RahaTap

1. Introduction

This Privacy Policy ('Policy') is issued in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and applies to RahaTap ('we', 'our', or the 'Company'), a digital business card and lead capture platform operating in the United Arab Emirates.

Company Details

Legal Name: Raha Tech Group FZE
Trade License Number: 4426136.01
Registered Address: Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
Website: https://rahatap.com
Email: info@rahatap.com
Data Protection Contact: info@rahatap.com (we will appoint a Data Protection Officer (DPO) if and when required by applicable law)

This Policy explains how we collect, use, store, share, and protect your Personal Data when you use our website (rahatap.com), mobile applications, digital business card services, and related platforms (the 'Services').

2. Legal Basis for Data Processing

We process Personal Data under the following legal grounds as permitted by UAE Federal Decree-Law No. 45 of 2021:

Consent: When you explicitly agree to data collection and processing.
Contractual Necessity: To provide our digital business card and lead capture services.
Legal Obligation: To comply with UAE laws, regulations, and government requests.
Legitimate Interests: To improve our Services, prevent fraud, and ensure platform security.

3. Personal Data We Collect

3.1 Account Holder Data (Card Creators)

When you create a RahaTap account and digital business card, we may collect:

Full name, job title, company name, and department.
Email address, phone number(s), and professional social media profiles.
Business address and location data.
Profile photograph and company logo.
Payment information (processed through secure third-party gateways).
Account credentials (username and encrypted password).

3.2 Lead/Visitor Data (Card Recipients)

When individuals interact with your digital business card, we may collect:

Name, email address, phone number, and company information voluntarily provided.
Timestamp and location data of card interactions (where enabled/available).
Device information (IP address, browser type, operating system).
Interaction analytics (views, taps, link clicks).

3.3 Automatic Data Collection

Cookies and Tracking Technologies: We use cookies to enhance user experience, analyze usage patterns, and maintain session security.
Analytics Data: Page visits, duration, referral sources, and feature usage.
Technical Data: Device identifiers, network information, and crash reports.

4. How We Use Your Personal Data

We process your Personal Data for the following purposes as required by Article 4 of Federal Decree-Law No. 45 of 2021:

4.1 Service Delivery

Creating and hosting your digital business cards.
Facilitating lead capture and contact information exchange.
Managing your account and providing customer support.
Processing payments and maintaining transaction records.

4.2 Communication

Sending service notifications, updates, and account alerts.
Responding to inquiries and support requests.
Marketing communications (only with explicit consent, with opt-out available).

4.3 Service Improvement

Analyzing platform usage to enhance features and user experience.
Conducting research and development for new services.
Generating anonymized statistics and reports.

4.4 Legal and Security

Complying with UAE legal obligations and government requests.
Preventing fraud, unauthorized access, and security threats.
Enforcing our Terms and Conditions.
Protecting our legal rights and interests.

5. Data Sharing and Disclosure

We respect your privacy and limit data sharing as follows:

5.1 With Your Consent

When you share your digital business card, recipient data is accessible to you (the card creator).
When leads provide their information, it is shared with the relevant card owner.

5.2 Service Providers

We may share data with trusted third-party processors who assist us, such as:

Cloud hosting and storage providers.
Payment processing services (compliant with PCI-DSS standards).
Analytics and performance monitoring tools.
Customer support platforms.
Email and SMS communication services.

All processors are bound by written agreements as required by Article 10 of Federal Decree-Law No. 45 of 2021.

5.3 Legal Requirements

We may disclose Personal Data when required by:

UAE courts, government authorities, or law enforcement.
Legal processes, subpoenas, or court orders.
National security or public interest requirements.
Protection of our rights, property, or safety.

5.4 Business Transfers

In the event of a merger, acquisition, or asset sale, your data may be transferred to the successor entity with prior notification where required by law.

6. International Data Transfers

If we transfer your Personal Data outside the UAE, we ensure:

The receiving country has adequate data protection standards recognized by UAE authorities; or
Implementation of appropriate safeguards (e.g., Standard Contractual Clauses, binding corporate rules); and
Your explicit consent for such transfers where required by law.

7. Data Retention

We retain Personal Data only as long as necessary for the purposes outlined in this Policy:

Active Accounts: Data retained while your account remains active.
Inactive Accounts: Retained for a reasonable period after account closure for legal and operational purposes, unless longer retention is required by law.
Transaction Records: Maintained for 5 years as required by UAE VAT and commercial laws.
Marketing Data: Deleted or suppressed promptly upon consent withdrawal.
Legal Requirements: Extended retention when mandated by UAE law or ongoing legal proceedings.

