1. Introduction
REWA Innovation Ltd. ("REWA Innovation", "we", "us" or "our") is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, disclose, retain and safeguard personal data when you visit rewaworld.com, contact us or engage our services.
We process personal data in accordance with the Abu Dhabi Global Market Data Protection Regulations 2021 (as amended) ("ADGM DPR") and applicable laws of the United Arab Emirates.
2. Data controller
The data controller responsible for your personal data is:
- REWA Innovation Ltd.
- Email: [email protected]
3. Personal data we collect
Depending on how you interact with us, we may collect the following categories of personal data:
- Contact and identity data: name, job title, company name, email address, telephone number and correspondence content when you contact us.
- Technical and usage data: IP address, browser type, device information, referring URLs, pages viewed, date and time of access and similar server log data.
- Cookie and preference data: information stored via cookies or local storage where you have provided consent or where strictly necessary (see our Cookie Policy).
- Client and contractual data: where you engage our services, we may process additional information necessary to perform our contract, including project details, billing information and communications.
We do not intentionally collect special categories of personal data through this website. Please do not submit sensitive personal data unless we specifically request it and you have a lawful basis to provide it.
4. How we use personal data
We use personal data for the following purposes:
- Responding to enquiries and communicating with prospective and existing clients.
- Providing, administering and improving our technology, consultancy, hosting and related services.
- Operating, securing and maintaining our website and internal systems.
- Complying with legal, regulatory and contractual obligations, including ADGM requirements.
- Establishing, exercising or defending legal claims.
- Managing records, governance and business operations.
5. Legal bases for processing
Under ADGM DPR, we rely on one or more of the following legal bases:
- Consent: where you have given clear consent (for example, non-essential cookies).
- Contract: where processing is necessary to perform a contract or take steps at your request before entering a contract.
- Legal obligation: where processing is required by applicable law or regulation.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as website security, fraud prevention and improving our services, provided those interests are not overridden by your rights.
6. Sharing and disclosure
We do not sell personal data. We may share personal data with:
- Service providers who assist with hosting, infrastructure, email, analytics (where consented), professional advisers and administrative support, subject to appropriate contractual safeguards.
- Regulators, courts or law enforcement where required by law or to protect our legal rights.
- Successors in the event of a corporate reorganisation, merger or asset transfer, subject to applicable law.
Where personal data is transferred outside ADGM, we implement appropriate safeguards as required under ADGM DPR, such as standard contractual clauses or transfers to jurisdictions recognised as providing adequate protection.
7. Data retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including to satisfy legal, accounting or reporting requirements. Retention periods vary depending on the nature of the data and our relationship with you. When data is no longer required, we securely delete or anonymise it.
8. Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or destruction. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
9. Your rights
Subject to applicable law, you may have the right to:
- Request access to personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure of personal data in certain circumstances.
- Object to or restrict certain processing.
- Request data portability where applicable.
- Withdraw consent at any time where processing is based on consent (without affecting prior lawful processing).
- Lodge a complaint with the ADGM Office of Data Protection or relevant supervisory authority.
To exercise your rights, contact [email protected]. We may need to verify your identity before responding.
10. Third-party links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing personal data.
11. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision. Material changes will be communicated where appropriate.