This Data Privacy Policy explains how Doha Exchange collects, uses, shares, and protects your personal data when you use our website or mobile applications. By using our services, you agree to this policy and consent to our processing of your personal data in accordance with it.

What personal data do we collect and why?

We collect personal data from you when you register for an account, use our services, contact us, or visit our website or mobile applications. The types of personal data we collect include:

• Identity Information: Your name, address, phone number, email address, date of birth, nationality, and identification documents such as passport or ID card. We collect this information to verify your identity, comply with Know Your Customer (KYC) requirements of the Qatar Central Bank (QCB), and prevent fraud and money laundering.
• Financial Information: Your bank account details, debit card details, and payment information. This information is used to process transactions, provide receipts and confirmations, and issue refunds where necessary.
• Transaction Information: Your transaction history, including the amount, currency, date, time, sender, recipient, and purpose of transfers. This information is retained for accounting, auditing, and regulatory compliance, including QCB requirements to retain transaction records for at least 15 years.
• Device Information: IP address, browser type, operating system, device model, and unique identifiers. This helps us improve user experience, optimize our website and mobile applications, and strengthen security.
• Preferences: Your language preferences, communication preferences, survey responses, and customer feedback to improve our services and personalize communications.

How do we use cookies and other technologies?

We use cookies and similar technologies on our website and mobile applications to enhance your browsing experience, remember your preferences, and analyze website traffic and usage patterns. Cookies are small text files stored on your device. You may manage or disable cookies through your browser or device settings.

How do we share your personal data?

We may share your personal data with the following parties for the purposes described in this policy:

• Service Providers: Third-party providers who assist us with payment processing, hosting, IT support, and marketing. These providers are required to protect your personal information.
• Business Partners: Banks, financial institutions, money transfer partners, and loyalty program providers. Your consent will be obtained before sharing information for marketing purposes.
• Regulatory Authorities: Qatar Central Bank (QCB) and other authorities where disclosure is required or permitted by law.
• Law Enforcement: Where necessary to comply with legal obligations or protect our rights, customers, and the public.

We do not sell, rent, or trade your personal data with third parties for their own commercial purposes.

How do we protect your personal data?

We implement appropriate technical and organizational security measures to protect your personal data, including:

• Encryption of personal data during storage and transmission.
• Secure servers and firewalls.
• Restricted access to authorized personnel only.
• Regular staff training on data protection and security.
• Internal policies and procedures to ensure legal compliance.

Although we use appropriate security measures, no method of transmission over the Internet or electronic storage is completely secure. We therefore cannot guarantee absolute security. You are responsible for protecting your account credentials and notifying us immediately of any suspected unauthorized access.

How long do we keep your personal data?

We retain personal data only for as long as necessary to fulfill legal, regulatory, contractual, and business requirements.

• Identity and transaction information is retained for at least 15 years as required by QCB regulations.
• Preference and communication data is retained while your account remains active or until consent is withdrawn.
• Cookie-related information is retained for the lifetime of the cookie or until deleted by you.

What are your rights and choices?

Subject to applicable laws, you have the following rights regarding your personal data:

• Right to access your personal data.
• Right to correct inaccurate or incomplete information.
• Right to request deletion where legally applicable.
• Right to object to processing based on legitimate interests or direct marketing.
• Right to lodge a complaint regarding the handling of your personal data.

To exercise any of these rights, please contact us. We may request proof of identity before processing your request and will respond within a reasonable timeframe in accordance with applicable laws.

How do we update this policy?

We may update this Data Privacy Policy from time to time to reflect changes in our business practices, technologies, legal requirements, or other operational needs. Any material changes will be communicated by posting the updated policy on our website or mobile applications. We encourage you to review this policy periodically to stay informed about how we collect, use, share, and protect your personal information.