00 / Policy
Privacy Policy
This policy explains what information SURV collects, how we use it, and the rights you have over it. We are working with our legal counsel to finalise the language; this draft outlines our intent.
Who we are
SURV is a verified-services marketplace operating in Dubai, United Arab Emirates. We connect customers with vetted service providers. SURV is responsible for the platform; the service providers listed are independent businesses responsible for delivering their own services.
Information we collect
Account information: name, email address, phone number, and a hashed password if you create an account.
Booking information: the service category, address, scheduling details, and communications with providers through the platform.
Payment information: processed by Stripe, our payment processor. SURV does not store full card details.
Usage data: device type, IP address, pages visited, and app interactions.
Communications: messages exchanged with us, with providers via the platform, or through WhatsApp customer support.
How we use your information
We use your information to fulfil bookings, manage your account, process payments, communicate with you, improve the service, prevent fraud, and comply with applicable law.
We do not use your information for marketing by third parties.
International data transfers
Some of our service providers operate in the United States and European Union. Where data is transferred outside the UAE, we ensure appropriate safeguards under the UAE Personal Data Protection Law (PDPL) and the providers' own compliance frameworks.
Data retention
We keep your account and booking data for as long as your account is active, plus a period required for legal, accounting, or tax purposes after closure. Communications data is typically retained for up to 24 months.
Your rights
Under the UAE Personal Data Protection Law, you have the right to access the personal data we hold about you, correct inaccurate or incomplete data, request deletion of your data subject to legal retention requirements, receive your data in a portable format, withdraw consent where processing relies on consent, and object to certain processing.
To exercise these rights, contact us via the Contact page. We respond within thirty days, as required by PDPL.
Security
We use industry-standard encryption for data in transit and at rest for sensitive fields, access controls, and routine security audits. No system is perfectly secure; in the event of a data incident, we will notify affected users as required by law.
Children
SURV is not directed at children under 18. If you believe we have collected information about a minor, contact us so we can delete it.
Changes to this policy
We will post any changes to this policy on this page and notify registered users by email. The Effective date at the top indicates when the current version took effect.
Contact
For privacy questions or to exercise your rights, contact us via the Contact page.