Group legal
Privacy notice
Covers the Trnznd Group website and the group contact form used by Zend and Trnzit. Last updated 26 October 2026
Each product has its own privacy notice for its service: see the Zend privacy noticeComing soon and the Trnzit privacy notice. This notice covers the group website and enquiries sent through the group contact form.
1. Who we are
Trnznd Technologies Ltd (“we”, “us”) is the controller of the personal data collected through the Trnznd Group website and the group contact form. Trnznd Technologies Ltd is formed and licensed in the DIFC Innovation Hub, with its registered address at Level 01, Innovation One, Dubai International Financial Centre, United Arab Emirates, and is registered with the DIFC Commissioner of Data Protection. We process personal data in line with the DIFC Data Protection Law (DIFC Law No. 5 of 2020).
For any question about this notice or your personal data, email legal@trnznd.io.
2. What we collect
- Contact form details: your name, work email, organisation details, role, country and message.
- Technical data: IP address, browser and device information, used to keep the website secure. See our Cookie notice.
3. Why we use it, and the legal basis
- To answer your enquiry and pass it to the right product team, Zend or Trnzit: our legitimate interests in responding to you, or steps you ask us to take before entering into a contract.
- To start onboarding where you ask for access to Zend: steps you ask us to take before entering into a contract.
- To keep the website secure: our legitimate interests.
- To send you updates: only with your consent, which you can withdraw at any time.
4. Who we share it with
- Trnznd S.A., in Panama, where your enquiry is about Zend, so that it can respond.
- Supabase, which hosts our database and services in Singapore.
- Professional advisers and competent authorities, where the law requires it.
We do not sell personal data.
5. International transfers and retention
Your data may be transferred to Panama and Singapore, outside the DIFC. We transfer personal data outside the DIFC only as the DIFC Data Protection Law permits: to a jurisdiction recognised as providing adequate protection, or with appropriate safeguards in place, such as standard data protection clauses.
We keep enquiries and related records for seven years, then delete or anonymise them.
6. Your rights
Under the DIFC Data Protection Law you can ask us to give you access to your personal data, correct it or delete it, restrict or object to how we use it, and give it to you in a portable format. Where we rely on your consent, you can withdraw it at any time. Some rights have limits, for example where the law requires us to keep records.
To use any of these rights, email legal@trnznd.io. If you are not satisfied with our response, you can complain to the DIFC Commissioner of Data Protection.