1. Definitions
Personal Data: Any information that may identify an individual directly or indirectly,
such as name, address, contact numbers, images, or any other personally identifiable
information.
Processing: Any operation performed on personal data through manual or automated
means, including collection, storage, organization, modification, updating, linking, use,
or deletion.
Data Subject: The individual to whom the personal data relates.
Controller: The entity that determines the purposes and means of processing personal
data, whether a natural person, governmental entity, or private organization.
Third Party: Any entity with whom data is shared in accordance with legal and
regulatory requirements.
2. Data We Collect
Data Provided Directly by Customers
When creating an account on our platform or interacting with our agents, partners, or
representatives, we may request certain information, such as:
• Registration Data: Including name, email address, phone number, and company
information; used to create accounts and deliver services.
• Technical Information: Such as IP address, browser type, and cookies, which
contribute to security enhancement and improving user experience.
Use of Customer Data for Marketing or Informational Communication
By creating an account on "Daftra" or registering your account, or in the event that you contact "Daftra" through any of its approved communication channels— whether by phone, through the official website via the “Contact Us” form, through documented written conversations, or through any authorized partners of "Daftra" or relevant governmental entities—you grant "Daftra" the right to use your registered data, including your personal or business name, phone number, and any other information you have provided, for the purpose of sending promotional, informational, or educational materials related to Daftra’s services, without the need for any additional prior consent from you.
The customer has the right to refuse receiving any promotional or marketing materials from the company by selecting the ‘Unsubscribe’ option.”
Call Recording and Verification of Contact Information for Data Security and Confidentiality
Phone calls made to or from the company may be recorded for the purposes of quality assurance, training, and service improvement. By using our services or continuing to communicate with us, you acknowledge and agree to the possibility of call recording in accordance with our applicable policies and procedures, as well as providing the required information for verification purposes to ensure account security and confirm that the service is being provided to the rightful account owner. The company is committed to maintaining the confidentiality and security of these recordings and will not use them for any purposes other than those stated above, in compliance with applicable laws and regulations.
During communication with representatives from support, sales, or any other department at Daftra, you may be asked to provide your Account ID and Support PIN for the following reasons:
1. To verify the identity of the caller, in order to maintain the confidentiality of Daftra customers’ data and ensure account security.
2. To enable us to provide assistance and the required service with maximum efficiency.
Data From Third Parties
We may collect business-related contact information from publicly available directories,
business listings, or through our authorized commercial partners or agents who have
the legal basis to share such data.
We commit to ensuring that such information relates to business-specific contact
details, not personal data. If personal data is identified, it is immediately processed in
accordance with this policy.
We notify data subjects of the source of the data and the purpose of collection within the
legally required timeframe.
Data Used for Marketing Activities
We target commercial entities and organizations through digital advertising channels
such as search engines and social media platforms.
We do not contact personal numbers or private accounts unless explicit consent has
been obtained.
We provide a clear mechanism for opting out of receiving marketing communications at
any time.
3. How We Use Data
We process data for the following purposes:
• Managing user accounts and providing our services.
• Communicating with customers about updates or service-related information.
• Conducting analytics and improving service quality and performance.
• Direct marketing to businesses and organizations, with an opt-out option always
available
4. Data Retention Period
• Account Data: Retained throughout the subscription period. After termination, a
backup is retained for 3 to 6 months. Fees may apply for retrieval before final deletion.
• Contact Data: Retained during the subscription period or as long as there is a
legitimate interest unless the data subject requests deletion
5. Processing of Personal Data
We do not intentionally collect unnecessary personal data.
If unintended personal data is collected, we request explicit consent for continued use.
If consent is denied, the data is immediately deleted.
6. Data Subject Rights
Data subjects have the following rights:
• Right to be informed: Understanding the legal basis and purpose of data collection.
• Right of access: Requesting a copy of personal data (contact data).
• Right to rectify and update inaccurate or incomplete data.
• Right to deletion or discontinuation of use when the purpose no longer applies.
• Right to withdraw consent at any time.
• Right to object to marketing communications.
• Right to file a complaint with the competent regulatory authority.
We commit to responding to any request within 30 days, with an extension possible for
complex or multiple requests.
7. Security and Data Protection
We apply organizational and technical measures to protect personal data from
unauthorized access, use, alteration, or unlawful deletion.
We commit to notifying regulators and affected individuals of any breach in accordance
with legal requirements.
8. Mandatory Nature of Collected Data
We collect only the minimum necessary data required to provide and operate our
services, including:
– Name
– Job role
– Company size
– Email address
– Phone number
– Address
All data collection follows the PDPL principle of data minimization.