1. Who We Are (Data Controller)

• Legal name: Raha Tech Group FZE
• Commercial name: RahaTech
• Trade License Number: 4426136.01
• Registered address: Business Center, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
• Website: https://rahatech.ae
• Email: info@rahatech.ae
• Data protection contact: info@rahatech.ae (we will appoint a Data Protection Officer if and when required by applicable law)

RahaTech is the parent technology company behind several digital platforms (for example RahaTap, RahaBay, RahaWay and others presented on this website). Each of those platforms is operated under its own website and has its own privacy policy, which applies when you use that platform. This policy covers only the RahaTech corporate website and our software development services.

2. Personal Data We Collect

2.1 Help Center / Contact Form

When you contact us through the Help Center, we collect:

• Full name, email address and phone number.
• The content of your message.

This information is delivered to our support mailbox so we can answer you.

2.2 Project Inquiry Form

When you request a project or a quote, we collect:

• Full name, email address, phone number and company name (optional).
• The selected service category and sub-category, your project description and project scope.
• Your IP address and the referring page (source) from which you submitted the inquiry, to protect the form against abuse and to understand how visitors find us.

2.3 Data Collected Automatically

• Server log data: IP address, browser type, operating system, requested pages, date and time of access. This is processed by our hosting infrastructure for security and stability purposes.
• Cookies: only the cookies that are necessary for the website to work (see section 9).

2.4 Clients and Business Partners

If you become a client, we additionally process contract, billing and communication data that is necessary to plan, deliver, invoice and support your project.

3. Purposes and Legal Basis

• Answering your requests (Help Center messages and project inquiries) — based on steps taken at your request before entering into a contract, and on our legitimate interest in responding to communications.
• Delivering our services (software, web and mobile development, CRM systems, consulting, ads management and technical support) — based on contractual necessity.
• Security and fraud prevention (log data, IP address, spam protection) — based on our legitimate interest in keeping the website and our systems safe.
• Legal obligations (accounting, tax and commercial record keeping) — based on legal obligation.
• Marketing communications — only with your explicit consent, which you can withdraw at any time.

We do not sell your personal data and we do not use it for automated decision-making or profiling that produces legal effects for you.

4. Sharing of Personal Data

We share personal data only where necessary, with:

• Service providers: hosting, server, email delivery and IT providers that process data on our behalf under written agreements and confidentiality obligations.
• Group platforms: if your inquiry concerns one of our own platforms (e.g. RahaTap or RahaBay), we may forward it internally to the team responsible for that platform.
• Authorities: courts, government authorities or law enforcement where we are legally required to do so.
• Business transfers: a successor entity in case of a merger, acquisition or asset sale, with prior notice where required by law.

5. International Data Transfers

Our servers and service providers may be located outside your country of residence. Where personal data is transferred outside the UAE (or, for EU visitors, outside the European Economic Area), we make sure that the receiving country provides an adequate level of protection or that appropriate safeguards are in place, such as standard contractual clauses.

6. Data Retention

• Help Center messages: kept for as long as needed to handle your request and for up to 24 months afterwards for follow-up questions.
• Project inquiries that do not lead to a contract: deleted no later than 24 months after the last contact.
• Client and contract data: kept for the duration of the business relationship.
• Invoices and transaction records: kept for at least 5 years as required by UAE VAT and commercial laws.
• Server logs: kept for a short period for security purposes and then deleted or anonymized.

You can ask us to delete your data at any time, subject to statutory retention obligations.

7. Your Rights

Depending on the law that applies to you, you have the right to:

• Access the personal data we hold about you and receive a copy.
• Have inaccurate or incomplete data corrected.
• Have your data deleted when it is no longer needed.
• Restrict or object to certain processing, including direct marketing.
• Receive your data in a structured, commonly used format (data portability).
• Withdraw your consent at any time, without affecting earlier lawful processing.
• Lodge a complaint with the UAE Data Office or, if you are in the EU, with your local data protection supervisory authority.

To exercise your rights, email us at info@rahatech.ae. We will respond within the time limits required by applicable law, and in any case within 30 days.

8. Data Security

We use appropriate technical and organizational measures to protect your data, including:

• SSL/TLS encryption for all data transmitted through the website.
• Access controls limiting data access to authorized personnel only.
• CSRF protection and spam-prevention mechanisms on our forms.
• Regular updates, backups and security reviews of our systems.
• Confidentiality obligations for staff and contractors.

In the event of a personal data breach that is likely to affect your rights, we will notify the competent authority and the affected persons as required by applicable law.

9. Cookies

Our website uses only cookies that are strictly necessary for it to function:

• Session cookie: keeps your session working while you browse.
• XSRF-TOKEN: protects forms against cross-site request forgery.
• iso_code: remembers the language you selected.

We currently do not use analytics, advertising or tracking cookies. If we introduce such tools in the future, we will update this policy and ask for your consent where required. You can delete or block cookies in your browser settings, but parts of the website may then not work correctly.

10. Third-Party Links

Our website contains links to our own platforms and to external websites (for example social media profiles). Once you leave this website, the privacy policy of the respective site applies. We are not responsible for the privacy practices of third-party websites.

11. Children's Privacy

Our website and services are directed at businesses and adults. We do not knowingly collect personal data from persons under 18 years of age. If we become aware of such data, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in law, in our services or in our technology. The current version is always available on this page, and the date at the top shows when it was last updated. Where changes are significant, we will inform you through a notice on the website.

13. Language Versions

This Privacy Policy is available in English, Arabic and German. In line with UAE Consumer Protection Law (Federal Law No. 15 of 2020), in case of any discrepancy between the language versions, the Arabic version shall prevail.

14. Governing Law and Contact

This Privacy Policy is governed by the laws of the United Arab Emirates, in particular Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, without prejudice to any mandatory rights you may have under the law of your country of residence.

• Email: info@rahatech.ae
• Address: Business Center, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
• UAE Data Office: u.ae/en/about-the-uae/digital-uae/data