Al Masraf has developed this Privacy Notice to explain how we may collect, retain, process, share and transfer your personal data when you visit our websites, use our services, or visit us in person. This Privacy Statement is designed to help you obtain information about our privacy practices and to help you understand your privacy choices when you use our websites, products, and services.
Our privacy commitments are fundamental to the way we run our business. Unless otherwise noted or governed by law, these commitments apply to everyone who has a relationship with us and those who have an intention to establish a relationship with us that includes customers, partners, and website visitors. Al Masraf is committed to providing you with the best overall experience in all of our products and services. We strive to strike the right balance between using your data to ensure the quality of those experiences and protecting your privacy. We have assessed all aspects of our business and optimized the amount of data we collect to find the right balance between data sharing and service.
This Notice applies to all information we collect about you, directly and/or automatically though our website, our mobile application(s), and through third parties.
Personal Data, also referred to as PII or personally identifiable information, is Information that identifies or reasonably can be used to identify you. Examples include your: (i) Name, (ii) Mailing address, (iii) Email address, (iv) Phone number, (v) Date of birth or age, (vi) Credit/debit card number, (vii) Emirates ID details, (viii) Mobile device information, (ix) How you use our sites and mobile applications, (x) Geo-location and (xi) Social media information. Anonymous Information is information that does not identify you and cannot reasonably be used to identify you specifically. Finally, Aggregate Information is information taken from many people’s data and combined into anonymous groups or categories.
Subject to limitations explained in this Notice, Al Masraf may collect and use the following personal data:
We may process your Personal Data as an individual client or a representative of a corporate client for the following purposes:
If we intend to use your Personal Data for a purpose that is different from the purposes listed in this Notice or if we intend to disclose it to a third party acting as a controller not previously identified, we will offer you the opportunity to opt-out of such uses and/or disclosures where it involves non-sensitive information or opt-in where sensitive information is involved.
We may share the information we collect with our business partners and other third parties for (1) Non-Marketing Purposes, (2) joint marketing purposes, and (3) our business partners’ or our own marketing purposes. Sensitive Information will only be shared for Non-Marketing Purposes. When we provide Sensitive Information or other Personal Data to our business partners and other third parties, we require them to exercise reasonable care to protect such information and restrict the use of such information to the purposes for which it was provided to them. "Non-Marketing Purposes" includes, but is not limited to, (1) validating your identity; (2) conducting statistical or demographic analysis; (3) processing, fulfilling, and tracking purchases or other transactions; (4) complying with legal and regulatory requirements; (5) customizing your experience on our websites and in person; (6) protecting and defending against legal actions or claims; (8) preventing fraud; (9) collecting debt; (10) satisfying contractual obligations; (11) evaluating employment applications; and (12) cooperating with law enforcement or other government agencies for purposes of national security, public safety, or matters of public importance when we believe that disclosure of information is necessary or appropriate to protect the public interest.
We retain your personal data for as long as we need to fulfill our business purposes that are in line with legal, regulatory or statutory obligations. Factors that influence the length of time that we retain your data include: the information needed to provide products, services, and experiences to you; the data needed to manage your account, ensure secure payment, and contact you; and, finally, the data needed to serve any advertising based on personal interests and preferences.
As per the UAE Consumer Protection Standards, all Personal Data, documents, records and files will be securely retained for a minimum of 5 years. A copy of your expressed consent will be retained for 5 years after the relationship has terminated.
Al Masraf shall ensure that necessary outsourcing controls for data security are in place to protect against any data breaches. The level of security controls shall be determined based on the materiality of the process or service to be outsourced.
Al Masraf have taken reasonable measures to protect security and confidentiality of your personal data and will ensure that transfers of personal data are in accordance with applicable law and is carefully managed to protect your privacy rights and interests. Furthermore, transfers will be limited to countries which are recognized as providing an adequate level of legal protection or where we can be satisfied that alternative arrangement are in place to protect your privacy rights.
