HELLOU

MASTER PLATFORM AGREEMENT

Unified Terms for All Users  ·  Version 1.1  ·  April 22, 2026

This Agreement governs your use of the HELLOU platform regardless of your role.

It applies to: Service Providers (Suppliers)  ·  Employer Companies  ·  Individual Users

Issued by: ESTIDAMA RESEARCH AND DEVELOPMENT IN THE FIELD OF SMART SYSTEMS - L.L.C - O.P.C  ·  Abu Dhabi, United Arab Emirates

Platform: wehellou.com  ·  Legal contact: services@wehellou.com

Governing Law: UAE Federal Law, Emirate of Abu Dhabi

DEFINITIONS

The following terms have the meanings set out below wherever they appear in this Agreement:

1.  Acceptance of This Agreement

By accessing or using the Platform, you agree to be bound by this Agreement in its entirety. If you do not agree to any part of this Agreement, you may not use the Platform.

Role-specific Parts (III, IV) and Schedules apply in addition to this Part I. Where there is a conflict between a role-specific Part and this Part I, the role-specific Part prevails.

2.  Platform Services

HELLOU provides a digital business services platform that facilitates:

• Visa and immigration application processing for UAE-based employees
• Workforce management tools for manpower suppliers and employers
• Document management, storage, and retrieval for employment-related certificates
• Business matching between enterprises and verified service providers
• Automated billing and account management between suppliers and employers
• AI-powered consultation and recommendation services (see 2.1)
• Platform commission and invoicing services (see Part V)

HELLOU acts solely as a technology intermediary. HELLOU does not itself provide visa processing, legal, or immigration advisory services. Final decisions on visa applications rest exclusively with UAE government authorities (MOHRE, ICA, DHA).

2.1  AI-Powered Features — Transparency Notice

3.  Account Registration

3.1  Account Types

The Platform supports three account types. Your rights and obligations differ by account type:

3.2  Registration Requirements

To register, you must: (i) be at least 18 years of age; (ii) provide accurate, current, and complete information; (iii) maintain the confidentiality of your account credentials; and (iv) be legally authorised to enter binding agreements on behalf of any company you represent.

HELLOU reserves the right to verify identity and credentials and to reject or suspend accounts containing false information.

4.  User Obligations

By using the Platform, all users agree to:

• Provide accurate, truthful, and up-to-date information at all times
• Use the Platform only for lawful purposes and in compliance with all applicable UAE laws
• Not attempt to gain unauthorised access to any part of the Platform or other users' accounts
• Not upload or transmit any malicious code, viruses, or harmful content
• Not use the Platform to harass, defraud, or harm other users
• Promptly notify HELLOU of any unauthorised use of your account or security breach
• Not engage in any discriminatory conduct based on race, nationality, religion, gender, or any other protected characteristic
• Comply with all additional guidelines, policies, and instructions issued by HELLOU from time to time

5.  Anti-Money Laundering and Counter-Terrorist Financing

HELLOU is committed to combating money laundering and terrorist financing under UAE Federal Decree by Law No. 20 of 2018 (as amended). By using the Platform, you agree that:

• HELLOU may conduct enhanced due diligence on all Suppliers and Employers, including verification of trade licences, ultimate beneficial ownership, and source of funds
• Users must promptly provide any information requested for AML/CTF compliance purposes
• Any suspicious transaction may be reported to the UAE Financial Intelligence Unit (FIU) without prior notice to the user
• Users must not use the Platform to conceal, transfer, or receive proceeds from any illegal activity

6.  Intellectual Property

All content on the Platform, including software, text, graphics, logos, icons, and data compilations, is the property of HELLOU or its licensors, protected by applicable intellectual property laws. Users are granted a limited, non-exclusive, non-transferable licence to access and use the Platform for its intended purposes. This licence does not include the right to sublicense, resell, or commercially exploit any part of the Platform.

7.  Limitation of Liability

HELLOU's total aggregate liability to any user shall not exceed the greater of: (a) the fees paid by that user to HELLOU in the twelve (12) months preceding the claim; or (b) AED 10,000.

HELLOU is a technology intermediary only. It does not control, endorse, or assume responsibility for the services provided by Suppliers, the actions of Employers, or the accuracy of information entered by third parties. Any dispute between an Individual, Employer, and Supplier shall be resolved directly between those parties.

