Privacy Policy
Ahlan Rawabi

Welcome to Ahlan Rawabi — the official loyalty rewards application of Al Rawabi Group of Companies, Qatar's trusted retail group operating since 1985 across more than 45 outlets in three countries.

This Privacy Policy governs your use of the Ahlan Rawabi mobile application ("App"), published on Google Play Store and Apple App Store. It describes how we collect, use, disclose, and protect your personal information.

By registering an account or using the App, you agree to the practices described here. If you do not agree, please stop using the App.

When you use Ahlan Rawabi, we collect the following categories of information:

Account & Identity

• Full name, email address, and mobile number
• Date of birth (for birthday rewards and age verification)
• Gender and preferred language (optional)
• Profile photograph (optional)

Loyalty & Transaction Data

• Purchase history and transaction records at Rawabi stores
• Points balance, redemption history, and reward vouchers
• Loyalty membership number
• Offers, promotions, and coupons claimed or redeemed

Device & Technical Information

• Device type, model, and operating system version
• Unique device identifiers and app version
• IP address, connection type, and crash/error logs
• Push notification token

Location Data

• Approximate location — to display nearest stores and offers
• Precise GPS — only if you grant explicit permission

Communications Data

• Messages submitted via in-app contact forms
• Customer support correspondence and survey responses

We process your information for the following lawful purposes only:

We do not sell, trade, or rent your personal information to any third party. We share data only in the limited circumstances below:

Service Providers

Trusted vendors who process data strictly on our behalf:

• Cloud hosting providers — to store app data securely
• Analytics platforms — to understand app usage (e.g., Firebase)
• Push notification services — to deliver alerts to your device
• Customer support tools — to manage your inquiries
• Payment processors — when in-app payments are used

Legal & Regulatory

• When required by Qatari law (including Law No. 13 of 2016 on Personal Data Privacy Protection)
• In response to valid court orders or governmental requests
• To protect the rights, property, or safety of Al Rawabi Group or the public

Business Transfers

In the event of a merger or acquisition, your data may be transferred to the successor entity. We will notify you if such a transfer results in a different privacy policy applying to your data.

We apply industry-standard security measures to protect your information:

• Encryption in transit: All data between the App and our servers is protected by TLS/SSL
• Encryption at rest: Sensitive stored data is encrypted (AES-256 or equivalent)
• Access controls: Role-based access limits who can view personal data internally
• Authentication: Multi-factor authentication for all administrative system access
• Security audits: Periodic reviews and vulnerability assessments are conducted
• Breach response: We maintain an incident response plan and will notify users as required by law

We keep your data only for as long as necessary:

After the applicable period, data is securely deleted or anonymised.

The Ahlan Rawabi mobile app does not use browser cookies. The following technologies may be used:

• Mobile analytics SDKs (e.g., Google Firebase) — aggregated, anonymised usage patterns
• Crash reporting tools — to detect and fix technical issues automatically
• Push notification tokens — generated by iOS/Android to deliver push notifications; disable anytime in device Settings
• Session identifiers — temporary tokens to maintain your login session, expiring on logout

Under Qatari Law No. 13 of 2016 on Personal Data Privacy Protection and other applicable regulations, you have the following rights:

To exercise any right, contact us as shown in Section 12. We will respond within 30 business days. We may verify your identity before processing requests.

The Ahlan Rawabi App is intended for users 18 years of age or older. We do not knowingly collect personal data from children under 18.

If you believe a child has provided us with personal information, please contact us immediately. We will take prompt steps to delete such data from our systems.

When material changes are made, we will:

1. Update the "Last Updated" date at the top of this document
2. Send a push notification or in-app alert informing you of the change
3. Where required by law, seek your renewed consent

Continued use of the App after changes are posted constitutes acceptance of the revised policy.

For any questions, concerns, or data rights requests, please reach us through the following official channels: