Privacy Policy

1. Introduction

Madad Financial Technologies QFC LLC (“Madad”, “we”, “our”, or “us”) places the highest importance on protecting the privacy and confidentiality of the information entrusted to us by our customers. This Privacy Policy sets out in clear, transparent language how we collect, use, store, share, and protect your personal and business information. It is designed to ensure that you, as our customer, understand exactly how your information is handled and the rights you have in relation to it.

We believe that privacy is not just a legal requirement, but a foundation for trust. This document forms an integral part of our service relationship with you and should be read alongside our Terms and Conditions. By engaging with Madad, whether by registering on our platform, submitting documents, using our services, or communicating with us through any channel, you agree to the terms of this Privacy Policy.

2. Scope and Commitment

This Privacy Policy applies to all customers—prospective, current, and former—whose personal or business information is collected by Madad. It covers data collected during onboarding, while you use the platform, and after you cease to be a customer if retention is required for legal, regulatory, or legitimate business purposes. The policy applies to all modes of interaction with Madad, including via our digital platform, mobile-optimised interfaces, email, telephone calls, video meetings, and in-person engagements.

Madad is committed to collecting only the information necessary for lawful and specified purposes, and to processing it in ways that are fair, transparent, and proportionate. We take steps to ensure you are informed about how and why your data is used at each stage of your customer journey.

3. Information We Collect

When you interact with Madad, we collect different types of information depending on the nature of the interaction. This may include identification details, contact information, company registration records, ownership structures, bank account and financial history, invoice and transaction details, and any communications you exchange with us.

For example, during onboarding, we may request your company’s commercial registration, trade license, and ownership details, as well as government-issued identification for authorised signatories. During service use, we may collect data about your invoice financing transactions, communication history, and associated buyers/paymasters/financiers. Additionally, we collect technical data such as IP addresses, login activity, and device information to ensure platform security.

All such data is collected directly from you, from publicly available sources, or from authorised third parties, and is used strictly for the purposes described in this policy.

4. How We Share Information

We do not sell, rent, or lease your personal or business data to any third party. Your information is shared only in specific circumstances, including:

• With financiers and buyers/paymasters directly involved in processing your transactions, where such sharing is essential to complete the transaction.
• With third-party service providers—such as eKYC vendors, cloud infrastructure providers, and payment processors—strictly for the purpose of delivering services, under confidentiality agreements.
• With regulators, courts, and law enforcement authorities where required by law.
• With professional advisers such as auditors and legal counsel for compliance and governance purposes.

When sharing is necessary, we always ensure that the recipient has appropriate data protection safeguards in place and receives only the minimum information required for the intended purpose.

5. International Data Transfers

In some cases, your data may be transferred outside the State of Qatar or the QFC jurisdiction. In such situations, we ensure that the receiving country or organisation has equivalent data protection standards, or that appropriate contractual safeguards are in place. Where required by law, we will obtain your explicit consent before such transfers take place.

6. Data Retention and Deletion

We retain your information only for as long as is necessary to fulfil the purposes for which it was collected, and to meet our legal and regulatory obligations. Retention periods may vary depending on the nature of the information and applicable laws. Once the retention period expires, we securely delete or anonymise the data so that it can no longer be linked to you.

7. Security Measures

We employ robust technical, administrative, and physical safeguards to protect your information from unauthorised access, alteration, disclosure, or destruction. This includes encrypted storage, secure transmission protocols, role-based access controls, and continuous monitoring for suspicious activity.

All personnel handling customer data are trained in data protection best practices and are bound by confidentiality obligations. We also regularly test our security systems through audits and assessments to ensure their effectiveness.

In the event of a personal data breach that could pose a risk to your rights or freedoms, we will notify you and the relevant regulator without undue delay, and within 72 hours where required. This notification will include details of the breach, its potential impact, and steps taken to mitigate harm.

8. Your Rights

You have the right to request access to your data, to correct inaccuracies, to request deletion (where permitted by law), to restrict certain processing activities, to object to specific uses of your data, and to request a portable copy of your data in a machine-readable format.

You also have the right to be informed—before or at the time of collection—about the reasons your data is needed, how it will be used, and whether it will be shared with others. If your consent is the basis for processing, you may withdraw it at any time without affecting the lawfulness of prior processing.

Requests to exercise these rights can be sent to privacy@madadfintech.com, and we will respond within the timeframes mandated by applicable law.

9. Transparency in Service Interactions

In line with our customer disclosure principles, Madad ensures that you are informed at every critical stage of your interaction with us. For example:

• Before sharing an invoice with a financier or buyer/paymaster, we will inform you of the recipient’s identity and the purpose.
• Before processing any transaction, we will display all applicable fees, discount rates, and timelines.
• Before using your business name or logo for marketing or case studies, we will seek your express written consent.

This transparency is designed to empower you with the information needed to make informed decisions at every stage of your journey with Madad.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or technology. Updated versions will be posted on our website with a revised effective date. Significant changes will be communicated directly to you through email or platform notifications.