8.  Force Majeure

Neither party shall be liable for failure or delay in performance resulting from circumstances beyond its reasonable control, including acts of God, war, terrorism, civil unrest, epidemics, pandemics, government-imposed restrictions, UAE regulatory changes, power failures, internet outages, or actions of UAE government authorities (MOHRE, ICA, FTA). The affected party shall notify the other as soon as practicable.

9.  Termination

HELLOU reserves the right to suspend or terminate any account at its sole discretion, with or without notice, for violation of this Agreement or applicable laws. Users may terminate their accounts at any time by contacting support@wehellou.com.

Upon termination, the user's right to access the Platform ceases immediately. HELLOU will retain user data as required by applicable UAE law and as described in Part II.

10.  Governing Law and Dispute Resolution

This Agreement is governed by the federal laws of the United Arab Emirates and the laws applicable in the Emirate of Abu Dhabi. The application of any laws of the DIFC or ADGM is expressly excluded.

Disputes shall first be attempted to be resolved amicably within thirty (30) days. If unresolved, disputes shall be referred to the Abu Dhabi courts having jurisdiction.

11.  Amendments

HELLOU reserves the right to amend this Agreement at any time. Users will be notified of material changes via email or platform notification at least fourteen (14) days before changes take effect. Continued use of the Platform constitutes acceptance of the amended terms.

12.  General Provisions

12.1  Entire Agreement

This Agreement, including all Parts and Schedules, constitutes the entire agreement between the parties with respect to its subject matter and supersedes all prior agreements, representations, warranties, and understandings, whether oral or written, relating to that subject matter. No statement, promise, or representation made by any HELLOU representative outside this document shall vary or supplement these terms.

12.2  Severability

If any provision of this Agreement is found by a court of competent jurisdiction to be invalid, illegal, or unenforceable in any respect, that provision shall be modified to the minimum extent necessary to make it enforceable, or severed from the Agreement if modification is not possible. The invalidity or unenforceability of any provision shall not affect the validity or enforceability of any other provision, which shall continue in full force and effect as if the invalid or unenforceable provision had not been included.

12.3  No Waiver

No failure or delay by HELLOU in exercising any right, power, or remedy under this Agreement shall operate as a waiver of that right, power, or remedy. No single or partial exercise of any right by HELLOU prevents any further exercise of that right or the exercise of any other right. A waiver by HELLOU of any breach of this Agreement by a User is not a waiver of any subsequent breach of the same or any other provision of this Agreement.

12.4  No Agency or Partnership

Nothing in this Agreement creates, and nothing shall be construed as creating, any agency, partnership, joint venture, employment, or fiduciary relationship between HELLOU and any User. No User has authority to bind HELLOU to any obligation, commitment, or representation, express or implied. HELLOU is at all times an independent technology platform operator.

12.5  Third-Party Rights

This Agreement does not, and is not intended to, confer any rights, benefits, or remedies upon any person other than the parties who have accepted it (HELLOU and the registered User). Nothing in this Agreement shall be construed as creating any rights enforceable by third parties, including employees or workers whose data is processed through the Platform or who benefit from services arranged through it. Third parties have no right to enforce any term of this Agreement.

12.6  Electronic Execution

Clicking “I Agree” or “Accept Agreement” constitutes a legally binding electronic signature under UAE Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services. This Agreement may be entered into, and shall be binding upon all parties, by electronic acceptance. HELLOU maintains a timestamped record of each acceptance event, which constitutes admissible evidence of agreement in any legal proceedings.

12.7  Governing Language

This Agreement is drafted and executed in English. Where HELLOU provides a translation into Arabic or any other language, such translation is provided as a convenience only. In the event of any inconsistency between the English version and any translation, the English version shall prevail. Users who are not proficient in English are advised to obtain an independent certified translation before accepting this Agreement.

1.  Introduction

ESTIDAMA RESEARCH AND DEVELOPMENT IN THE FIELD OF SMART SYSTEMS - L.L.C - O.P.C is the Data Controller for personal data collected through the Platform. This Part II constitutes our Privacy Policy, prepared in accordance with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection ("PDPL") and its implementing regulations. All data is stored on UAE-based servers (AWS me-central-1, Abu Dhabi region).

