Qiyada
Legal

Privacy Policy

Last updated: May 2026

This Privacy Policy explains how Qiyada Business ("Qiyada", "we", "us") collects, uses, shares and protects personal data when you use qiyada.biz, the Qiyada platform, mobile apps and related services (the "Services"). Qiyada is established in the United Arab Emirates and complies with the UAE Personal Data Protection Law (Federal Decree-Law 45 of 2021) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data controller

Qiyada Business FZ-LLC is the controller for personal data processed through the Services. Contact: privacy@qiyada.biz.

2. Personal data we collect

  • Identity: full name, Emirates ID, passport, nationality, date of birth, photograph.
  • Contact: email, phone, address, emergency contact.
  • Financial: salary proof, bank statements, payslips, employer details, repayment history.
  • Business: trade licence, business activity, ownership structure, UBO information.
  • Guarantor data: identity, contact, financial and employment information of any guarantor you provide.
  • Technical: IP address, device identifiers, browser, log data, cookies and similar technologies.
  • Usage: pages visited, actions taken, documents uploaded, communications with our team.

3. How we use personal data

  • Provide and operate the Services (onboarding, KYC, contracts, financing, accounting, PRO, compliance).
  • Verify identity, screen for fraud, sanctions and AML risks.
  • Originate, structure and service Shariah-aligned deferred-payment arrangements with Mawarid Finance and other licensed partners.
  • Procure third-party services (freezone authorities, banks, accountants, insurers, software vendors) on your behalf.
  • Send service, transactional and (with consent) marketing communications.
  • Meet legal, regulatory, tax and audit obligations.
  • Improve, secure and develop the Services, including AI features.

4. Legal bases for processing

We process personal data on the basis of: performance of a contract with you, compliance with legal obligations, your consent (for marketing and certain cookies), and our legitimate interests in operating, securing and growing the Services in a way that does not override your rights.

5. Sharing personal data

  • Licensed financing partners (e.g. Mawarid Finance) for credit and Shariah review.
  • Government authorities, freezones, banks, insurers and other procurement counterparties to deliver services you request.
  • Service providers acting as processors (cloud hosting, KYC vendors, accounting and payroll software, communications, analytics).
  • Professional advisors (legal, audit, compliance).
  • Regulators, courts or law enforcement where legally required.
  • Acquirers in the event of a corporate transaction, under appropriate confidentiality.

We do not sell personal data.

6. International transfers

Personal data is primarily stored in the UAE and the wider Middle East region. Where data is transferred outside the UAE, we use approved safeguards such as standard contractual clauses, adequacy decisions or your explicit consent.

7. Retention

We retain personal data for as long as necessary to deliver the Services and to comply with legal, regulatory, tax and audit obligations (typically up to 8 years after the end of the customer relationship for financial records, or longer where required).

8. Your rights

  • Access a copy of your personal data.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of data we no longer need to retain.
  • Object to or restrict certain processing.
  • Withdraw consent where processing relies on it.
  • Data portability for data you have provided to us.
  • Lodge a complaint with the UAE Data Office or your local data protection authority.

To exercise these rights, email privacy@qiyada.biz. We may need to verify your identity before responding.

9. Security

We apply administrative, technical and physical safeguards including encryption in transit and at rest, role-based access control, row-level security, audit logging, MFA for privileged users and regular reviews.

10. Children

The Services are intended for adults aged 18 and over. We do not knowingly collect data from minors.

11. Changes

We will update this Policy from time to time. Material changes will be notified through the platform or by email.