Privacy Policy

What we collect, why, who sees it, how long we keep it, and how you get it back.

Last updated: 5 September 2026 — effective from this date

This policy explains how U T S FOR TRADING AND SERVICES — a limited liability company registered in the State of Qatar under Commercial Registration No. 232959, referred to below as “UTS” or “we” — collects, uses, retains and protects personal data. It applies to your visit to www.uts.qa, to your messages on our official WhatsApp channels, and to your use of our software products (Jadwal, Tadween, Rafea and those that follow) and our consulting services.

We comply with Qatar Law No. 13 of 2016 on Personal Data Privacy Protection and the regulations and decisions issued under it. Where we process data belonging to people outside Qatar, we apply the same standards as a minimum.

This policy is written to be read, not signed. If anything in it still needs explaining, write to info@uts.qa and we will explain it plainly.

1Who we are, and who is responsible for your data

The controller of the personal data described in this policy is U T S FOR TRADING AND SERVICES (L.L.C.), P.O. Box 38571, Doha, State of Qatar. Our full registered details appear in the identity card at the foot of this page.

Contact point for anything concerning privacy and data protection: info@uts.qa — telephone +974 4008 0610 — WhatsApp +974 5050 4037.

2What this website actually collects — measured, not assumed

www.uts.qa is a light informational site. We reviewed its source code so that what follows describes what genuinely happens on it:

  • The “Contact Us” form collects your name, email address, phone number (optional), the service you are asking about, your message, and the time of submission. These fields are sent from your browser directly through the EmailJS service to the UTS mailbox; they are not stored in any website database.
  • This website sets no cookies of any kind, and uses no browser local storage.
  • There is no tracking or analytics tool on this site: no Google Analytics, no Meta Pixel, no equivalent. We do not build an advertising profile of you and we do not track you across other websites.
  • Server logs at Vercel, the site's hosting provider, are generated automatically on every request (IP address, browser type, page requested, timestamp) for operation, security and abuse prevention.
  • Web fonts: the site loads the Cairo typeface from Google Fonts, so your IP address and browser type reach Google when the page loads. We disclose this third-party processing explicitly.
  • The floating WhatsApp button is only a link that opens WhatsApp on your device at our number; nothing about you reaches us until you send the message yourself.

3What we collect on our official WhatsApp channels

We operate official channels on the WhatsApp Business Platform, which is run by the Meta companies. When you message us there — or message one of our products running on it — we collect:

  • Your phone number and the display name on your WhatsApp account.
  • The full content of your messages: text, images, documents and files, and the voice notes you send to us or to our products.
  • Messaging metadata: send and receive times, delivery and read status, and the conversation identifier.
  • Whatever you choose to disclose in the course of the service: your company name, its activity, and its commercial and accounting documents.

4Meta's role in the WhatsApp channel

WhatsApp messages pass through Meta's technical infrastructure before reaching us, and in transit they are subject to Meta's own terms and privacy policies alongside this policy. We use the channel to answer your enquiries and deliver the contracted service — not to send promotional messages you did not ask for.

To stop being contacted on this channel, reply “STOP” in the conversation itself or write to info@uts.qa. To have our copy of your conversations deleted, the “Delete Your Data” page sets out the procedure step by step.

5What we collect in our products and services

If you subscribe to one of our software products or engage us for a consulting service, we process — only to the extent performance of the contract requires — the following:

  • Account and company details: name, job title, email, phone, company name, registration number and tax number.
  • Content you upload or send: invoices, receipts, bank statements, contracts, drawings and schedules, and other documents — including their images and voice notes.
  • Operational data produced by your use: accounting entries, stock movements, and the reports the service generates.
  • Usage and security logs: sign-in times, IP address and sensitive operations, for audit and troubleshooting.
  • Billing data: subscription value and dates. Card details are processed by the payment gateway directly; we do not store card numbers.

6Why we process your data — purpose and basis

We do not collect data without a defined purpose, and we do not use it for anything other than the purpose it was collected for. Our purposes are:

  • Answering your enquiry and preparing our proposal — on your own request and consent.
  • Performing the contract with you, and operating and supporting the contracted service.
  • Meeting our legal, accounting and tax obligations in the State of Qatar.
  • Service security, fraud and abuse prevention, and performance improvement — to the extent necessary, on a legitimate interest that does not override your rights.
  • Direct marketing of our services: sent only to those who asked for it or have dealt with us, and stoppable at any time with a single message.

7What we do not do

We do not sell, rent or trade your personal data in any form. We do not share it with advertisers. We do not use customer content to train general-purpose AI models, and we require the model providers we work with to commit to the same contractually.

