Privacy Policy

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

• “Personal Data” means any information relating to an identified or identifiable natural person, as defined under Article (1) of the PDPL.
• “Processing” means any operation or set of operations performed on Personal Data using any electronic means or otherwise, including collecting, storing, recording, organising, structuring, adapting, modifying, retrieving, consulting, using, circulating, sharing, disclosing, transmitting, distributing, coordinating, merging, restricting, blocking, erasing or destroying Personal Data, or creating forms derived from such Personal Data.
• “User” “you” or “your” means any individual who accesses, registers with, or otherwise uses the Ravewards Platform.
• “Data Controller” shall have the meaning assigned to it under the PDPL.
• “Processor” means any third party that processes Personal Data on behalf of Ravewards Technologies in accordance with the PDPL.

We may collect the following categories of Personal Data when you access or use the Ravewards Platform:

We process Personal Data for the following purposes:

• To create, register and manage User accounts on the Ravewards Platform.
• To verify User eligibility and age requirements for access to venues, events and services accessible through the Ravewards Platform.
• To track venue check-ins, loyalty points, rewards and tier status associated with User accounts.
• To analyse usage of the Ravewards Platform to improve functionality, performance and User experience.
• To send service-related communications, updates and notifications relating to the use of the Ravewards Platform.
• To detect, prevent and investigate fraud, misuse or unauthorised activities on the Ravewards Platform.
• To provide personalised rewards, promotions and offers based on User activity and engagement with the Ravewards Platform.
• To comply with applicable legal and regulatory obligations in the United Arab Emirates.

We may use automated systems to analyse certain User activities on the Ravewards Platform for the following purposes:

• Calculating loyalty points.
• Determining User tier levels within the loyalty programme.
• Tracking venue check-ins and reward activity.
• Providing personalised rewards, promotions or offers based on User engagement with the Ravewards Platform.

Such automated processing is used solely to operate the loyalty features and functionality of the Ravewards Platform and to enhance the User experience.

Where required under applicable law, User consent will be obtained before carrying out such processing.

We process Personal Data in accordance with applicable data protection laws in the United Arab Emirates. Depending on the circumstances, Personal Data may be processed:

• Where the User has provided consent.
• Where processing is necessary to provide services requested through the Ravewards Platform.
• Where processing is required to comply with applicable legal obligations.
• Where processing is necessary for legitimate business interests, provided such interests do not override the rights of Users.

The Ravewards Platform is intended only for individuals who are 21 years of age or older. We do not knowingly collect or process Personal Data from individuals under the age of 21.

If we become aware that Personal Data has been collected from an individual below this age, we may take appropriate steps to delete such data and restrict access to the Ravewards Platform.

We may share Personal Data in the following circumstances:

• Service Providers: Third-party service providers that support the operation of the Ravewards Platform, including hosting, analytics, technical infrastructure, communication services and security services. Such providers process Personal Data only on our instructions and in accordance with applicable data protection laws.
• Partner Venues and Participating Businesses: Participating venues and partner businesses where reasonably necessary to facilitate venue access, check-ins, loyalty rewards, promotions, reservations or redemption of benefits made available through the Ravewards Platform. Where possible, such partners will receive limited account identifiers (such as a username or Rave ID) rather than a User’s full personal details.
• Legal and Regulatory Authorities: Where disclosure is required to comply with applicable laws, regulations, court orders or requests from competent authorities in the United Arab Emirates.
• Business Transfers: In connection with a merger, acquisition, restructuring or sale of assets involving Ravewards Technologies.

We do not sell Personal Data to third parties.

We retain Personal Data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including to:

• Maintain and operate User accounts on the Ravewards Platform.
• Provide loyalty services, rewards and check-in functionality.
• Comply with applicable legal and regulatory obligations in the United Arab Emirates.
• Resolve disputes, enforce our agreements and protect the security and integrity of the Ravewards Platform.

Where Personal Data is no longer required for these purposes, it will be securely deleted or anonymised, unless retention is required under applicable law.

Users may request deletion of their Personal Data in accordance with the rights described in this Privacy Policy.

Subject to applicable law, Users may have the following rights in relation to their Personal Data:

• Right to access Personal Data held about them.
• Right to request correction of inaccurate or incomplete Personal Data.
• Right to request deletion of Personal Data where processing is no longer necessary.
• Right to withdraw consent where processing is based on consent.
• Right to object to processing in certain circumstances permitted under applicable law.

Users may submit requests relating to these rights by contacting: support@ravewards.com

We may take reasonable steps to verify the identity of the requesting User before responding to such requests.

If you believe your Personal Data has been processed in violation of applicable law, you may also submit a complaint to the competent regulatory authority in the United Arab Emirates.

Ravewards Technologies implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, loss, misuse, alteration or disclosure.

Access to Personal Data is restricted to authorised personnel and service providers who require such access for the operation, maintenance and improvement of the Ravewards Platform.

All personnel and service providers who process Personal Data on behalf of Ravewards Technologies are required to maintain appropriate confidentiality and data protection safeguards.

Personal Data may be processed or stored on systems operated by Ravewards Technologies or its authorised service providers.

In certain circumstances, Personal Data may be transferred to or processed in jurisdictions outside the United Arab Emirates where service providers or infrastructure are located.

Where such transfers occur, Ravewards Technologies will take appropriate steps to ensure that Personal Data is protected in accordance with applicable data protection requirements.

In the event of a Personal Data breach, Ravewards Technologies will take appropriate steps to investigate, contain and mitigate the impact of the incident.

Where required under applicable law, Ravewards Technologies may notify affected Users and the relevant regulatory authorities in accordance with applicable legal requirements.

The Ravewards Platform may integrate with or rely on third-party services, such as:

• Cloud hosting providers
• Payment processors
• Analytics services
• Customer relationship management systems
• Communication platforms

Such service providers may process Personal Data on behalf of Ravewards Technologies solely for the purpose of providing services required for the operation of the Ravewards Platform.

Where payments are processed through third-party payment providers, such providers may collect and process payment information directly in accordance with their own privacy policies. These service providers are required to process Personal Data in accordance with applicable data protection obligations.

Ravewards Technologies may update or modify this Privacy Policy from time to time to reflect changes in legal, regulatory or operational requirements.

Any updates will be published on the Ravewards Platform. Continued use of the Ravewards Platform after such updates constitutes acceptance of the revised Privacy Policy.