Privacy Policy

Privacy Policy — Redak Application & Redak Dashboard

Effective Date: October 14, 2025

Last Updated: October 14, 2025

This Privacy Policy explains how Diamond Steel (“Diamond Steel,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data in connection with the Redak Application (end-user mobile app) and the Redak Dashboard (provider web and mobile tools).

If you do not agree with this Policy, please do not use Redak. By using Redak, you consent to the practices described here.

1) Who we are (Data Controller)

Diamond Steel

City: Riyadh, Country: Saudi Arabia

Email: acc@dhtechs.net

For certain services (e.g., hosting, database, authentication, analytics), we use reputable third-party service providers (processors). We remain responsible for their processing where required by law.

2) What this Policy covers (Scope)

This Policy applies to:

Redak Application (the consumer app used to discover estates and make reservations).

Redak Dashboard (the provider/owner web and mobile tools used to manage estates, listings, reservations, and customer interactions).

It covers personal data of both End Users and Providers (including their staff acting under a provider account).

3) Information we collect

3.1 End Users (Redak Application)

Account & identity: name, phone number, gender, birthdate, email (if provided), password (stored hashed, never in plaintext).

Location: device location when you grant permission, and/or location you manually provide.

Usage & content: reservations and history, favorites, in-app interactions, ratings you give/receive, comments, uploaded media (if any).

Device & technical: app version, device type, OS, IP address, crash/diagnostic logs.

Support: messages you send to support and their metadata.

3.2 Providers (Redak Dashboard)

Account & identity: name, email, password (hashed), role/permissions; optional profile details.

Estate details: estate name/branch, type (e.g., hotel/“hottel”, restaurant, coffee), amenities, pricing, menus, media.

Official documents: facility/license/tax documents and other compliance files uploaded by provider.

Operational data: availability, policies, reservation decisions (accept/decline/reschedule), communications with users.

Ratings & feedback: ratings given/received, responses.

Device & technical: browser/app version, device/OS, IP address, logs.

3.3 Children

Redak is not intended for children under the age permitted by law. If you believe a child provided personal data, contact us at acc@dhtechs.net

.

4) Sources of data

Directly from you (forms, reservations, uploads, messages).

Automatically via your device/app/browser (with your permissions where required).

From other users (e.g., ratings) and from providers about reservations.

From third-party services we use for authentication, hosting, storage, analytics, payments (if applicable), and communications.

5) How we use your information (Purposes)

We process data to:

Provide and operate Redak: create accounts, authenticate users, enable listing discovery, reservations, and provider management.

Facilitate reservations: share necessary details between End Users and Providers; allow Providers to accept/decline/manage bookings.

Improve and secure Redak: monitor performance, fix bugs, prevent fraud/abuse, ensure service reliability and security.

Communicate with you: transactional messages (confirmations, reminders), important updates, and support responses.

Show and moderate content: listings, images, menus, documents, ratings, and comments consistent with our Terms.

Comply with law: tax/record-keeping, responding to lawful requests, enforcing our Terms & Conditions.

6) Legal bases (where applicable)

Depending on your jurisdiction, we rely on one or more of the following legal bases:

Contract: processing necessary to provide Redak and fulfill our agreements with you (e.g., reservations, account management).

Legitimate interests: service improvement, security, fraud prevention, and appropriate sharing between user and provider for a booking.

Consent: optional features such as device location, certain notifications, or marketing (where required).

Legal obligation: compliance with applicable laws and regulations.

You may withdraw consent at any time in your device/app settings or by contacting us (this will not affect prior processing).

7) Sharing and disclosure

We share data only as needed and with safeguards:

Between End Users and Providers: To complete and manage reservations (e.g., user name/phone for coordination; provider listing/policy details for transparency).

Service providers (processors): Hosting, cloud database/storage (e.g., managed platforms like Firebase), authentication, analytics, error logging, email/SMS delivery, and customer support tools. They process data under contract and only for our instructions.

Affiliates / professional advisers: For operations, accounting, and compliance.

Legal & safety: If required by law, court order, or to protect rights, safety, and security of users, providers, or the public.

Business transfers: In a merger, acquisition, or sale of assets, your data may be transferred with notice as required by law.

We do not sell your personal data.

8) International transfers

We may process and store data on servers located outside your country. Where required, we implement appropriate safeguards (e.g., contractual data protection terms) to protect your information.

9) Data retention

We retain personal data for as long as necessary to provide Redak, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and context (e.g., reservation records, fiscal documents). When no longer needed, data is deleted or de-identified.

10) Security

We use administrative, technical, and physical safeguards designed to protect personal data (e.g., access controls, encryption in transit, hashing of passwords, least-privilege policies). No method of transmission or storage is 100% secure; you share responsibility by using strong passwords, enabling available security features, and keeping credentials confidential.

11) Your choices & rights

Depending on your location, you may have rights to:

Access the personal data we hold about you.

Correct inaccurate or incomplete data.

Delete certain data, subject to legal/operational exceptions.

Restrict or object to processing in some cases.

Portability: receive a copy in a usable format (where applicable).

Withdraw consent for optional features (e.g., device location, marketing).

To exercise rights, contact acc@dhtechs.net

. We may request verification of your identity and your relationship to the account (End User or Provider). Some requests may be limited by law or our legitimate needs (e.g., tax records, security logs).

Location permissions: You can enable/disable device location in your OS/app settings at any time.

Notifications/communications: Manage preferences in the app or device settings; note we may still send transactional or service messages.

12) Cookies & similar technologies (Dashboard web)

Our web Dashboard may use cookies and similar technologies to:

keep you signed in,

remember preferences,

measure performance, and

improve security.

You can change cookie settings in your browser. Disabling certain cookies may affect functionality.

13) Provider responsibilities

Providers are independent controllers of any End-User Data they export or use outside Redak (e.g., in their own CRM or messaging tools). Providers must:

Obtain and honor necessary consents/permissions,

Only use End-User Data for legitimate purposes related to reservations or customer service,

Comply with applicable privacy and communications laws, and

Keep exported data secure and up to date.

14) Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you within Redak or by email. Your continued use of Redak after changes take effect means you accept the updated Policy.

15) Contact us

Diamond Steel

City: Riyadh, Saudi Arabia

Email: acc@dhtechs.net

If you have questions about this Policy or our data practices, please contact us at the email above.