Who We Are
118 Technology FZE (trading as "118 Dubai") is the data controller responsible for your personal data. We are registered in the United Arab Emirates and operate cloud-based business software products including 118 PMS, 118 Accounting, and 118 CRM.
Our Data Protection Officer can be reached at: dpo@118dubai.com
Data We Collect
We collect personal data in the following categories:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Name, Emirates ID / passport details, company name | You provide directly |
| Contact Data | Email, phone number, office address | You provide directly |
| Account Data | Username, subscription plan, login history | Generated on registration |
| Transaction Data | Invoice amounts, payment method details, VAT numbers | Billing transactions |
| Usage Data | Feature usage, session duration, browser type, IP address | Collected automatically |
| Customer Data | All data you enter into our products (tenant records, guest data, etc.) | You provide directly |
| Support Data | Tickets raised, chat logs, call recordings | Support interactions |
How We Use Your Data
We process your personal data on the following legal bases:
- Contract performance — to deliver, manage, and improve the services you have subscribed to
- Legal obligation — to comply with UAE tax laws, VAT filing obligations, and regulatory requirements
- Legitimate interests — to improve our products, prevent fraud, and communicate relevant product updates
- Consent — for optional marketing communications, which you may withdraw at any time
We never sell, rent, or trade your personal data to third parties for their marketing purposes.
Data Sharing & Disclosure
We may share your data with carefully selected third parties only where necessary:
- Cloud infrastructure providers — AWS, Azure, for secure data hosting within the UAE and GCC
- Payment processors — For secure subscription billing (no full card details are stored by us)
- Communication services — Email and WhatsApp APIs for product notifications
- Professional advisors — Legal, accounting, or audit firms under strict confidentiality obligations
- Government authorities — Only when legally required by UAE law or court order
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting obligations:
| Data Type | Retention Period |
|---|---|
| Active account data | Duration of subscription + 30 days |
| Financial / VAT records | 7 years (UAE FTA requirement) |
| Support communications | 3 years |
| Marketing consent records | Until consent is withdrawn + 1 year |
| Server access logs | 12 months |
Data Security
We implement industry-standard technical and organisational security measures to protect your data:
- AES-256 encryption for all data at rest; TLS 1.3 for data in transit
- Role-based access control with multi-factor authentication (MFA)
- Regular penetration testing and vulnerability assessments
- ISO 27001-aligned information security management practices
- All data stored in UAE data centres with no cross-border transfer without explicit consent
Your Rights
Under UAE Federal Decree-Law No. 45 of 2021 (PDPL) and, where applicable, EU GDPR, you have the following rights:
- Right of Access — to obtain a copy of your personal data held by us
- Right to Correction — to request correction of inaccurate personal data
- Right to Erasure — to request deletion of your data where it is no longer needed
- Right to Restriction — to request restriction of processing in certain circumstances
- Right to Data Portability — to receive your data in a structured, machine-readable format
- Right to Object — to object to processing based on legitimate interests or for direct marketing
To exercise any of these rights, please email privacy@118dubai.com. We will respond within 30 days.
Cookies
We use cookies and similar tracking technologies on our websites. Please see our Cookie Policy for full details on the cookies we use, their purpose, and how to manage your preferences.
International Transfers
Your data is primarily stored and processed in the UAE. Where we need to transfer data outside the UAE (for example, to third-party service providers), we ensure adequate safeguards are in place, including standard contractual clauses and verification that the receiving jurisdiction provides an equivalent level of data protection.
Children's Privacy
Our products and services are intended for business users and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact privacy@118dubai.com immediately and we will delete such data promptly.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will notify you via email and post a prominent notice on our website.
The "Last Updated" date at the top of this page indicates when the policy was last revised. Continued use of our services after changes take effect constitutes acceptance of the revised policy.
Contact Us
For any privacy-related questions, concerns, or to exercise your data rights, please contact our Data Protection Officer: