Privacy Policy

Qemah Al Mustaqbal Marketing Management (“Qemah,” “we,” “us” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, store and protect personal data across our website, Qemah Messaging, and our digital marketing and website services, including when you:

• Visit qemahalmustaqbal.net;

• Use Qemah Messaging at messaging.qemahalmustaqbal.net;

• Connect a WhatsApp Business Account to Qemah Messaging;

• Communicate with a business using Qemah Messaging; or

• Engage Qemah Al Mustaqbal for SEO, Google Ads, Meta Ads, website design or development, or other digital marketing services;

• Contact us for information, support or services.

1. Who We Are

Our website, Qemah Messaging, and the digital marketing and website services described in this policy are operated by:

Qemah Al Mustaqbal Marketing Management
Dubai, United Arab Emirates
Website: https://qemahalmustaqbal.net
Application: https://messaging.qemahalmustaqbal.net
Email: info@qemahalmustaqbal.net

Depending on the situation, Qemah may act as a controller of personal data or as a service provider or processor acting on behalf of a business customer. When a business customer determines why and how contact, messaging, campaign or website data is used, Qemah generally processes that data to provide the services requested by that customer and in accordance with applicable instructions, agreements, laws and platform requirements.

2. Information We Collect

We may collect the following categories of information.

Business and Account Information

This may include:

• Name;

• Business name;

• Email address;

• Telephone number;

• Account and workspace information;

• User role and access permissions;

• Support communications; and

• Service preferences.

Marketing and Website Services Information

When a business engages Qemah for digital marketing or website services, we may process information such as:

• Business and authorised contact details;

• Enquiries, proposals, contracts, invoices and project communications;

• Website, domain, hosting, CMS and project information reasonably required to provide the service;

• Advertising, analytics or business-account identifiers and access permissions authorised by the client;

• Campaign, audience, conversion, lead or performance information provided by the client or generated while providing the service;

• Brand, creative, website and marketing materials supplied for the project; and

• Support, reporting and service-preference information.

Where client systems contain personal data, we only access or process the information reasonably required to provide the authorised service.

WhatsApp Business Information

When a business connects its WhatsApp Business Account, we may process:

• WhatsApp Business Account ID;

• Business phone-number ID;

• Display phone number;

• Business profile information;

• Message templates and their approval status;

• Messaging permissions;

• Access tokens and connection information; and

• Information returned through the WhatsApp Business Platform.

Access tokens are treated as confidential credentials and are encrypted before being stored.

Contact and Recipient Information

Businesses using Qemah Messaging may upload or enter information about their contacts, including:

• Name;

• Telephone number;

• Tags or audience group;

• Source of the contact;

• Consent or opt-in status;

• Consent evidence;

• Opt-out status; and

• Communication history.

Businesses are responsible for ensuring that they have a lawful reason and any required consent before providing contact information to Qemah Messaging.

Message and Activity Information

We may process:

• Message content;

• Message templates;

• Incoming and outgoing message details;

• Date and time of communications;

• Delivery or processing status;

• Campaign information, where enabled;

• Replies and opt-out requests;

• Internal notes; and

• Security and audit activity.

Website, Analytics and Advertising Information

Where enabled, our website, applications or client-authorised marketing services may also process information such as referral pages, landing pages, campaign parameters, conversion events, analytics identifiers and advertising measurement data. The exact information depends on the tools and services in use.

Technical Information

Our systems and service providers may automatically collect:

• IP address;

• Browser and device type;

• Operating system;

• Login and session information;

• Date and time of access;

• Error and security logs; and

• Information needed to operate and protect the service.

3. How We Collect Information

We may collect information:

• Directly from you;

• From prospective and current clients and their authorised representatives when they enquire about, order or use our marketing and website services;

• From a business using Qemah Messaging;

• Through the Qemah website or application, including contact forms and cookies or similar technologies where enabled and permitted;

• From client-authorised advertising, analytics, website, hosting and business platforms when we provide the agreed service;

• Through Meta and the WhatsApp Business Platform;

• When a person sends a message to a connected WhatsApp number;

• When contacts are imported or entered by an authorised business user; and

• Automatically through security, operational and technical logs.

4. How We Use Information

We may use personal data to:

• Create and manage business workspaces;

• Connect and manage WhatsApp Business Accounts;

• Send and receive authorised WhatsApp messages;

• Create and submit WhatsApp message templates;

• Manage contacts, conversations and consent records;

• Record and honour opt-out requests;

• Provide SEO, advertising, website design, website development and related digital marketing services requested by a client;

• Prepare proposals, contracts, invoices, reports and project communications;

• Manage client-authorised advertising, analytics, website and business-platform access or configurations;

• Measure campaign, website and service performance where authorised;

• Provide customer support;

• Maintain security and prevent misuse;

• Diagnose errors and improve service reliability;

• Keep audit and operational records;

• Comply with legal and regulatory requirements; and

• Protect the rights, security and property of Qemah, our customers and other people.

5. Lawful Processing

Where required by applicable law, we process personal data based on one or more of the following:

• Your consent;

• Performance of a contract or steps requested before entering a contract;

• Compliance with a legal obligation;

• Protection of legal rights and interests; or

• Legitimate business interests where those interests do not override the rights of the affected person.

You may withdraw consent where processing depends on consent. Withdrawal does not affect processing that was lawful before consent was withdrawn.

