Khalas.ae — Privacy Policy

1. Introduction

This Privacy Policy applies to all visitors, customers, and service providers using Khalas.ae. It describes the personal data we collect, how we use it, and your rights under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

2. Data We Collect

We collect only the data necessary to operate our platform effectively, including:

• Registration data: name or business name, mobile number, optional email, service area, and service details.
• Optional data: any information you voluntarily provide in your profile or communications.
• Technical data: device type, browser, IP address, cookies, and usage analytics.
• Verification data (future phases): trade licence, Emirates ID, or proof of insurance (where applicable).

3. How We Use Your Data

We process your data to:

• Manage your registration and account.
• Connect customers with relevant service providers.
• Communicate with you via email, WhatsApp, or SMS.
• Send updates and marketing messages (where you have consented).
• Improve our services, maintain security, and prevent misuse.

4. Legal Basis for Processing

We rely on the following lawful bases under the PDPL:

• Consent — for marketing communications and optional features.
• Contractual necessity — to facilitate customer service provider interactions.
• Legitimate interest — for service improvement, fraud prevention, and security.

5. Cookies & Tracking Technologies

Khalas.ae uses cookies to ensure proper functionality and enhance user experience.

• Essential cookies: required for website operation.
• Analytics cookies: used to understand usage patterns (anonymously).

You can manage cookie preferences through your browser settings. Continued use of the site constitutes consent to our cookie use.

6. Data Sharing & Third Parties

We share data only with trusted third parties necessary to operate our platform:

• Licensed payment service providers (for offer fee payments).
• Hosting and IT infrastructure providers (based in the UAE or compliant regions).
• Communication partners (e.g., WhatsApp integration and email delivery).
• Verification providers (future phases, with explicit consent).

We do not sell or rent personal data to any third party.

7. Data Storage & Retention

Your data is stored securely on encrypted servers. We retain personal data for up to five (5) years after your last activity or as required by law. After this period, data is deleted or anonymized for statistical analysis.

8. Your Rights Under UAE PDPL

You have the following rights:

• Access — request confirmation and a copy of your data.
• Correction — request rectification of inaccurate data.
• Deletion — request erasure where no legal basis for retention exists.
• Restriction / Objection — limit or object to processing.
• Withdrawal of Consent — withdraw consent at any time without affecting prior lawful processing.
• Data Portability — obtain a copy of your data in a structured, machine-readable format.
• Automated Decision-Making — Khalas.ae does not use automated decision-making or profiling that produces legal or significant effects on you.
• Children's Data — our services are not intended for individuals under 18; any such data will be deleted upon discovery.
• Complaints — you may contact us at [email protected] for privacy requests.

9. Security Measures

We implement technical and organizational security measures including encryption, access controls, firewalls, and secure storage. Access to personal data is restricted to authorized personnel only.

10. International Transfers

Where necessary, data may be transferred outside the UAE under approved safeguards (e.g., Standard Contractual Clauses or adequacy decisions). Our primary hosting region remains the Middle East (UAE).

11. Data Deletion & Anonymization

Upon account closure or valid deletion request, your data will be erased or anonymized unless retention is required for legal, accounting, or fraud-prevention purposes.

12. Marketing Communications

You may choose to receive marketing updates from Khalas.ae by providing explicit consent during registration. You can withdraw your consent at any time by clicking "unsubscribe", replying "STOP", or emailing [email protected].

13. Contact Details

If you have questions or wish to exercise any privacy rights, please contact our Data Protection Officer:

[email protected]
Khalas Technology FZ-LLC, United Arab Emirates.

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. The latest version will always be available on our website with a revised "Last Updated" date. By continuing to use our services after updates, you accept the revised policy.