Privacy Policy

This policy explains how Suscripify handles personal data. It covers two kinds: the account data of the businesses that sign up, and the booking data their customers submit through the pages Suscripify hosts. It is separate from the privacy notice each business publishes for its own customers.

Who we are

Suscripify is operated by Suscripify Technologies, licensed in Dubai, United Arab Emirates by the Dubai Department of Economy and Tourism. For the account data of the businesses that sign up, Suscripify Technologies is the data controller. For the booking data a customer submits, the business they booked with is the controller and Suscripify Technologies processes it on that business’s behalf.

What we collect

• Business account data — the owner’s name, email, business name and settings, and sign-in credentials.
• Booking data — the name, phone number, email, appointment time and any address or notes a customer enters when they book. Suscripify processes this on behalf of the business the booking is for.
• Payment-related data — where online payments are used, limited transaction details (such as amount, status and a payment reference). Card details are handled by Stripe and are not stored by Suscripify.
• Support communications — the subject, messages and related details you send when you open a support ticket, kept so we can help and keep a record of the conversation.
• Usage data — basic technical logs needed to run the service securely.

The legal bases we rely on

We process personal data where we have a lawful basis under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and other applicable law — in particular:

• to perform our contract with you, so we can provide and operate the service;
• for our legitimate interests in running, improving, and keeping the platform and its users secure, where those interests are not overridden by your rights;
• with your consent, where the law requires it (and which you can withdraw); and
• to comply with our legal obligations.

How we use it

To provide and run the service: hosting booking pages, recording bookings, taking online payments where enabled, sending transactional emails such as confirmations and the 24-hour reminder, showing each business its own analytics, providing support, and keeping the platform secure. We do not sell personal data, and we do not use your customers’ data for our own marketing.

Who we share it with (our processors)

We share personal data only with the service providers we need to run Suscripify, and only for that purpose. Each acts under its own obligations to protect the data. Our main processors are:

• Stripe — payment processing and Stripe Connect, which handle customers’ payments for bookings;
• Cloud infrastructure and hosting providers — which run and deliver the application;
• Database and authentication providers — which store application data and manage sign-in;
• Communications and email providers — which send transactional email and forward messages to our @suscripify.com addresses; and
• Other service providers — where reasonably necessary to operate, secure and support the service.

We may also disclose data where required by law, to enforce our terms, or to protect the rights, safety and security of Suscripify, our users or the public. This list may change as our providers do; we will keep this policy up to date.

International data transfers

Some of our processors store or process personal data outside the United Arab Emirates (for example in the European Union or the United States). Where we transfer personal data across borders, we take steps to ensure it remains protected in line with the PDPL and other applicable law, including using providers that commit to appropriate safeguards.

How we protect it

Each business’s data is isolated at the database level using row-level access controls, so a business can access only its own bookings and account data. Traffic is encrypted in transit, and access to production data is limited and logged. No system is perfectly secure, but we take reasonable technical and organisational measures to protect it.

How long we keep it

We keep personal data only as long as we need it, and then delete or anonymise it:

• Account and booking data — while your account is active, and for up to 12 months after it is closed, so a returning owner can pick up where they left off;
• Support communications — for up to 24 months;
• Technical logs — for a short period, typically up to 90 days.

We keep data longer only where a law requires it, and we will delete it sooner if you ask us to and we are not required to keep it.

Your rights

Under the PDPL and other applicable law, you — and, for their own data, your customers — may have the right to access personal data, to have it corrected or deleted, to restrict or object to certain processing, to withdraw consent, and to receive a copy of certain data. To make a request, or to opt out where the law provides for it, contact us at privacy@suscripify.com. We will respond within the time applicable law requires and may need to verify your identity first. Because the business is the controller of its customers’ booking data, we may refer a customer’s request to the business the booking was made with. You may also have the right to complain to the relevant data-protection authority.

Children’s data

Suscripify is intended for businesses and is not directed at children, and we do not knowingly collect personal data directly from children. A booking may contain details submitted by a customer or by the business; where a customer is a minor, the business is responsible for having any consent required and for handling that data lawfully. If you believe a child has provided us personal data directly, contact us at privacy@suscripify.com and we will delete it.

Cookies

Suscripify uses only the cookies needed to keep you signed in and to run the site. It does not use advertising trackers.

Changes

We may update this policy. Material changes are reflected in the date at the top of this page.

Contact

Questions or requests about your data: privacy@suscripify.com. This policy is governed by the laws of Dubai, United Arab Emirates.