Privacy Policy
At Hedayaa Al-Khair, we place great importance on protecting the privacy and confidentiality of our clients' personal information. We are committed to applying the highest security standards to ensure that all data we collect is treated with utmost confidentiality and used only for authorized purposes. In this context, we implement modern security technologies and procedures to maintain the security of your information and protect it from unauthorized access, modification, or disclosure. Please read this policy carefully to understand how we collect, use, protect, and share your information, as well as your rights regarding this data.
Section One: Introduction
Hedayaa Al-Khair, Company is committed to providing the highest levels of service and respecting the confidentiality of user data. This policy outlines how we collect, use, and protect your data, the conditions under which we may disclose it, and your rights regarding this data.
This privacy policy applies to the Hedayaa website www.hedayaa.com, And on the Hidayah app available on iOS and Android systems, along with all the services, requests, forms, communication methods, payment options, notifications, and support associated with it.
The privacy and confidentiality practices mentioned in this policy are part of the terms of use for Hedayaa.
Section Two: User Data
“User data” includes:
Personal data: the information provided by the user when registering, submitting applications, or communicating with us, such as name, phone number, email address, and contact information.
Order and project data: information related to the requests submitted by the user, such as project details, selected country, follow-up data, the name required on the board, and any other information provided by the user to execute or document the project.
Usage data: Information related to how the site or application is used, including device type, operating system, device language, browser type, application version, usage time, and the pages or features that are interacted with.
Interaction data: the data entered by the user through inquiries, contact forms, support requests, reports, surveys, or any other communication with Hedayaa.
Application Data: When using the Hedayaa app on iOS or Android, limited technical data may be collected, such as device type, operating system version, app version, crash logs, notification settings, and performance data necessary to improve the app's functionality and security.
Section Three: Mobile App Permissions
The Hedayaa app may request access to certain device permissions when needed to activate specific features within the app, such as notifications, the camera, the photo library, or other features that may be required to provide the service or enhance the user experience.
These permissions are only used for purposes related to the application's functions. The user can manage or disable the application's permissions at any time through the device settings. Disabling certain permissions may result in some features being unavailable or functioning in a limited manner.
Section Three: Data Collection and Storage
Data Collection: When using the Hedayaa website or the Hedayaa app, you agree to the collection of user data as outlined in this policy. Data is collected to provide services, process requests, execute projects, improve user experience, maintain the functionality of the website and app, and develop services.
Data Storage: User data is stored on secure systems and servers dedicated to or used by Hedayaa or its approved technical service providers, with appropriate measures taken to protect against unauthorized access, alteration, or disclosure, in accordance with industry standards.
Account Data Deletion: Users can request the deletion of their account data by contacting us. Upon acceptance of the deletion request, account and profile data may be removed, hidden, or unlinked, while retaining some records of orders, payments, or projects as necessary to comply with legal, accounting, or operational requirements, or for verification purposes related to service execution.
Section Four: Use and Disclosure
User data is used to provide guidance services, process requests, execute projects, send updates and reports, manage payments, respond to inquiries, improve the website and application, protect systems from misuse, and comply with legal and regulatory requirements.
Authorized employees at Hedayaa may access user data when necessary and to the extent required to provide, support, or verify the service.
Aggregated data: We may use non-identifiable data within aggregated data and statistics for analysis purposes, service improvement, reporting, or sharing general indicators with stakeholders without disclosing the user's identity.
Execution partners and service providers: We may share limited data with authorized parties when necessary to fulfill the order or provide the service, including follow-up teams, contractors, suppliers, field partners, payment service providers, technical service providers, and support services, and only to the extent necessary to provide, document, or support the service.
Technical service providers: Hedayaa may rely on technical service providers such as Odoo, Google Cloud, Firebase, Webkul Software, or similar service providers to operate the website and application, manage accounts, hosting, analytics, notifications, authentication, performance, security, or technical support.
Legal Disclosure: Hedayaa reserves the right to disclose information when necessary to comply with legal, accounting, or regulatory obligations, or in response to requests from competent governmental or judicial authorities.
Section Four: Use and Disclosure
User data is used to provide guidance services, process requests, execute projects, send updates and reports, manage payments, respond to inquiries, improve the website and application, protect systems from misuse, and comply with legal and regulatory requirements.
Authorized employees at Hedayaa may access user data when necessary and to the extent required to provide, support, or verify the service.
Aggregated data: We may use non-identifiable data within aggregated data and statistics for analysis purposes, service improvement, reporting, or sharing general indicators with stakeholders without disclosing the user's identity.
Execution partners and service providers: We may share limited data with authorized parties when necessary to fulfill the order or provide the service, including follow-up teams, contractors, suppliers, field partners, payment service providers, technical service providers, and support services, and only to the extent necessary to provide, document, or support the service.
Technical service providers: Hidaya may rely on technical service providers such as Odoo, Google Cloud, Firebase, Webkul Software, Zumra Web Design & Marketing Management - FZCO, or similar service providers to operate the website and application, manage accounts, hosting, analytics, notifications, authentication, performance, security, or technical support.
Legal Disclosure: Hedayaa reserves the right to disclose information when necessary to comply with legal, accounting, or regulatory obligations, or in response to requests from competent governmental or judicial authorities.
Section Six: Login via External Services
The Hedayaa website or Hidayah app may allow users to log in using external services such as Google, Apple, or other approved login providers. When a user chooses this method, we may receive basic information from the service provider such as the name, email address, and profile picture, depending on the permissions granted by the user.
This information is used only to create or manage the user account with Hidaya, facilitate login, and provide account-related services.
Section Seven: Payments
Payments are processed through secure and certified payment service providers, including PayPal and Amazon Payment Services, or any other payment providers that Hedayaa may adopt from time to time. Hedayaa does not store full bank card details on its own systems.
Upon completing the payment process, some order and transaction information may be shared with the selected payment service provider for the purpose of processing the payment, verifying the transaction, issuing invoices, executing the project, handling cancellation or refund requests, preventing fraud, complying with accounting and legal requirements, and maintaining necessary operational records.
Payment transactions are also subject to the privacy policies and terms of use of the approved payment service providers, such as PayPal and Amazon Payment Services, depending on the payment method chosen by the user.
Section Eight: Analysis, Tracking, Cookies, and Application Techniques
To enhance user experience, measure the performance of the website and application, and develop services, we may use analytical and tracking tools and operational techniques, including:
Google Analytics 4: Helps us analyze traffic, user behavior, and improve performance. The data retention period for analytics is 90 days.
Meta Events Manager: It is used to measure campaign performance and deliver more relevant content and ads on Meta platforms.
Google Tag Manager: It is used to manage tracking and analytics codes on the site.
Google Fonts: It is used to provide a consistent visual design. Loading the fonts may transfer some technical data to Google servers.
Firebase and Google Cloud: They may be used to support application functions such as authentication, analytics, performance, notifications, crash logs, and security, depending on the features enabled within the application.
Cookies: Our website uses cookies to enhance user experience, enable certain features, and measure performance. Users can manage their cookie preferences through the cookie consent banner, allowing them to choose between accepting all cookies or only essential cookies. For more details, please refer to the cookie policy.
Section Nine: Notifications
If the user activates notifications in the Hedayaa app, we may send notifications related to the account, orders, project status, updates, reminders, important messages, or services associated with using the app.
The user can disable notifications at any time through the device settings. Disabling notifications may result in not receiving some real-time updates related to the service.
Section Ten: User Rights and Data Deletion Requests
According to the applicable laws and regulations, including the General Data Protection Regulation when applicable, users have the right to exercise the following rights regarding their personal data:
Access: Request a copy of the personal data we hold.
Correction: Request to correct any inaccurate or incomplete data.
Deletion: Request to delete personal data, taking into account any legal, accounting, or operational obligations that require the retention of certain records.
Data transfer: Request a structured copy of the data where applicable.
Objection: Objection to certain types of processing based on legitimate interest.
Withdrawal of consent: Withdrawal of consent for certain types of processing where consent is the legal basis for the processing.
Users can exercise these rights or request the deletion of their account or data by contacting us at info@hedayaa.com أو support@hedayaa.comWe may request verification of the applicant's identity before processing the request.
Section Eleven: Children's Privacy
Hedayaa services are not directed at children under the age defined by applicable laws. We do not knowingly collect personal data from children without appropriate consent from a parent or legal guardian where required.
If you believe that a child has provided us with personal data without appropriate consent, please contact us so that we can review the situation and take the appropriate action.
Section Twelve: International Data Transfer
Some user data may be processed or stored by technology or cloud service providers outside the country where the user resides. When this occurs, we take appropriate measures to ensure that the data is handled securely and in accordance with applicable data protection requirements.
More than eight different projects.
More than eight different projects, including well drilling, mosque construction, school establishment, food provision, clothing distribution, and humanitarian relief.