Privacy Policy

1. Introduction

Sarookhi ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, process, and protect your information in compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable regulations in the United Arab Emirates.

2. Legal Basis for Processing

We process your personal data based on the following legal grounds as defined in Article 4 of the PDPL:

• Consent: When you have explicitly given your consent for processing your data for specific purposes.
• Contractual Performance: To fulfill our obligations under service agreements and contracts with you.
• Legal Obligations: Compliance with applicable laws and regulations within the UAE.
• Legitimate Interests: For business improvements, security, and fraud prevention, provided it does not override your fundamental rights.

3. Information We Collect

We collect various types of information to provide and improve our ERP services:

• Personal Identification Data: Name, Emirates ID (where required), passport copies, email address, phone number, and job title.
• Company Data: Trade license details, tax registration numbers, financial records, and employee data entered into the system.
• Technical Data: IP addresses, browser types, device information, and audit logs for security and compliance.

4. How We Use Your Information

Your data is processed for specific, clear, and lawful purposes:

• To provide, operate, and maintain our ERP platform.
• To process payments and manage billing securely.
• To comply with regulatory requirements, including VAT and labor laws in the UAE.
• To enhance data security and prevent unauthorized access.
• To communicate important updates, support, and administrative notices.

5. Data Storage and Sovereignty

We implement strict measures to ensure your data is stored securely. Where applicable, we prioritize local data hosting within the UAE to comply with data residency regulations for specific sectors. All data transmission is encrypted using industry-standard protocols.

6. Your Rights Under UAE Law

In accordance with the PDPL, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data where it is no longer necessary for the purposes for which it was collected.
• Right to Restrict Processing: Request specific limitations on how your data is processed.
• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Withdraw Consent: Withdraw previously given consent for data processing at any time.

To exercise any of these rights, please contact our Data Protection Officer at the email provided below.

7. Data Security and Breach Notification

We employ advanced security protocols including encryption, access controls, and regular security audits. In the unlikely event of a data breach that prejudices the privacy, confidentiality, or security of your personal data, we will notify you and the UAE Data Office as required by Article 9 of the PDPL.

8. Usage of Cookies

We use cookies to improve user experience and analyze website traffic. You can manage your cookie preferences through your browser settings. Essential cookies are required for the platform's security and basic functionality.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in UAE laws or our operational practices. Significant changes will be communicated through our platform or via email.