Privacy policy

This policy explains how the data of Khorfakkan Resort owners is collected, used and protected in the Khorfakkan Resort app and portal, under UAE Federal Decree-Law No. 45 of 2021 on personal data protection.

Version 1.0 · effective 14 October 2026

1Who is responsible

The Khorfakkan Resort owners association and Sharjah Islamic Bank control the owners', units' and charges' data. The app is run, and the data processed on their behalf, by AlMudeer Information Technology, licence 785447, Office 1002, ABT5 Tower, Al Khan, Sharjah.

2Data we collect

Identity and contact: name, mobile, email, language, and a profile photo if the owner adds one.

Ownership: unit number and area, and the ownership and identity documents the owner uploads.

Financial: charges, invoices, receipts, payments and bank-transfer proofs.

Usage: requests, visitors, votes, sign-in history, device type and the notification token.

3Card data

The app never stores card numbers. The owner enters them directly on the page of the licensed payment gateway N-Genius (Network International); we only receive the payment status and reference.

4Why we use data

To confirm identity and ownership, issue invoices and receipts, process payments and requests, send sign-in codes and notifications, and comply with the law. We never use the data for advertising.

5Sharing

We never sell data. We share it only with the association, Sharjah Islamic Bank, the project's management company, technical service providers (hosting at DigitalOcean, the N-Genius (Network International) payment gateway, email and messaging, Apple and Google notifications), and authorities when the law requires.

6Where the data is kept

In AlMudeer's database at DigitalOcean in New York, United States, with a daily backup.

7Security and retention

Encrypted connections, a verification code at sign-in, role-based access and an audit trail of every change.

Financial and legal records are kept for the period the law requires, even after the app account is deleted; other data is deleted when no longer needed.

8Your rights

To see and correct your data, request deletion of your app account, and object to processing as the law allows. We answer within 30 days.

9Changes and contact

Every change is published with its version and date; a material change asks for your acceptance again in the app.

Enquiries and data requests: [email protected]