In the event of a conflict between this Notice and any applicable law/regulations, applicable law/regulations will prevail. Al Masraf shall determine the existence of a conflict.
You will not be subject to any decision, Notice, or assessment that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.
Al Masraf will comply with any request by legal and regulatory authorities of the countries in which Al Masraf operates. In such a case, Al Masraf will disclose personal data in response to lawful requests by public authorities, including meeting national security or law enforcement requirements, as well as data breach notification requirements.
We use the information you send us to provide you quality customer service, to evaluate the effectiveness of our website, to alert consumers of new services and important news, and to process transactions initiated by you and communicate with you regarding their status.
If you send us sensitive personal data, we will only use that information for the purposes that you sent it. If there is an unanticipated use for the collected information not previously disclosed in this Notice, we will post the Notice changes on this website to keep you notified. You will then have the option to opt out of these new uses.
Please check this website periodically for updates.
You have a right to lodge a complaint with your local supervisory authority if you have concerns about how we are processing your personal data. We ask that you please attempt to resolve any issues with us first, although you have a right to contact your supervisory authority at any time. If you have any questions, concerns or complaints regarding our compliance with this notice and the data protection laws, or if you wish to exercise your rights, we encourage you to first contact us at: firstname.lastname@example.org. You may also contact us through our channels mentioned at: https://almasraf.ae/contact-us
Prior to collecting, using, or sharing Personal Data, we define and document the specific, legitimate business purposes for which it is needed.
We determine and document how long Personal Data is needed for those defined business purposes and applicable legal requirements.
We do not collect, use or share more Personal Data than is needed or retain it in identifiable form for longer than is needed for those defined business purposes and applicable legal requirements.
While your browser settings may allow you to automatically transmit a “do not track” signal to websites and online services you visit, like many companies, we may not alter our practices when we receive these signals.
Pixels and similar technologies are tiny or transparent images that allow us to establish a communication between you and a web server, which collects certain information about your computer or device. This information may include your IP address, browser type, operating system type, and identifiers that have been stored in cookies. We may use beacons on our sites to count the number of visitors to our sites and to recognize users by accessing unique identifiers stored in cookies that we have set on their computers or devices. Being able to access these identifiers enables us to provide a personalized experience on our sites. We may also include beacons in advertisements or in email messages to determine how these are acted on.
Al Masraf ensures compliance with this Notice through a comprehensive audit and enforcement plan. This audit and enforcement plan ensures that the policies set forth in here are consistently and accurately implemented. Additionally, we undertake periodic review of this Notice to determine whether provisions should be updated.
You may update, correct or delete information about you at any time by logging into your online account. If you wish to delete your account, you may do so by visiting to the nearest branch or getting in touch one of channels mentioned at: https://almasraf.ae/contact-us, but note that we may retain certain information as required by law or for legitimate business purposes. We may also retain cached or archived copies of information about you for a certain period of time.
We do not knowingly collect personal data from minors without the consent of their legal parent or guardian. Legal parent or guardian would be required for opening:
You can contact us and ask to know what information we have about you. You can also ask us to update incorrect information, delete it, object to our use of it, or get a copy of it. Consent approval shall be taken from you before processing any personal data.
We will only collect, use and share your personal data where we are satisfied that we have an appropriate legal right to do so. We may have the legal right to do so because: you have consented to us using the personal data; our use of your personal data is in our legitimate interest as a commercial organization; our use of your personal data is necessary to perform a contract or take steps to enter into a contract with you; and/or our use of your personal data is necessary to comply with a relevant legal or regulatory obligation that we have for example fulfilment of a court order. In these cases, we will look after your information at all times in a way that is proportionate and respects your privacy rights.
You have a right to request that we rectify inaccurate personal data. We may seek to verify the accuracy of the personal data before rectifying it. We will then determine whether, based on our policies, we will rectify the information.
Under Consumer Protection Regulation of UAE, you have the right to withdraw expressed consent for the following at any time: