KKafuly.

Privacy Policy

Last updated: July 2026

Kafuly Ltd (“Kafuly”, “we”, “us”), a company registered in the Abu Dhabi Global Market (ADGM), operates kafuly.com — a marketplace connecting buyers with training providers and professional-services firms in the United Arab Emirates. This policy explains what personal data we process and your rights under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“PDPL”). ADGM entities are additionally subject to the ADGM Data Protection Regulations 2021.

1. Data we collect

  • Account data: name, work email, company, and role, when you register.
  • Enquiry & RFP data: the contact details and requirements you submit when you request a booking, quote or post an RFP.
  • Provider data: for listed providers, business details, accreditations and contacts (business, not consumer, information).
  • Usage data: privacy-friendly, aggregated page/interaction events (no advertising trackers). Favourites and recently-viewed are stored in your browser.

2. How we use data (lawful basis)

We process personal data to provide the service (perform our contract with you), to route your enquiries to the provider(s) you choose, to operate accounts and security, and — with your consent — to send you updates. Enquiries are routed only to the provider(s) you select; we do not sell your data or blast it to unrelated parties.

3. Sharing

When you submit an enquiry or RFP, the relevant details are shared with the provider(s) you contacted so they can respond. We use Supabase (database/auth) and Netlify (hosting) as processors under appropriate safeguards. We do not sell personal data.

4. Storage & security

Data is stored in a managed PostgreSQL database with row-level security, encrypted in transit (TLS) and at rest. Access is role-based and audited. For UAE public-sector engagements requiring in-country data residency, we can provision a UAE-region deployment — contact us.

5. Your rights (PDPL)

You may request access, correction, deletion, or restriction of your personal data, object to processing, or withdraw consent. Signed-in users can edit their profile and delete their saved data from the account page. To exercise other rights, email privacy@kafuly.com.

6. Retention

We retain personal data only as long as needed to provide the service and meet legal obligations, then delete or anonymise it.

7. Cookies

We use only essential storage (authentication session, and local preferences such as language, favourites and compare selections). We do not use third-party advertising cookies.

8. Contact

Data protection queries: privacy@kafuly.com. General: contact us.

9. Data controller

The data controller is Kafuly Ltd, registered in the Abu Dhabi Global Market (ADGM). Registered office: Al Maryah Island, Abu Dhabi, United Arab Emirates. ADGM commercial registration number: to be inserted on the certificate of incorporation.

Provided for transparency; recommend a final review by counsel and insertion of the ADGM registration number before public launch.