Privacy

Last updated 23 April 2026

Legal review required. This document is a working draft and should be reviewed by counsel before being relied upon for any contractual purpose. Email legal@tawridy.com with questions.

1. Who we are

Tawridy is operated by Tawridy FZ-LLC, a free-zone company registered in Dubai, United Arab Emirates ("Tawridy", "we", "us"). Tawridy is the data controller for personal data collected through this marketing site and, under your organization's subscription, acts as a data processor for personal data you or your users upload to the Tawridy platform.

2. What we collect

2.1 Information you give us

  • Account data: name, work email, organization name, country.
  • Billing data: tax ID, billing address, payment method (processed by our PCI-compliant payment processor — card details are never stored on our servers).
  • Support correspondence: messages you send to hello@tawridy.com, support@tawridy.com, or through in-app channels.

2.2 Information your organization uploads

Product data (RFQs, quotes, purchase orders, invoices, supplier and customer records, uploaded documents) belongs to your organization. Tawridy processes it on your instructions under the subscription agreement.

2.3 Information we collect automatically

  • Log data: IP address, user agent, timestamps, pages requested — used to operate, secure, and debug the service.
  • Cookies: strictly-necessary cookies for authentication and session management. A single analytics cookie may be set if you enable analytics in your region.

3. Why we process your data

  • Provide the service — authenticate you, render your data, send product emails.
  • Improve the product — aggregated, de-identified metrics on how the platform is used.
  • Security — detect and prevent abuse, fraud, and security incidents.
  • Legal compliance — tax, audit, anti-fraud, and regulatory requirements in the jurisdictions in which we operate.
  • Communication — transactional emails (e.g., password resets, billing). Marketing emails only if you opt in.

4. Legal basis

We process personal data under (a) performance of our subscription contract with your organization, (b) our legitimate interests in operating and improving the service, (c) your consent where required (for example, optional analytics and marketing communications), and (d) compliance with legal obligations applicable to us.

5. Who we share data with

We share personal data only with the categories of recipients listed below, under written data-processing terms:

  • Cloud infrastructure providers — hosting, storage, and compute in the UAE region by default.
  • Transactional email providers — to deliver notifications and account emails.
  • Payment processor — to collect subscription payments.
  • Customer communication platforms — WhatsApp Business API providers and email inbox providers, when your organization connects them.
  • Regulators and law enforcement — when required by law and after reasonable verification.

We do not sell personal data. A current list of sub-processors is available on request from privacy@tawridy.com.

6. International transfers

Your data is stored in the United Arab Emirates by default. Some of our sub-processors (for example, transactional email providers) operate globally and may process limited data outside the UAE / GCC region. Where this happens we rely on standard contractual clauses or equivalent safeguards.

7. How long we keep data

  • Account data — for the life of your subscription plus 30 days after termination, unless a shorter period is required by law.
  • Product data — under your organization's control. You may delete records at any time; deleted data is removed from active systems within 30 days and from backups within 90 days.
  • Financial records (invoices, receipts) — retained for seven (7) years to meet GCC accounting and tax obligations.
  • Audit log — retained for the life of the subscription, in line with regulatory audit requirements.

8. Your rights

Subject to applicable law — including UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law), the KSA Personal Data Protection Law (2023), and equivalent laws in other GCC states — you have the right to:

  • access the personal data we hold about you;
  • correct inaccurate or incomplete data;
  • request deletion of your personal data, subject to our retention obligations;
  • restrict or object to specific processing activities;
  • receive your personal data in a portable format;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with your local data protection authority.

Email privacy@tawridy.com to exercise any of these rights. We respond within 30 days.

9. Cookies

Tawridy uses strictly-necessary cookies to keep you logged in and to remember your preferences. Optional cookies (analytics, feature flags) are off by default and only enabled with your consent. You can clear cookies in your browser settings at any time.

10. Children

Tawridy is a business-to-business service and is not directed at individuals under 16. We do not knowingly collect personal data from children.

11. Security

We take technical and organizational measures designed to protect personal data, including encryption in transit, tenant-level query scoping, RBAC, and an audit log. No system is perfectly secure; we work with customers in good faith to address any incidents promptly.

12. Contact

Questions about this policy? Email privacy@tawridy.com. For postal correspondence, write to Tawridy FZ-LLC, Dubai, United Arab Emirates.

13. Changes to this policy

We will post material changes to this policy on this page at least 30 days before they take effect, and notify account holders by email.

14. Governing law

This policy is governed by the federal laws of the United Arab Emirates and the laws of the Emirate of Dubai. Disputes that cannot be resolved in good faith are subject to the exclusive jurisdiction of the courts of Dubai.