01Scope
This policy applies to the Durrah Hub website, the client portal, and the apps the company develops and operates.
02Information we collect
In the client portal: your name, company, phone number or email, preferred contact method, request details, attached files, messages, and offers and your replies to them.
In our apps: your phone number, name, and what is needed to run your account.
A limited operational log of verifications: when a code was requested, its delivery status, and the result of the attempt.
Device notification tokens and session identifiers to protect your account.
03Consent
We collect your data only after you accept this policy and the Terms & Conditions when you sign in or submit a request. You may withdraw your consent at any time; we then stop processing and delete your data, except what must be kept by law.
04How we use data
We use your data only to verify your identity at sign-in, study your request and contact you about it, prepare offers and deliver the agreed service, send service and security alerts, and meet legal and accounting obligations.
We do not use your data for marketing or advertising, we do not sell it, and we do not share it with anyone for those purposes.
05Client confidentiality
Request details, files and messages are treated as confidential and are seen only by the staff handling the request.
We do not disclose them to anyone else except the service providers needed to run the service, with your written consent, or at the lawful request of a competent authority.
06SMS, WhatsApp, email and verification codes
Verification codes and service alerts are sent under the sender name “Durrah” by SMS through an approved provider in the State of Kuwait, or to your email if you choose to sign in with it. The provider receives only the number or email and the message text.
Sample message: “Your login code is 482915. Valid for 5 minutes. Do not share it with anyone.”
We send WhatsApp messages only to people who agreed to receive them on their number. They come from a verified business account under the name Durrah Hub or the app the company operates, and are service messages only.
These messages reach only people who entered their own number or email, and are never used for marketing. To stop them, ask in the same chat, delete your account, or email our official address.
A code is valid for a few minutes and can be used once. No one at Durrah Hub will ever ask you for it.
07Notifications
We send service notifications inside the app and to your device. You can turn off device notifications in your phone's settings.
08Cookies
The website uses no advertising cookies or tracking tools. The client portal keeps session data in your browser only to keep you signed in, and clears it when you sign out.
09Service providers
We use trusted providers for database hosting and file storage, notifications, and SMS and email delivery. Providers process data only as needed to deliver the service.
Transfers outside Kuwait: the database and files are hosted in Sweden (European Union); WhatsApp messages are processed by Meta under its own policy; SMS is sent through a provider in Kuwait. We choose providers that apply encryption and access controls to protect data.
10Retention
Verification logs are kept for 30 days and then deleted automatically; account data is kept while the account exists.
Requests, accepted offers and their messages are kept for the period required by Kuwait's commercial and accounting rules, then deleted.
When an account is deleted, personal data is removed within 30 days, except what must be kept by law.
11Your rights
You may ask to see, correct or delete your data, withdraw your consent to receive messages, and turn off notifications, from the app, the portal, or by emailing our official address.
12How to delete your data
In the app: Settings, then “Delete account”.
In the client portal: send us an account deletion request through the portal messages.
Or email our official address from the number or email registered on your account.
We complete the deletion within 30 days and confirm it to you, except what must be kept by law.
13Security
Data travels over encrypted connections and is stored in protected databases with limited access; files are kept in private storage and opened only through temporary links by the requester and the staff handling it. No online service can be guaranteed to be completely secure.
If a breach affects your data, we will notify you and the Communication and Information Technology Regulatory Authority without delay, within the period set by the Data Privacy Protection Regulation.
14Changes to this policy
We may update this policy from time to time. The date of the latest update appears at the top of this page.
15Data protection officer
Durrah Hub's data protection officer is the company owner, who can be reached for any question or request about your data at info@durrahhub.com, or phone +965 5540 3772 WhatsApp.