Privacy Policy

Al Wafaa Group (trading name of Al Wafaa Information Technology LLC) is a UAE-based IT and digital transformation company headquartered at Mezzanine Floor, Attrium Building, near Al Qiyadah Metro Station, Dubai, United Arab Emirates. We provide website design, e-commerce, digital marketing, cloud infrastructure, custom software, website chatbots, and AI automation services to businesses across the UAE and GCC region.

Contact: muneer@alwafaagroup.com | +971 50 568 4147

We collect personal data only when you interact with us directly:

Contact and inquiry forms — name, email address, phone number, company name, and any details you include in your message.

Free AI Audit requests — the same contact details above, plus information about your business relevant to the audit.

Website analytics — we use Vercel Analytics to collect anonymised, aggregated data on page views and site performance. No cookies are set for analytics. No individual-level tracking is performed.

Chat conversations — if you use our AI chat widget (Wafaa AI), messages you send are processed to generate a response and may be stored in encrypted form for a limited period to improve service quality.

We do not collect payment card information directly. Payments, if any, are processed by PCI-DSS-compliant third-party providers.

We use the information you provide solely to:

• Respond to your enquiry or service request
• Deliver the service you have engaged us for
• Send service-related communications (not marketing, unless you have opted in)
• Improve our website and service quality based on aggregated, anonymised analytics

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

Under UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) and, where applicable, the EU General Data Protection Regulation (GDPR), we process your personal data on the following bases:

• Contractual necessity — to fulfil a service agreement or respond to a pre-contractual request
• Legitimate interests — to improve our services and respond to business enquiries
• Consent — where you have explicitly opted in (e.g., newsletter subscription)

We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected:

• Enquiry and contact data: up to 3 years from the date of last contact
• Active client project data: for the duration of the project plus 5 years for legal and accounting compliance
• Chat conversation logs: up to 90 days, then automatically deleted
• Analytics data: aggregated and anonymised; no retention limit applies

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data storage (Supabase with row-level security), HTTPS-enforced connections, and access controls limiting who within our team can access personal data.

Our website does not use tracking or advertising cookies. We use Vercel Analytics, which is cookieless and privacy-preserving by design. If you use our AI chat widget, a session identifier may be stored in your browser's local storage to maintain conversation continuity within a single session. This is not a tracking cookie and is not shared with third parties.

Our website uses the following third-party services, each with their own privacy policies:

• Vercel (hosting and analytics): vercel.com/legal/privacy-policy
• Anthropic (AI chat responses via Claude API): anthropic.com/legal/privacy
• Supabase (database for chat sessions): supabase.com/privacy
• Google Fonts / Next.js Font Optimisation: fonts are self-hosted after build; no Google Font CDN requests are made from your browser

We do not embed third-party advertising, social media tracking pixels, or retargeting scripts.

Under UAE PDPL and GDPR (where applicable), you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your data where there is no overriding legal obligation to retain it
• Restriction — ask us to limit processing in certain circumstances
• Objection — object to processing based on legitimate interests
• Portability — receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at muneer@alwafaagroup.com. We will respond within 30 days.

Our services are directed at businesses, not individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

We may update this policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. Continued use of our website after changes are posted constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or complaints:

Al Wafaa Group Mezzanine Floor, Attrium Building, Near Al Qiyadah Metro Station, Dubai, UAE Email: muneer@alwafaagroup.com Phone: +971 50 568 4147