Vraj Heritage FZCO ("Vraj Heritage", "we", "us", or "our") is committed to protecting the privacy of our members, event registrants, and website visitors. This Privacy Policy explains how we collect, use, store, and protect personal data, and describes your rights, in accordance with the United Arab Emirates' Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and its Executive Regulations issued under Cabinet Decision No. 34 of 2024.
1. Who We Are
Vraj Heritage FZCO is a community organisation operating in the United Arab Emirates. For the purposes of the PDPL, Vraj Heritage acts as the "Data Controller" for personal data collected through this website, our membership registration form, and our event registration system.
2. Personal Data We Collect
Depending on how you interact with us, we may collect:
- Identity details: full name, date of birth, blood group, photograph (for member ID cards).
- Contact details: email address, phone and WhatsApp number, emirate and area of residence.
- Family details: names and details of family members added to a household registration.
- Community details: occupation, marriage anniversary, language preference, volunteering interest.
- Event registration details: name, email, phone number, and number of tickets, for event check-in and QR ticketing.
- Technical data: IP address and browser information collected automatically when you use our website.
3. Why We Collect Your Data (Purpose of Processing)
We process your personal data for the following purposes:
- To register and maintain your membership with Vraj Heritage FZCO.
- To issue physical or digital membership/ID cards.
- To register you and your family for community events and manage entry via QR-coded tickets.
- To communicate with you about community activities, events, and updates.
- To maintain accurate community records and, where you consent, to coordinate volunteering activities.
- To comply with legal or regulatory obligations under UAE law.
4. Legal Basis for Processing
We process your personal data on the basis of your explicit consent, given at the time of registration through the consent confirmations on our forms. You may withdraw your consent at any time by contacting us using the details below; this will not affect the lawfulness of processing carried out before withdrawal.
5. How We Store and Protect Your Data
Your data is stored on access-controlled servers and transmitted using encrypted connections. We apply reasonable technical and organisational measures — including password hashing for administrator accounts and encrypted database connections — to protect your data against unauthorised access, loss, misuse, or disclosure, consistent with Article 20 of the PDPL.
6. Data Sharing and Disclosure
We do not sell or rent your personal data. We do not share your data with third parties for marketing purposes. We may disclose personal data only:
- To service providers who process data on our behalf (e.g. email delivery, hosting), under confidentiality obligations.
- Where required by UAE law, court order, or a competent government or regulatory authority.
- To protect the rights, safety, or property of Vraj Heritage, our members, or the public.
7. Data Retention
We retain personal data for as long as your membership is active or as needed to fulfil the purposes described in this policy, and thereafter for as long as required to meet our legal, accounting, or record-keeping obligations under UAE law. You may request earlier deletion as described in Section 8.
8. Your Rights Under the PDPL
Subject to the conditions set out in the PDPL, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure ("right to be forgotten") of your personal data.
- Restrict or object to certain processing of your data.
- Request a copy of your data in a portable format.
- Withdraw consent at any time.
- Lodge a complaint with the UAE Data Office if you believe your data has been mishandled.
To exercise any of these rights, please contact us at privacy@vaishnavsangh.ae.
9. Children's Data
Where family or event registrations include details of children (including tickets for children aged 5 and above), such data is submitted by the parent or legal guardian, who is responsible for ensuring they have the authority to consent to the processing of that child's data on their behalf.
10. Cookies
Our website uses essential cookies required for administrator authentication. We do not use third-party advertising or tracking cookies.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when it was last revised.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at privacy@vaishnavsangh.ae.