2.  Data We Collect

2.1  Account Registration Data (All Users)

• Full name, email address, phone number
• Company name and registration number (Employers and Suppliers)
• User role, account type, password (encrypted)

2.2  Identity and Immigration Documents (Primarily Individuals)

• Passport copy (biographical data page and all visa pages)
• Emirates ID (front and back, including biometric reference number — see 4.1)
• Current UAE residence visa; medical fitness certificate (health data — see 4.2)
• Labour contract / employment offer letter; personal photograph (biometric quality)

2.3  Employment and Financial Data

• Job title, department, employer details, start date, employment status
• Salary information — classified as sensitive financial personal data (see 4.3)

2.4  Usage and Platform Data

• IP address, browser type, device information, pages visited, features used
• Communication logs within the Platform; AI feature interaction history

3.  How We Use Your Data

• Visa and immigration application processing through MOHRE and ICA
• Generation of employment certificates, salary certificates, and NOC letters
• Workforce management and document tracking for employers and suppliers
• Automated reminders for visa and document expiry dates
• Billing and invoice management between suppliers and employers
• Identity verification, fraud prevention, AML/CTF compliance
• Platform improvement, technical support, and security
• Compliance with UAE legal and regulatory obligations

3.6  Automated Processing and AI Recommendations

4.  Sensitive Data Categories

4.1  Biometric Reference Data (Emirates ID)

Your Emirates ID contains a biometric reference number. HELLOU stores this number solely for ICA identity verification. It is not used for biometric matching or any commercial purpose. Explicit consent is obtained via Schedule I.

4.2  Health Data (Medical Fitness Certificate)

Medical fitness certificates constitute health data — a special category under PDPL Article 1. This data is processed exclusively for UAE visa application requirements (MOHRE/DHA) and is shared only with the designated government portal and your assigned service provider.

4.3  Salary and Financial Data

Salary information is classified as sensitive financial personal data. It is collected solely for the purpose of generating employment and salary certificates as requested by the individual. It is not shared in a way that enables cross-individual salary comparison without explicit consent.

5.  Legal Basis for Processing

• Consent — for sensitive documents: passport, Emirates ID, medical certificates, salary data
• Contractual necessity — to fulfil our service obligations to you
• Legal obligation — to comply with UAE immigration and labour laws
• Legitimate interests — for platform security, fraud prevention, AI service matching, and platform improvement

6.  Data Sharing and Disclosure

6.1  Within the Platform

• Between employees, suppliers, and employers as necessary to fulfil services
• Platform administrators for account management and support

6.2  Government Authorities

• MOHRE for visa and labour permit applications
• ICA for Emirates ID and visa stamping
• DHA or SEHA for medical certificate verification

6.3  Third-Party Service Providers

• Cloud infrastructure: AWS (within UAE data residency requirements)
• Payment processing services (PCI-DSS compliant)
• Email and notification service providers

We do not sell, rent, or trade your personal data to any third parties for marketing or commercial purposes.

6.4  Cross-Border Data Transfers

All personal data is stored and processed exclusively within UAE (AWS me-central-1, Abu Dhabi). No data is transferred outside the UAE without explicit consent and adequate protection as required by PDPL.

7.  Data Retention

• Account and profile data: Duration of account plus 3 years after termination
• Immigration documents: 5 years from last visa expiry (UAE labour law requirement)
• Employment certificates and transaction records: 7 years (financial compliance)
• Salary data: 7 years or until consent withdrawn, whichever is earlier
• Usage logs: 12 months on a rolling basis

After retention periods expire, data is securely deleted or anonymised. In the event HELLOU ceases operations, users will receive 90 days' notice and may export their data via Account Settings > Data Export.

8.  Data Breach Response

• HELLOU will contain and investigate any breach immediately
• Notification to the UAE Data Office within 72 hours of discovery, as required by applicable regulations
• Notification to affected users without undue delay if the breach is likely to cause significant harm
• All breaches documented, including effects and remedial actions

To report a suspected breach: services@wehellou.com

9.  Your Rights Under UAE PDPL

• Right to Access — request a copy of data held about you
• Right to Rectification — request correction of inaccurate data
• Right to Erasure — request deletion (subject to legal retention obligations)
• Right to Restriction — request limitation of processing in certain circumstances
• Right to Data Portability — request data in a structured, machine-readable format
• Right to Object — object to processing based on legitimate interests (including AI processing)
• Right to Withdraw Consent — via Account Settings > Privacy > Withdraw Consent, or email services@wehellou.com
• Right to Human Review — request human review of any AI-generated recommendation

All requests will be responded to within 30 days. Contact: services@wehellou.com

10.  Data Security

• AES-256 encryption for data at rest; TLS 1.3 for data in transit
• Role-based access controls; regular security audits and penetration testing
• Two-factor authentication for all administrative accounts
• Data stored exclusively within UAE territory (AWS me-central-1)

11.  Cookies and Tracking Technologies

The Platform uses: (a) strictly necessary cookies for authentication and session management (cannot be disabled); and (b) functional cookies to remember preferences (manageable via Account Settings > Privacy > Cookie Preferences). We do not use advertising cookies or third-party tracking pixels.

12.  Data Protection Officer

HELLOU has designated a Data Protection Officer (DPO) pursuant to PDPL Article 13. DPO Contact: services@wehellou.com — ESTIDAMA RESEARCH AND DEVELOPMENT IN THE FIELD OF SMART SYSTEMS - L.L.C - O.P.C, Abu Dhabi, UAE. HELLOU will register the DPO appointment with the UAE Data Office upon the opening of the registration portal as required by implementing regulations.

1.  Scope

This Part III applies to all entities registering as Service Providers (Suppliers) on the Platform, including manpower agencies, PRO service companies, and business service providers. It supplements Part I and Part V of this Agreement.

2.  Eligibility and Verification

• Be a legally registered business entity in the UAE with a valid trade licence
• Hold all professional licences required to provide the services offered
• Not be subject to any regulatory sanctions, debarment, or criminal investigations
• Provide accurate business information including trade licence number and authorised representative
• Cooperate with all AML/KYC checks requested by HELLOU

2.1  Insurance Requirement

3.  Service Obligations

3.1  General Service Standards

• Deliver services to the standard expected of a professional operating in the UAE
• Maintain all required government licences and certifications throughout the Agreement term
• Respond to client enquiries within the response time committed on the Platform profile (default: 24 hours)
• Provide accurate service descriptions, pricing, and timelines on the Platform
• Notify HELLOU and affected clients promptly of any inability to fulfil a committed service
• Comply with UAE Consumer Protection laws (Federal Decree-Law No. 5 of 2023)

3.2  Visa Processing Obligations (Manpower Suppliers)

• Process all visa applications in accordance with MOHRE, MOL, and ICA requirements
• Update visa status on the Platform within 24 hours of any government update
• Notify employers and employees immediately of any document rejection or additional requirements
• Never retain employee documents beyond the period required for processing
• Issue employment, salary certificates, and NOC letters within 2 business days of approved requests

3.3  AML/CTF Obligations (Suppliers)

• Implement own AML/CTF policies and procedures (as applicable DNFBP)
• Conduct customer due diligence on clients
• Report suspicious transactions to the UAE FIU
• Provide HELLOU with a copy of AML compliance certificate upon request

3.4  Worker Protection and Anti-Trafficking

4.  Platform Fees and Commission

The full commission and fee structure is set out in Part V. Summary:

• Beta Period: AED 0. All fees will be announced with 30 days' written notice.
• Commission is charged to the Supplier on each confirmed service contract on the Platform.
• HELLOU issues a separate VAT-compliant invoice to the Supplier for the commission amount.
• The Supplier remains solely responsible for invoicing clients and collecting service payments.

5.  Supplier Data Handling Obligations

• Process employee data only for the specific purposes authorised by the employee and HELLOU
• Not retain employee documents beyond the period required for the specific application
• Implement appropriate security measures to protect employee data
• Immediately notify HELLOU of any data breach or suspected unauthorised access
• Comply with UAE PDPL in all data processing activities
• Delete employee data upon request, subject to applicable legal retention requirements

6.  Prohibited Conduct

• Provide false or misleading information to clients or HELLOU
• Charge undisclosed fees to clients
• Use employee documents for any purpose other than the specific service requested
• Engage in fee-splitting, kickback arrangements, or other corrupt practices

6.1  Non-Circumvention

For the first 12 months from the date a client relationship is introduced through the Platform, the Supplier must not conduct business with that client for the same category of services outside the Platform without HELLOU's written consent. This restriction applies only to (a) the services offered on the Platform; and (b) clients introduced through the Platform. It does not restrict unrelated business or independently-sourced clients.