You may request data deletion at any time, subject to legal retention obligations.

8. Your Rights Under UAE Law

Under Federal Decree-Law No. 45 of 2021, you have the following rights:

8.1 Right to Access

Request confirmation of what Personal Data we process and obtain a copy (Article 14).

8.2 Right to Rectification

Correct inaccurate or incomplete Personal Data.

8.3 Right to Erasure ('Right to be Forgotten')

Request deletion of your Personal Data when no longer necessary for processing purposes.

8.4 Right to Restrict Processing

Limit how we process your data in certain circumstances.

8.5 Right to Data Portability

Receive your Personal Data in a structured, commonly used format.

8.6 Right to Object

Oppose processing based on legitimate interests or for direct marketing purposes.

8.7 Right to Withdraw Consent

Withdraw consent at any time without affecting prior lawful processing.

8.8 Right to Lodge a Complaint

File complaints with the UAE Data Office or relevant regulatory authority.

Exercising Your Rights

Submit requests via email to info@rahatap.com or through your account settings (where available). We will respond within 15 business days as required by UAE regulations.

9. Data Security Measures

We implement technical and organizational measures compliant with UAE Cybercrime Law (Federal Law No. 5 of 2012) and Federal Decree-Law No. 45 of 2021:

Technical Safeguards

SSL/TLS encryption for data transmission.
AES-256 encryption for data at rest (where applicable).
Secure authentication and password hashing.
Regular security audits and vulnerability assessments.
Firewall protection and intrusion detection systems.
Automated backup and disaster recovery procedures.

Organizational Safeguards

Access controls limiting data access to authorized personnel only.
Employee training on data protection and confidentiality.
Confidentiality agreements with all staff and contractors.
Incident response and data breach protocols.

10. Data Breach Notification

In the event of a data breach that compromises your Personal Data security or privacy, we will:

Notify the UAE Data Office within 72 hours of discovery (where required).
Inform affected Data Subjects within 5 business days via email or account notification (where required).
Provide details of the breach, potential impact, and remedial measures taken.
Offer guidance on protective actions you can take.

11. Children's Privacy

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect Personal Data from minors. If we discover such collection, we will delete the data promptly and take appropriate steps as required by UAE law.

12. Cookies and Tracking Technologies

Types of Cookies We Use

Essential Cookies: Required for platform functionality (account login, session management).
Performance Cookies: Analyze usage patterns and improve Services (e.g., analytics tools).
Functional Cookies: Remember your preferences and settings.
Marketing Cookies: Deliver targeted advertisements (only with consent).

Cookie Consent

Upon your first visit, you will see a cookie consent banner. You can manage cookie preferences at any time through your browser settings and (where available) our cookie preference controls.

Third-Party Cookies

We may use services like Google Analytics, Meta/Facebook Pixel, and similar tools. These providers have their own privacy policies.

13. Third-Party Links

Our Services may contain links to external websites (social media profiles, partner sites). We are not responsible for the privacy practices of third-party sites. We encourage you to review their privacy policies before providing Personal Data.

14. Arabic Language Version

In compliance with UAE Consumer Protection Law (Federal Law No. 15 of 2020), this Privacy Policy is available in Arabic. In case of discrepancies between language versions, the Arabic version shall prevail for legal interpretation.

Arabic version: Available upon request via info@rahatap.com.

15. Updates to This Policy

We may update this Policy to reflect changes in:

UAE data protection regulations and legal requirements.
Our business practices and Services.
Technology and security standards.

We will notify you of material changes via:

Email notification to your registered address (where applicable).
Prominent notice on our website.
In-app notifications (where applicable).

Continued use of Services after changes constitutes acceptance of the updated Policy.

16. Contact Us

For questions, complaints, or to exercise your data subject rights:

Email: info@rahatap.com
Mailing Address: Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
Website: https://rahatap.com

Regulatory Authority

For complaints or concerns, you may contact the UAE Data Office (under the Telecommunications and Digital Government Regulatory Authority).

Reference page: https://u.ae/en/about-the-uae/digital-uae/data

17. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the United Arab Emirates, including:

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
Federal Law No. 15 of 2020 on Consumer Protection.
Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services.

Any disputes shall be subject to the exclusive jurisdiction of UAE courts.

Terms & Conditions