Privacy Policy · DealRoom

This Privacy Policy explains how Deal Room Tech Computer Systems Designing - L.L.C ("we") collects, uses and protects personal data in connection with the DealRoom platform. It is designed to comply with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL").

1. Data Controller

The controller of your personal data is Deal Room Tech Computer Systems Designing - L.L.C, Dar Alsalam Office 661, Freej Al Qbeesat Street, Al Danah, Abu Dhabi, UAE. Privacy contact: privacy@dealroom.ae.

2. Personal Data We Collect

Account data: name, email, phone number, password (hashed).
Professional data: employer, position, broker licence number, licence issue/expiry, licence document.
Profile data: profile photo, avatar, banner image, status, stories, company logo.
Content data: listings, inquiries, chat messages, viewing requests, calendar entries.
Financial data: subscription status, payment records (payment card details are handled by our payment processor, not by us).
Technical data: device type, browser, IP address, log timestamps, error reports.

3. Purposes and Legal Basis

To operate the Service and authenticate you (contract).
To verify your broker licence (contract, legitimate interest, legal obligation).
To process subscription payments (contract).
To share your listings and inquiries with other verified Members (contract).
To detect fraud, enforce our Terms and protect the network (legitimate interest).
To comply with UAE laws and lawful requests from authorities (legal obligation).
To send service and transactional messages (contract). Marketing only with your consent.

4. Who Sees Your Data

Your professional profile and listings are visible to other verified Members.
Your licence details are private and visible only to you and platform administrators.
Service providers: hosting, database, authentication, email, analytics, payment processing.
Authorities, when required by UAE law.

5. International Transfers

Some of our service providers store data outside the UAE. Where transfers occur, they are protected by appropriate safeguards consistent with PDPL and the provider's contractual commitments.

6. Retention

Account and profile data: for the life of the account, then deleted within 90 days of closure.
Chat and listings: retained while relevant to cooperation, then deleted within 12 months of account closure.
Payment records: retained for the period required by UAE tax and commercial law.
Licence documents: retained while your account is active and for 12 months thereafter.
Sign-in and security logs (IP address, approximate location, device): retained for 12 months.

7. Your Rights

Under PDPL you may:

request access to your personal data;
request correction of inaccurate data;
request deletion of your data (subject to legal retention);
object to certain processing;
withdraw consent where processing is based on consent;
lodge a complaint with the UAE Data Office.

To exercise these rights email privacy@dealroom.ae. We respond within 30 days.

8. Security

We use administrative, technical and physical safeguards including access controls, encryption in transit, audit logging and least-privilege access. Each sign-in is recorded with its IP address, approximate location and device, and an account can be signed in on one device at a time. No system is perfectly secure; we cannot guarantee absolute protection.

9. Data Breach

In the event of a personal data breach likely to result in risk to individuals we will notify the UAE Data Office and affected Members without undue delay, in line with PDPL requirements.

10. Children

The Service is intended for licensed adult professionals. We do not knowingly collect data from children.

11. Changes

We may update this Policy. Material changes will be notified in the Service or by email.

12. Contact

Privacy questions: privacy@dealroom.ae.