8Artificial intelligence and document processing

Some of our products — notably the Tadween remote accounting platform — use AI models to extract data from the documents you send. We state this plainly:

  • Our default provider for document and audio processing is Google (Gemini models); we use Anthropic (Claude models) as a fallback where needed. We use no others.
  • Document images, voice notes and extracted text are sent to these two providers for processing only, and are not used to train their models under their commercial terms.
  • Part of the processing runs on models we operate on our own infrastructure, with no content leaving to a third party.
  • No machine output is finally accepted unless it clears the confidence thresholds we set; anything below them is routed to human review by our accounting team.
  • Your documents and the data in them remain yours alone; we process them as a processor acting on your behalf.

9Who we share your data with — processors

We share only what is necessary, only with the parties below, and only under contracts binding them to confidentiality and to use it for no purpose but ours:

  • Meta Platforms — to operate the WhatsApp Business Platform channel and carry its messages.
  • EmailJS — to deliver the website contact-form message from your browser to our mailbox.
  • Google — to serve the web fonts used on the site.
  • Vercel — hosting and delivery of our websites.
  • DigitalOcean — the servers, databases and backups behind our products.
  • Google (Gemini models) and Anthropic (Claude models) — for the document and audio processing described above, and for nothing else.
  • Payment gateways, to collect subscription and service fees.
  • Our professional advisers (chartered accountant, auditor, lawyer) where needed and within that need.
  • Official authorities in the State of Qatar where the law or a judicial order compels disclosure.

10Transfers outside the State of Qatar

The processors listed above — Meta, Vercel, DigitalOcean, Google and Anthropic — operate servers outside Qatar. We transfer only what the purpose requires, under contractual safeguards that preserve confidentiality and forbid use for any other purpose, consistent with Law No. 13 of 2016 and the transfer rules issued under it.

11Retention periods

We keep your data no longer than the purpose requires or the law obliges:

  • Contact-form message and the correspondence arising from it: 24 months from our last contact.
  • WhatsApp conversations and their attachments: 24 months from the last message, unless a contract with you provides otherwise.
  • Account data and content inside our products: for the life of the subscription, then 90 days after it ends so you can export your data, after which it is deleted or anonymised.
  • Books, entries, invoices and contracts: ten years, in compliance with the commercial and tax laws in force in the State of Qatar.
  • Security and access logs: 12 months.
  • Anything you ask us to delete before these periods elapse is deleted as set out on the “Delete Your Data” page, except what the law obliges us to keep.

12Data security

We protect your data with technical and organisational measures proportionate to its nature:

  • Encryption in transit over HTTPS/TLS, on the website and across all our services.
  • Isolation of each customer's data from every other inside our systems, and permissions granted on a need-to-know basis only.
  • Regular backups whose restoration is tested.
  • Access review and logging of sensitive operations.
  • Notifying you and the competent authority of any breach affecting your data, as required by Law No. 13 of 2016.

13Your rights under Qatar Law No. 13 of 2016

As a data subject you may exercise the following rights, free of charge:

  • To know that your data is being processed and for what purpose, and to access what we hold.
  • To have inaccurate or incomplete data corrected or updated.
  • To request erasure of your data — the “Delete Your Data” page sets out the procedure and the timeline.
  • To object to processing or request its restriction, and to withdraw consent where processing rests on it, without affecting the lawfulness of processing before withdrawal.
  • To refuse the use of your data for direct marketing or for personal profiling of your behaviour.
  • To be notified of a breach that causes serious harm to your data.
  • To complain to the competent authority for personal data privacy protection at the Ministry of Communications and Information Technology, State of Qatar, if we fail to respond.
  • To exercise any of these, write to info@uts.qa; we respond within 30 days at most after verifying your identity.

14Data of a special nature, and children's data

We do not request data of a special nature (health, criminal, ethnic or similar) and do not set out to collect it. Where it appears incidentally in a document you send, we treat it with the same confidentiality and delete it once we no longer need it.

Our services are aimed at businesses and business owners. They are not directed at children under sixteen and we do not knowingly collect their data; if we learn we have, we delete it immediately.

15Third-party links and sites

Our site links to our product sites and to third-party sites. Each has its own privacy policy, and we are not responsible for the practices of what we do not operate.

16Changes to this policy

We may update this policy whenever our services or the applicable rules change. We publish the updated version on this page and change the “Last updated” date at the top; where a change is material we notify you by email or inside the service before it takes effect.

17How to contact us

For any question or request concerning your privacy: write to info@uts.qa, call +974 4008 0610, message us on WhatsApp at +974 5050 4037, or write to P.O. Box 38571, Doha, State of Qatar.