Last updated: 21 March 2026
Khalas Technology FZ-LLC (“Khalas.ae”, “we”, “our”, or “us”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you access or use our website and mobile application, including when you pre-register, submit service requests, or interact with the platform as a customer or service provider.
We process personal data in accordance with applicable data protection laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and its implementing regulations (Cabinet Resolution No. 33 of 2024) (together, the “UAE PDPL”).
Khalas Technology FZ-LLC, a company incorporated in the United Arab Emirates (RAKEZ Registration No. 0000004081065), acts as the data controller responsible for personal data processed through the Khalas.ae platform. Our registered address is Compass Building, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates.
For all privacy-related enquiries or requests, please contact us at: [email protected]
Depending on how you use the platform, we may collect the following categories of personal data:
Where payment functionality is enabled, transaction records and payment confirmation data. Full payment card details are processed directly by our payment service provider and are not stored by Khalas.ae.
We process personal data for the following purposes:
We process personal data on one or more of the following legal grounds under the UAE PDPL:
The processing of user reports and content moderation activity is carried out on the basis of our legitimate interest in maintaining a safe and lawful platform environment.
We do not sell or rent your personal data to third parties. We may share personal data in the following circumstances:
When a customer submits a service request, we share relevant personal data (including name, contact details, service area, and request details) with service providers for the sole purpose of enabling them to submit an offer and, if engaged, to perform the requested services. Each service provider is contractually required to treat this data as a data processor and to use it only for permitted purposes. However, Khalas.ae cannot guarantee compliance by service providers and you should take reasonable care when sharing sensitive personal information through the platform.
We use reputable third-party providers for cloud hosting, data storage, analytics, and related infrastructure services. These providers process personal data on our behalf under data processing agreements that require them to implement appropriate technical and organisational safeguards and to process data only on our instructions.
Where payment functionality is enabled, payment data is processed by our third-party payment service provider acting as an independent data controller subject to their own privacy policy and applicable financial regulations.
We may disclose personal data to competent courts, regulators, law enforcement authorities, tax authorities, or other governmental bodies where required by applicable law, court order, or lawful request, or where reasonably necessary to protect our legal rights.
Khalas.ae is incorporated in the UAE; however, our data infrastructure operates on cloud servers that may be located outside the UAE, including in the European Economic Area, the United States, and other regions used by our cloud service providers.
Primary safeguard — contractual protections: Our primary mechanism for cross-border data transfers is the contractual safeguards in place with our cloud service provider, which is established in the European Union and operates under data processing agreements that incorporate standard contractual clauses and equivalent protections consistent with, and in our assessment meeting or exceeding, the requirements of the UAE PDPL. These contractual protections apply as a standing safeguard to all transfers made through our cloud infrastructure.
Additional safeguard — your consent: As an additional and independent layer of protection, at the point of registration on the Khalas.ae app we ask you to provide explicit consent to the cross-border transfer of your personal data by means of a separate, opt-in consent checkbox with the following or materially equivalent wording:
“I consent to my personal data being transferred to and processed on servers located outside the United Arab Emirates, including in the European Economic Area and other countries, for the purposes described in the Privacy Policy. I understand that data protection standards in those countries may differ from those in the UAE.”
Future adequacy decisions: Where the UAE data authority issues adequacy decisions in respect of specific destination countries, we will rely on those decisions as an additional transfer mechanism for the relevant jurisdictions.
This consent is separate from your acceptance of our Terms of Service. You may withdraw this consent at any time by contacting us at [email protected]; however, please note that withdrawal may affect our ability to provide certain platform services that depend on cross-border infrastructure. Withdrawal of consent does not affect the lawfulness of any transfer made prior to withdrawal, which will continue to be covered by our contractual safeguards.
You may request a copy of the safeguards applicable to any specific transfer by contacting us at [email protected].
Our website and mobile application use cookies and similar tracking technologies. We use the following categories:
You can manage or withdraw your analytics and marketing consent at any time through Settings → Privacy in the app. Withdrawal takes effect immediately for future data collection. Note that disabling certain cookies may affect platform functionality.
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following retention periods apply:
You may request deletion of your account through the account settings on our mobile application. Upon receiving a valid deletion request, we will:
Anonymisation is performed by permanently removing or irreversibly transforming all direct and indirect identifiers such that re-identification is not reasonably possible by any means. Data that has been anonymised in accordance with this standard falls outside the scope of the UAE PDPL and may be retained indefinitely for aggregate analytics and platform improvement purposes.
Please note that certain data will be retained beyond your deletion request where required by law (as described above) or where a legal hold applies (see Section 8.2 below). We will inform you of any such retention at the point of your deletion request.
Where there is an active or reasonably anticipated legal dispute, claim, complaint, or regulatory investigation involving your account, we may suspend the deletion or anonymisation of relevant data and place a legal hold on that account. For these purposes, a dispute or claim will be considered reasonably anticipated where we have received a formal complaint, a pre-action communication, a legal notice, or where circumstances give rise to a credible and documented expectation of legal proceedings.
A legal hold means that only the data relevant to the specific dispute (such as chat history, offer records, transaction logs, and support communications) will be retained. Data subject to a legal hold will be retained for the duration of the dispute and deleted or anonymised promptly once the dispute is resolved, the relevant limitation period has lapsed, or proceedings have concluded, whichever is later. We maintain internal records of all legal holds, including the basis, scope, and expected duration.
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or misuse. These include encrypted data transmission, access controls, and regular security assessments. Access to personal data is limited to authorised personnel who require it for legitimate business purposes.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the competent regulatory authority without undue delay and in accordance with our obligations under the UAE PDPL.
Under the UAE PDPL, you have the following rights in relation to your personal data:
To exercise any of the above rights, please contact us at [email protected]. We will respond within 30 days of receiving your request. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 30 days and will notify you accordingly.
The Khalas.ae platform is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If we become aware that personal data has been collected from a person under 18 without appropriate parental consent, we will take steps to delete that data promptly. If you believe we may have collected data from a minor, please contact us at [email protected].
We will only send promotional or marketing communications (such as news, updates, or offers) if you have explicitly opted in. You may withdraw your consent at any time by contacting us at [email protected] or using any unsubscribe mechanism provided in our communications. Withdrawal of marketing consent does not affect the lawfulness of communications sent prior to withdrawal.
If you have any questions about this Privacy Policy or how your personal data is handled, please contact us at:
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or platform features. The updated version will be published on our website and mobile application with a revised “Last updated” date. Where changes are material, we will notify you by email or in-app notification prior to the changes taking effect. Continued use of the platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.