6. WhatsApp Messaging, Consent and Opt-Outs

Businesses using Qemah Messaging must:

• Contact only people they are legally permitted to contact;

• Obtain the recipient’s WhatsApp opt-in before initiating messages, identifying the sending business and the types of messages, as well as any further consent required by law;

• Maintain evidence of consent;

• Follow Meta and WhatsApp policies;

• Use approved templates when required;

• Respect WhatsApp’s customer-service messaging window; and

• promptly honour opt-out requests.

Recipients may request that marketing messages stop by replying STOP, UNSUBSCRIBE, or by contacting the relevant business directly.

We may retain a limited suppression record after an opt-out so that the recipient is not contacted again accidentally.

Use of Qemah Messaging is also subject to our Acceptable Use & Messaging Policy.

7. How We Share Information

We may share personal data with:

• Meta Platforms and WhatsApp when necessary to provide WhatsApp messaging services;

• Google, Meta and other advertising, analytics or business platforms where necessary to provide services authorised by a client;

• Website hosting, CMS, domain, cloud hosting, database, authentication and infrastructure providers;

• Email, security, technical-support and monitoring providers;

• Professional advisers, including legal and accounting advisers;

• Government authorities or courts where disclosure is legally required; and

• A successor organisation involved in a lawful merger, acquisition or business transfer.

Service providers may process information only for agreed services and subject to appropriate confidentiality and security requirements.

We do not sell or rent personal data.

When Qemah acts as a service provider for a business customer in connection with Qemah Messaging or the WhatsApp Business Platform, we process relevant business solution data on that customer’s behalf to provide the requested service and not for unrelated purposes.

8. International Data Transfers

Qemah is based in the United Arab Emirates. Some technology providers or recipients may be located outside the UAE.

Where personal data is transferred internationally, we take reasonable steps to use appropriate contractual, organisational or legal safeguards as required by applicable law.

9. Data Retention

We retain personal data only for as long as reasonably necessary to:

• Provide the requested services;

• Maintain an active business account;

• Meet legal, accounting and regulatory obligations;

• Resolve disputes;

• Prevent fraud and misuse;

• Maintain security records; and

• Honour opt-out requests.

Retention periods may differ depending on the type of information and the reason it is processed.

When information is no longer required, we will delete, anonymise or securely isolate it, subject to legal requirements and reasonable backup cycles.

10. Data Security

We use reasonable technical and organisational safeguards designed to protect personal data. These may include:

• Encrypted HTTPS connections;

• Restricted account access;

• Workspace-level access controls;

• Encryption of stored integration credentials;

• Audit records;

• Input validation;

• Security monitoring; and

• Controlled backups and recovery procedures.

No online service can guarantee absolute security. Users must protect their login information and immediately notify us of suspected unauthorised access.

11. Your Privacy Rights

Subject to applicable law, you may have the right to:

• Ask whether we process your personal data;

• Request access to your personal data;

• Request correction of inaccurate or incomplete information;

• Request deletion of personal data;

• Restrict certain processing;

• Object to certain processing;

• Withdraw consent;

• Request a portable copy of information you provided; and

• Complain to the relevant data-protection authority.

Some rights may be limited where we must retain information for legal, security or contractual reasons.

12. How to Request Data Deletion

To request deletion of personal data held by Qemah, including data connected to Qemah Messaging, you may also use our dedicated Data Deletion instructions.

To submit a request directly:

1. Email info@qemahalmustaqbal.net.

2. Use the subject: Data Deletion Request – Qemah Messaging.

3. Include your name and the email address, phone number, business or service needed to find the relevant records.

4. If requesting deletion of a business workspace, use the email address associated with the authorised business account.

5. Do not send passwords, access tokens or other secret credentials.

We may request reasonable information to verify your identity and prevent unauthorized deletion.

After verification, we will delete or anonymise eligible information within the period required by applicable law. We may retain information that is required for legal obligations, security, dispute resolution or suppression of future unwanted marketing.

If your information was provided by a business using Qemah Messaging, we may refer the request to that business or work with it to complete the request.

13. Cookies and Similar Technologies

Our website and application may use essential cookies or similar technologies for login, security, preferences and basic operation.

Analytics, advertising or measurement technologies may also be used where permitted and where enabled, including through tag-management or similar systems. These technologies may help us understand website use, measure campaigns, diagnose issues and improve services. You can control cookies through your browser settings, although disabling essential cookies may affect service functionality.

14. Children’s Privacy

Qemah Messaging is intended for businesses and authorised adult users. It is not directed to children under 18, and we do not knowingly collect children’s personal data through the service.

If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.

15. Third-Party Services

Our website and application may contain links to services operated by third parties. Their privacy practices are governed by their own policies.

Use of WhatsApp is also subject to the applicable WhatsApp and Meta terms and privacy policies.

16. Changes to This Privacy Policy

We may update this Privacy Policy when our services, legal requirements or data practices change.

The latest version will be published at:

https://qemahalmustaqbal.net/privacy-policy/

The “Last updated” date at the beginning of this policy identifies the latest revision.

17. Contact Us

For privacy questions, requests or complaints, contact:

Qemah Al Mustaqbal Marketing Management
Dubai, United Arab Emirates
Email: info@qemahalmustaqbal.net
Website: https://qemahalmustaqbal.net