Data Protection Policy

Last Updated: March 12, 2026

1. Introduction

Tahweel Pay is committed to protecting the confidentiality, integrity, and security of personal and financial data processed through its platform. This Data Protection Policy outlines the measures and principles adopted by Tahweel Pay to ensure that personal data is handled responsibly and in accordance with applicable data protection and privacy regulations.

2. Scope

This policy applies to all personal data collected, processed, and stored by Tahweel Pay through its website, applications, APIs, and payment processing services. It applies to merchants, users, partners, and any individuals whose data may be processed in connection with the services provided by Tahweel Pay.

3. Types of Data Collected

Tahweel Pay may collect and process the following categories of data:

  • Personal identification information such as name, email address, and phone number
  • Merchant and business information for onboarding and account verification
  • Payment and transaction data related to services provided through the platform
  • Technical data including IP address, device information, and browser details
  • Compliance-related information required for Know Your Customer (KYC), Know Your Business (KYB), and regulatory obligations

4. Purpose of Data Processing

Personal data is processed only where necessary for legitimate business purposes, including:

  • Providing and maintaining Tahweel Pay services
  • Processing payments and facilitating transactions
  • Verifying user and merchant identities
  • Preventing fraud, financial crime, and unauthorized activities
  • Complying with legal, regulatory, and compliance obligations
  • Providing customer support and service communications
  • Improving the security, reliability, and functionality of the platform

5. Data Security

Tahweel Pay implements appropriate technical and organizational measures designed to safeguard personal data from unauthorized access, disclosure, alteration, or destruction. These measures include secure infrastructure, encryption protocols, restricted access controls, and ongoing monitoring of systems and networks.

6. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, including compliance with applicable legal, regulatory, accounting, and reporting requirements. When data is no longer required, it will be securely deleted or anonymized where appropriate.

7. Data Sharing and Disclosure

Tahweel Pay may share personal data with trusted third-party service providers where necessary to operate its services. These may include:

  • Payment processors and financial institutions
  • Identity verification and compliance service providers
  • Cloud infrastructure and technology service providers
  • Regulatory authorities and law enforcement agencies where required by law

All third parties engaged by Tahweel Pay are required to implement appropriate security and confidentiality measures.

8. International Data Transfers

Where necessary, personal data may be transferred to service providers or partners located in different jurisdictions. In such cases, Tahweel Pay ensures that appropriate safeguards are implemented to maintain the security and protection of the transferred data.

9. Data Subject Rights

Depending on applicable regulations, individuals may have certain rights regarding their personal data, including the right to request access, correction, or deletion of personal information, subject to regulatory and compliance requirements.

Requests regarding personal data may be submitted through Tahweel Pay's support channels.

10. Policy Updates

Tahweel Pay reserves the right to update this Data Protection Policy periodically to reflect changes in legal, regulatory, or operational requirements. Updated versions will be published on the Tahweel Pay website.

11. Contact Information

For any inquiries regarding this Data Protection Policy or the handling of personal data, please contact:

Email: support@tahweelpay.com