Perkfull

Privacy Notice

Last updated 31 July 2026

This notice explains how Perkfull(“we”, “us”) handles the personal data of the business owners and staff who register for and use our platform. It is separate from our customer Privacy Policy, which covers the cardholders who join a merchant’s loyalty program. We process personal data in line with UAE Federal Decree-Law No. 45 of 2021 (PDPL).

Controller / processor

For your account data (the people who run your business account) Perkfull is the controller. For your customers’ data you are the controller and Perkfull is your processor — see the Terms.

What we collect

  • Business details you provide: business name and outlets.
  • Account contacts: owner and staff name, email address and mobile number.
  • Security & anti-fraud data: the IP address used at signup, login and audit records.
  • Usage data needed to operate, secure and support the Service.

How we use it

  • To create and operate your account and provide the Service.
  • To verify it is you — including the one-time code sent to your mobile at signup.
  • To bill paid plans, provide support, and send service and account messages.
  • To prevent fraud and abuse and keep the platform secure.

Legal basis

We rely on the performance of the contract with your business, our legitimate interest in operating and securing the platform, and compliance with legal obligations.

Sharing

We share data with service providers who help us deliver the Service (for example SMS, email and hosting providers) under confidentiality obligations. We do not sell your personal data.

Retention

We keep account data for as long as your account is active and thereafter only as required for legal, accounting or fraud-prevention purposes.

If you delete your business account, it is suspended immediately and permanently erased 14 days later — including your campaigns and your customers’ cards and activity, which we hold as your processor. Within those 14 days you can ask us to restore it; after that, deletion is irreversible. Billing records are kept as required by law, and deleted data may persist in our encrypted backups for up to 30 days.

Your rights

  • Access, correct or update your account data.
  • Request deletion of your account, subject to legal retention requirements.
  • Object to or restrict certain processing, and lodge a complaint with the UAE Data Office.

Contact

Questions or requests: [email protected].