Welcome to ihdaa. We are committed to protecting your personal data and ensuring transparency in how we collect, use, and share your information.

This Privacy Policy applies to all users of:

• • ihdaa Website
  • ihdaa Customer App
  • ihdaa Vendor & Charity App

By using our services, you agree to the collection and use of your personal information as outlined in this policy.

Information We Collect

We collect personal and non-personal data to provide and enhance our services.

• • Information You Provide Directly
    • Account Information: Name, email, phone number, and password when you create an account.
    • Donation & Gift Transactions: Details of gifts or donations, payment methods, and selected charities/vendors.
    • Vendor & Charity Information: Business registration, bank details, and verification documents for processing payments.
    • Customer Support: Any information provided when you contact us for assistance.

• • Information Collected Automatically
    • Device & Usage Data: IP address, device type, operating system, and app activity logs.
    • Cookies & Tracking: We use cookies to improve functionality, track website visits, and personalize content.
    • Location Data: If enabled, we collect approximate location to display relevant vendors and charities.

• • Information from Third Parties
    • Payment Providers: Confirmation of transactions from third-party payment processors.
    • Social Media & Logins: Data from Google, Apple, or social login options if used to sign in.

Legal Basis for Processing Personal Data

We process your personal data based on the following legal grounds:

• • User Consent: When you create an account, make a donation, or enable location services.
  • Contractual Necessity: To fulfill transactions and deliver services.
  • Legal Compliance: To meet regulatory requirements and prevent fraud.
  • Legitimate Interests: To enhance platform security, improve services, and personalize user experience.

How We Use Your Information

We use your data to:

• • Process donations and purchases securely.
  • Allow charities and vendors to manage transactions efficiently.
  • Improve platform functionality and prevent fraudulent activity.
  • Send updates, promotional messages (with consent), and support communications.
  • Ensure compliance with legal and regulatory requirements.

We do not sell your personal data to third parties.

How We Share Your Information

We only share your data in specific situations:

• • With Vendors & Charities: To process donations and fulfill gifts.
  • Payment Providers: To complete financial transactions securely.
  • With Service Providers: For hosting, analytics, and customer support.
  • With Law Enforcement: If required for fraud prevention, legal compliance, or security investigations.

If ihdaa undergoes a merger, acquisition, or asset sale, your data may be transferred to a new entity with the same privacy protections.

Data Retention & Security Measures

We retain your data only as long as necessary for legal, operational, and security reasons.

• • Encryption: Sensitive data (e.g., passwords, payments) is encrypted for security.
  • Access Controls: Only authorized personnel can access your personal data.
  • Regular Security Audits: We conduct security reviews to ensure compliance with privacy standards.

Although we take strong security measures, no system is 100% secure. Users should also take precautions, such as using strong passwords and not sharing login details.

Your Rights & Choices

Under Bahrain’s PDPL and GCC Data Protection Laws, You Have the Right to:

• • Access & Correction: Request a copy of your personal data and correct inaccurate information.
  • Withdraw Consent: Revoke permissions for data processing at any time.
  • Object to Processing: Restrict how we use your data under certain conditions.
  • Data Deletion: Request deletion of your personal information (subject to legal retention requirements).
  • Data Portability: Request transfer of your data to another service provider.

To exercise any of these rights, contact us at info@ihdaa.com.

Cookies & Tracking Technologies

We use cookies to:

• • Improve website functionality and user experience.
  • Analyze visitor behavior and enhance security.
  • Personalize recommendations and marketing efforts.

Users can manage cookie preferences through browser settings.

Cross-Border Data Transfers

Your data may be processed in other countries outside Bahrain and the GCC. We ensure adequate safeguards, such as:

• • Standard Contractual Clauses (SCCs) for international data transfers.
  • Encryption & Compliance Measures for cross-border security.

Third-Party Links & External Services

Our apps and website may contain links to external vendors, charities, or payment gateways.

We are not responsible for their privacy practices, so we encourage you to review their policies before sharing personal information.

Data Breach Notification Policy

In the event of a security breach that affects your personal data, we will:

• • Notify the relevant data protection authority as required by law.
  • Inform affected users via email or app notifications.
  • Take immediate action to mitigate risks and strengthen security.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on our website and app, and we may notify users via email or push notifications.

Your continued use of ihdaa after updates are published means you accept the revised policy.