KHDMA Privacy Policy

1. Our Commitment to Your Privacy

Bdaya Development ("Company," "We," "Us," or "Our") is deeply committed to protecting the privacy and security of all personal and business data processed through the KHDMA platform. This Privacy Policy ("Policy") details our practices concerning the collection, use, processing, storage, and disclosure of information, ensuring full compliance with UAE Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data (PDPL) and other relevant UAE digital regulations. We understand the critical importance of data privacy, especially within an integrated ERP ecosystem, and strive to maintain the highest standards of confidentiality and integrity.

2. Information We Collect and Its Purpose

To deliver a high-performance ERP experience and facilitate seamless service matching, KHDMA collects various categories of data. The type of information collected depends on your interaction with the Platform (as a Service Provider or a Resident).

3. How We Use Your Information

KHDMA processes your data for the following specific and legitimate purposes, always in accordance with your consent and applicable laws:

• Core Service Delivery: To operate, maintain, and provide the full functionality of the KHDMA Platform, including ERP modules for Service Providers and service discovery for Residents.
• ERP Management & Optimization: To enable Service Providers to efficiently manage their billing, HR, queues, and other operational aspects through the integrated ERP system.
• Service Matching & Facilitation: To accurately match Residents with Service Providers based on their service requests, location, availability, and preferred language.
• Payment Processing & Billing: To process subscription fees, generate invoices, and facilitate secure financial transactions between Residents and Service Providers.
• Personalization & User Experience: To customize your experience on the Platform, provide relevant content, and improve the overall usability and efficiency of the KHDMA ecosystem.
• Security, Fraud Prevention & Compliance: To detect, prevent, and address technical issues, fraud, and other illegal activities. This includes verifying user identities and complying with legal obligations, such as anti-money laundering (AML) and Know Your Customer (KYC) regulations.
• Communication & Support: To communicate with you regarding your account, service updates, security alerts, and to provide customer support.
• Analytics & Product Improvement: To perform research and analysis on how the Platform is used, identify trends, and develop new features and improvements to our Services.

4. Data Security and Integrity

KHDMA employs a multi-layered, industry-leading security framework to protect your data from unauthorized access, alteration, disclosure, or destruction. Our commitment to data security is paramount, especially given the sensitive nature of ERP and personal data.

• Encryption: All data, both at rest (stored on servers) and in transit (during transmission), is secured using robust AES-256 encryption protocols, ensuring confidentiality and integrity.
• Access Controls: Strict internal access controls and authentication mechanisms are in place, ensuring that only authorized personnel with legitimate business needs can access sensitive data. Access is regularly reviewed and audited.
• Secure Infrastructure: We host our data on world-class, highly secure cloud infrastructure providers with multi-region redundancy, ensuring high availability and protection against physical and cyber threats.
• Regular Audits & Monitoring: Our systems are continuously monitored for vulnerabilities and potential security breaches. Regular security audits and penetration testing are conducted to identify and mitigate risks.
• Data Integrity: We implement measures to ensure the accuracy and completeness of the data processed, maintaining the integrity of your business and personal records within the ERP system.
• No Absolute Guarantee: While KHDMA implements stringent security measures, you acknowledge that no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, KHDMA cannot guarantee the absolute security of your data against all threats, including sophisticated cyber-attacks or unforeseen vulnerabilities. You use the Platform at your own risk regarding data security.

5. Data Sharing and Disclosure

KHDMA is committed to maintaining the confidentiality of your data. We do not sell, trade, or rent your personal or business data to third parties for their marketing purposes. We may share your information only in the following limited circumstances:

• With Your Consent: We may share your data when you provide explicit consent for a specific purpose.
• Service Partners: We engage trusted third-party service providers (e.g., payment gateways, cloud hosting providers, analytics services) to perform functions on our behalf. These partners are contractually bound to protect your data and use it only for the purposes for which it was disclosed.
• Between Service Providers & Residents: For the purpose of facilitating service requests, Service Providers will receive necessary Resident data, and Residents will receive relevant Service Provider information (e.g., contact details, service status).
• Legal Requirements & Law Enforcement: We may disclose your information if required by UAE law, court order, or in response to valid requests by public authorities (e.g., government agencies, law enforcement) to comply with legal obligations or protect our rights.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred as part of that transaction, provided the acquiring entity agrees to adhere to this Privacy Policy.

6. Your Data Protection Rights

In accordance with UAE Federal Decree-Law No. 45 of 2021 (PDPL), you have significant rights regarding your personal data. KHDMA is committed to facilitating the exercise of these rights:

• Right to Access: You have the right to request a copy of the personal data we hold about you and information about how we process it.
• Right to Rectification: You can request the correction of inaccurate or incomplete personal data. For Service Providers, this extends to business data within the ERP system.
• Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data under certain conditions, such as when the data is no longer necessary for the purposes for which it was collected.
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your data under certain circumstances.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 9.

7. Force Majeure

KHDMA shall not be liable for any failure or delay in performing its obligations under this Policy where such failure or delay is caused by an event beyond its reasonable control, including but not limited to acts of God, war, terrorism, riots, embargoes, acts of civil or military authorities, fire, floods, accidents, network infrastructure failures, cyber-attacks, strikes, or shortages of transportation facilities, fuel, energy, labor, or materials. In such an event, KHDMA will take reasonable steps to mitigate the impact but will not be held responsible for any resulting data loss or service interruption.

8. Changes to Privacy Policy

We reserve the right, at our sole discretion, to modify or replace this Privacy Policy at any time. If a revision is material, we will provide at least 30 days' notice prior to any new terms taking effect. What constitutes a material change will be determined at our sole discretion. By continuing to access or use our Platform after those revisions become effective, you agree to be bound by the revised Policy. If you do not agree to the new Policy, please stop using the Platform.

9. Contact Us and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us at: