اتفاقية معالجة البيانات

Roles

When a merchant processes their customers’ data via the platform: the merchant is controller and we are processor. For the merchant’s account data with us, we are controller.

Instructions

We process merchant-customer data only on the merchant’s documented instructions (store operation, orders, necessary support), this DPA and law.

Security & confidentiality

We apply appropriate security, limit access to need-to-know, and bind staff/contractors to confidentiality.

Sub-processors

We may use sub-processors for hosting, email, payments and infrastructure under similar core duties. Category lists available on request.

Breach

We will notify the merchant without undue delay after becoming aware of a personal-data breach affecting their customers’ data, and provide reasonable information to help them comply.

Assistance & deletion

We reasonably assist with data-subject requests and assessments. On end of service we delete or return data per the merchant’s instructions and law, unless retention is required.

Law

Governed by Federal Decree-Law 45/2021 (PDPL) and UAE law; Dubai courts.

Contact

For questions about this policy: info@fawzai.net

fawz ai Artificial Intelligence Developing Services — 2nd Floor, Al Fattan Tower, opposite Rixos Resort, Dubai Marina, Dubai, United Arab Emirates