7.  Ratings and Reviews

Clients may rate and review Suppliers on the Platform. HELLOU will display ratings transparently. Suppliers may flag reviews they believe to be fraudulent through the Platform's dispute process. HELLOU's decision on disputed reviews is final. HELLOU reserves the right to downgrade or remove listings that consistently receive low ratings.

8.  Termination and Transition Obligations

Either party may terminate with 30 days' written notice. HELLOU may terminate immediately for: fraudulent information, violation of UAE law, three or more substantiated complaints in any 90-day period, or failure to maintain required licences or insurance.

8.1  Transition on Termination

9.  Indemnification

The Supplier agrees to indemnify, defend, and hold harmless HELLOU, its officers, directors, and employees from any claims, damages, losses, or expenses (including legal fees) arising from the Supplier's services, conduct, or breach of this Agreement.

1.  Scope

This Part IV applies to companies and organisations registering as Employers on the Platform. It supplements Part I, Part II, Part V, and Schedule II of this Agreement.

2.  Nature of Access — Read-Only Dashboard

The Employer's access to employee visa and document information is provided on a read-only basis. The Employer acknowledges that:

• All visa processing and immigration applications are managed by the designated Supplier
• The Employer cannot directly modify employee records, visa status, or application details
• Information displayed may not reflect real-time government processing status
• HELLOU is a technology intermediary and does not hold immigration authority

3.  Employer Obligations

• Provide accurate company information at registration, including UAE trade licence number
• Designate an authorised HR or operations contact responsible for the Employer account
• Confirm or dispute monthly Supplier invoices within 5 business days of receipt
• Notify HELLOU and the Supplier of any changes to employment status of deployed staff
• Ensure only authorised personnel have access to the Employer account
• Not use employee information for any purpose other than legitimate employment management
• Not discriminate against any employee based on any protected characteristic
• Comply with UAE AML laws, including reporting suspicious payment or staffing activities

4.  Billing and Invoice Confirmation

4.1  Invoice Confirmation — Critical Commercial Obligation

4.2  Dispute Process

Disputes must be submitted through the Platform with a written explanation within 5 business days. HELLOU will facilitate communication between the Employer and Supplier to resolve the dispute within 10 business days.

4.3  Payment and VAT

Payment is made directly between the Employer and the Supplier. HELLOU is not a party to payment transactions and does not hold client funds. All Supplier invoices are subject to UAE VAT at 5%. The Employer is responsible for maintaining appropriate VAT records.

5.  Data Access and Confidentiality

• Access employee data only for legitimate workforce management purposes
• Not share employee personal data with any third party without the employee's consent
• Implement appropriate internal controls to prevent unauthorised access
• Comply with UAE PDPL in all use of employee data accessed through the Platform

The formal Data Processing Arrangement between HELLOU and the Employer is set out in Schedule II of this Agreement.

6.  Notifications and Expiry Alerts

The Platform sends automated notifications when employee visas, Emirates IDs, or other documents are approaching expiry (at 60, 30, and 7 days before expiry). These notifications are informational only and do not constitute legal advice or official government notices. HELLOU is not liable for missed notifications if the Employer's contact details are not kept up to date.

7.  Wage Protection System (WPS) Compliance

Employers of deployed staff are required to comply with MOHRE's Wage Protection System (WPS) regulations. The Platform provides WPS support tools including: document storage for WPS-related payroll records, notifications for upcoming WPS filing deadlines, and invoice records for WPS compliance documentation. WPS compliance is the Employer's legal obligation. Employers should verify their specific WPS obligations with their Supplier or a UAE labour law advisor.

8.  Limitation of HELLOU's Liability to Employers

HELLOU is not responsible for: the outcome of any visa application or government decision; the quality or timeliness of services provided by Suppliers; any employment disputes between the Employer and its deployed staff; or the accuracy of information provided by Suppliers on the Platform.

1.  Platform Fees — Beta Period

During the current beta phase, HELLOU does not charge any platform access fees to Suppliers, Employers, or Individual users. All core platform features are available at no cost. Before any fees are introduced, all active users will receive written notice at least 30 calendar days in advance, with the option to continue under a paid plan or terminate their account without penalty.

