display a prominent notice on the Platform for at least 14 days following the update;
- Where the changes affect how we use cookies that require consent, we will ask you to re-confirm your preferences; and
- We will notify registered Users by email if the changes are material.
We recommend checking this Cookie Policy periodically. The current version is always available at [www.carejar.com/legal/cookie-policy].
SECTION 14: CONTACT AND COMPLAINTS
For all enquiries related to this Cookie Policy, please use the following contacts:
|
Contact Type |
Details |
|
General Cookie Enquiries: |
info@carejar.com | +971-506753534 |
|
Cookie Preference Changes: |
info@carejar.com — or use the Cookie Preference Centre on the website |
|
Data Subject Rights Requests: |
info@carejar.com — include ‘Cookie Data Request’ in the subject line |
|
Legal Notices: |
info@carejar.com | CarEjar Portal L.L.C S.O.C, Dubai, UAE |
|
UAE Data Office (Regulator): |
www.uaedataoffice.gov.ae — if you are dissatisfied with our response to your rights request |