2.  Commission Structure

2.1  Commission Trigger and Calculation Basis

Confirmation of Transaction and Commission:By confirming or accepting a Quote through the Platform — whether by clicking "Accept Quote", "Confirm & Accept", "Place Order", or any equivalent confirmation action — the User irrevocably agrees to the deduction of the applicable Service Fee from the settlement amount. No separate consent is required at the time of settlement.

A commission becomes payable by the Supplier to HELLOU when a service contract between a Supplier and an Employer or Individual is confirmed on the Platform (invoice confirmed, or service marked as active).

The Service Fee is non-negotiable and non-refundable once a Transaction has been confirmed, except in circumstances where HELLOU determines, at its sole discretion, that a significant error in fee calculation has occurred.

HELLOU reserves the right to amend the Service Fee rates upon thirty (30) days' written notice to registered Users. Continued use of the Platform after such notice constitutes acceptance of the revised rates.

2.2  Commission Invoicing

HELLOU will issue a separate, VAT-compliant tax invoice to the Supplier for each commission, including: HELLOU's TRN, Supplier's TRN, Platform contract reference ID, net commission amount, and 5% UAE VAT. Commission invoices are issued monthly, consolidating all confirmed contracts from the prior month.

This invoice is entirely separate from the Supplier's own invoice to their client. HELLOU does not collect, hold, or process payments between Suppliers and Employers/Individuals.

2.3  Late Payment of Commission

If a Supplier fails to pay a commission invoice by the due date, HELLOU may: (a) apply late payment interest at the UAE Central Bank overnight lending rate plus 2% per annum; (b) suspend the Supplier's ability to accept new work; and (c) after 30 days of non-payment, temporarily hide the Supplier's listing.

3.  Supplier-to-Employer Billing

3.1  Invoice Generation

Suppliers may generate monthly invoices through the Platform for services rendered to Employers. These invoices are generated by the Supplier. HELLOU facilitates their delivery and confirmation only. HELLOU is not a party to the payment obligation.

3.2  Required Invoice Content

All invoices must include: (i) Supplier's UAE trade licence number and TRN; (ii) Employer's company name and TRN; (iii) itemised breakdown of services; (iv) applicable UAE VAT calculation (5%); (v) payment due date; and (vi) bank account details.

3.3  Invoice Confirmation, Dispute, and Late Payment

Employers must confirm or dispute invoices within 5 business days of receipt. Uncontested invoices are deemed confirmed and payable. Disputes must be raised in writing through the Platform within the 5-day window. If an Employer fails to pay a confirmed invoice, the Supplier may apply late payment interest (UAE Central Bank overnight rate + 2% p.a.) and may suspend services pending payment.

3.4  Payment Failure Handling

HELLOU sends automated payment reminders at: 3 days before due, on the due date, +5 days, and +15 days. After 30 days of non-payment of a commission invoice, Supplier listing may be suspended. After 30 days of non-payment of a service invoice (reported by Supplier), the Employer account may be flagged and restricted pending resolution.

4.  VAT Compliance

All transactions through the Platform are subject to UAE Federal Decree-Law No. 8 of 2017 on Value Added Tax. Suppliers registered for UAE VAT must issue VAT-compliant invoices through the Platform. HELLOU is not responsible for the VAT compliance of Supplier invoices. HELLOU's own commissions and platform fees are subject to UAE VAT at 5%, and HELLOU will issue tax invoices accordingly.

5.  Corporate Income Tax (CIT)

6.  Refund Policy

Platform subscription fees (when introduced): Pro-rata refunds available for unused periods, processed within 14 business days of account termination.

Commission refunds: A commission invoice may be credited if (a) a contract was confirmed but cancelled before services commenced (full credit); or (b) a contract value was invoiced incorrectly (credit note for the difference). Disputes must be raised within 15 business days of invoice receipt at services@wehellou.com.

Service transaction refunds: Governed by the individual service agreement between Supplier and client. HELLOU does not mediate third-party refund disputes.

7.  Currency and Payment Methods

Default billing currency: AED. The Platform also supports USD, EUR, GBP, SAR, and other GCC currencies upon request. Currency conversion based on UAE Central Bank reference rate at invoice generation.

Payments between Suppliers and Employers are made via UAE domestic bank transfer (preferred), international wire transfer (SWIFT), or platform-integrated payment gateways (to be introduced in future phases, subject to UAE Central Bank PSP licence approval).

8.  Tax Invoices and Records

All parties are responsible for maintaining their own financial records in compliance with UAE FTA requirements. HELLOU provides invoice records within the Platform for 7 years, exportable by users at any time.

1.  Purpose

This Schedule I constitutes the Data Processing Consent Form required under Article 12 of UAE PDPL. The documents you upload to HELLOU — including passport copies, Emirates ID, visa copies, medical certificates, and personal photographs — are classified as sensitive personal data requiring your explicit consent before processing.

2.  Data Covered by This Consent

• Passport copy (biographical data page and all visa/stamp pages)
• Emirates ID card (front and back, including biometric reference number)
• UAE residence visa copy
• Medical fitness certificate — HEALTH DATA — requires separate acknowledgement below
• Personal photograph (biometric quality, white background)
• Labour contract or employment offer letter (including salary information — FINANCIAL DATA)
• Any other immigration or employment documents uploaded to the Platform

2.1  Special Notice: Health Data

3.  Permitted Uses

• Submission to UAE government portals (MOHRE, ICA, DHA) for visa and Emirates ID applications
• Sharing with your designated employer and/or manpower supplier as necessary for visa processing
• Secure storage in your HELLOU account for document management and renewal purposes
• Generation of employment certificates, salary certificates, and other requested documents
• Automated reminders when documents are approaching expiry

4.  Withdrawing Consent

You may withdraw consent at any time by:

• In-Platform: Account Settings > Privacy > Data Consent > "Withdraw Consent" (immediate, confirmation email sent)
• By Email: Send withdrawal request from your registered email to services@wehellou.com (confirmed within 5 business days)

Effect: Withdrawal may affect ongoing visa applications. Non-legally-required documents will be deleted within 30 days. Documents subject to legal retention obligations will be held for the mandated period then deleted. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5.  Consent Declaration

Full Name:  _________________________________________________

Emirates ID / Passport Number:  _________________________________________________

Date of Consent:  _________________________________________________

Digital Consent Timestamp: Recorded at moment of checkbox tick, prior to any document upload. A copy is emailed to your registered address.

1.  Purpose

This Schedule II constitutes the formal Data Processing Arrangement between HELLOU (as Data Controller) and the Employer (as Authorised Data Recipient), required under PDPL Article 14. By using the Platform, the Employer agrees to be bound by this Schedule.

2.  Data Shared with Employers

• Visa status and document expiry dates of deployed employees
• Immigration application progress and status updates
• Automated expiry alerts and renewal reminders

The Employer does NOT have access to: full passport details beyond visa status; salary information of individuals; medical fitness certificate content; or any data beyond what is necessary for workforce management.

3.  Employer Obligations as Data Recipient

• Use employee data only for the purpose of managing the Employer's own deployed workforce (including visa renewals, emergency contacts, and payroll records)
• Implement appropriate technical and organisational measures to prevent unauthorised access to employee data within the Employer's own systems
• Notify HELLOU within 24 hours of discovering any actual or suspected data breach involving employee data accessed through the Platform
• Not retain employee data beyond the period required for the specific HR purpose
• Delete data promptly upon HELLOU's or the employee's request
• Direct any PDPL rights requests (access, erasure, rectification) from employees to HELLOU via services@wehellou.com
• Not transfer or disclose employee data to any third party without HELLOU's prior written consent and the employee's explicit consent

4.  Security Measures

The Employer agrees to implement, as a minimum: (i) password protection and access controls for the Employer's HELLOU account; (ii) restrictions on who within the Employer's organisation may access the HELLOU dashboard; and (iii) prompt revocation of access for departing employees who previously had access to the Employer's HELLOU account.

S2.5  Duration

This Schedule II remains in force for the duration of the Employer's account on the Platform and for any period during which the Employer retains employee data obtained through the Platform, whether or not the account remains active.

HELLOU Master Platform Agreement — End of Document

ESTIDAMA RESEARCH AND DEVELOPMENT IN THE FIELD OF SMART SYSTEMS - L.L.C - O.P.C  ·  Abu Dhabi, UAE  ·  services@wehellou.com  ·  wehellou.com