Effective date: upon subscription activation
1. Who We Are
Handled. FZCO is a company registered in the International Free Zone Authority (IFZA), Dubai Silicon Oasis, Dubai, UAE. We operate the personal assistant coordination service available at behandled.me and via WhatsApp.
For the purposes of data protection, Handled. FZCO is the data controller of your personal information.
Contact: office@behandled.me
2. What Data We Collect
| Data Type | What We Collect | Why We Collect It |
|---|---|---|
| Identity | Full name, preferred name | To address you correctly and personalise service |
| Contact | WhatsApp number, email address | To deliver the service and send account communications |
| Location | Neighbourhood, work area, delivery addresses | To coordinate local vendor services |
| Preferences | Dietary requirements, budget preferences, favourite venues, transport preferences, language | To fulfil requests accurately without repeated questioning |
| Family & Personal | Birthdays, family member names, special occasions (provided voluntarily) | To provide proactive reminders and personalised assistance |
| Request History | Log of all tasks submitted, options presented, choices made | To improve future assistance and maintain continuity of service |
| Payment | Billing details processed via Stripe (we do not store card numbers) | To process subscription payments |
| Communications | WhatsApp message content related to service requests | To fulfil requests and maintain service quality |
| Usage Data | Request frequency, response times, plan usage | To manage service capacity and improve performance |
We collect only what is necessary to deliver excellent service. We do not collect sensitive personal data such as health records, financial account details, or government ID numbers unless specifically required to fulfil a request you have made (e.g., visa coordination).
3. How We Use Your Data
3.1 Service Delivery
Your data is used primarily to fulfil your requests — to find, book, and coordinate services on your behalf. The more we know about your preferences, the better and faster we can serve you.
3.2 Service Improvement
We use anonymised, aggregated data to understand how our service is used and to improve our processes, response times, and vendor network.
3.3 Communication
We use your contact details to communicate about your requests, send account-related notifications, and (with your consent) provide service updates or useful information about Handled.
3.4 Billing
Your billing information is used to process subscription payments via Stripe. Stripe's privacy policy governs how payment data is processed.
3.5 Legal and Compliance
We may process your data where required by UAE law, regulatory obligation, or to protect our legal rights.
4. Sharing Your Data
4.1 Vendors
To fulfil your requests, we share the minimum necessary information with vendors — for example, your name, delivery address, and order details when placing a booking or order. We do not share your full profile with vendors.
4.2 Service Providers
We use the following service providers who may process your data on our behalf:
- Stripe — payment processing
- Airtable — CRM and client profile management
- WhatsApp Business API — communication platform (Meta)
- Make.com — workflow automation
- Anthropic Claude API — AI-assisted task briefing (internal use only)
All service providers are bound by data processing agreements and are not permitted to use your data for their own purposes.
4.3 Legal Requirements
We may disclose your data to law enforcement, regulatory authorities, or courts where required by applicable law or to protect our legal rights.
4.4 Business Transfer
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to the same privacy protections.
5. Data Retention
We retain your personal data for as long as your subscription is active and for a period of 2 years after cancellation, to handle any post-service queries or disputes.
Request history and preference data: retained for the duration of your subscription plus 2 years.
Billing records: retained for 7 years as required by UAE financial regulations.
You may request earlier deletion of your data at any time (see Section 7).
6. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These include:
- Access controls — only authorised team members can access client profiles
- Encrypted data storage via Airtable's enterprise infrastructure
- Secure payment processing via Stripe (PCI-DSS compliant)
- Staff confidentiality agreements binding all Handled. team members
- Regular review of data access and security practices
No method of transmission or storage is 100% secure. In the event of a data breach that poses risk to your rights, we will notify you without undue delay and take all necessary remedial action.
7. Your Rights
You have the following rights in relation to your personal data:
| Right | What This Means |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Correction | Request correction of inaccurate or incomplete data |
| Deletion | Request deletion of your data, subject to legal retention requirements |
| Restriction | Request that we limit processing of your data in certain circumstances |
| Portability | Request your data in a structured, machine-readable format |
| Objection | Object to processing based on legitimate interests |
| Withdraw Consent | Withdraw consent for optional processing at any time |
To exercise any of these rights, contact us at office@behandled.me with the subject line "Data Request." We will respond within 30 days.
8. Cookies and Website
Our website (behandled.me) uses minimal cookies necessary for basic functionality. We use analytics cookies to understand website traffic patterns. You may disable cookies via your browser settings; this will not affect your ability to use the Handled. service via WhatsApp.
We use Meta Pixel on our website for advertising purposes. You may opt out of Meta's advertising cookies via your Meta account settings or via our cookie consent banner.
9. Children
Our service is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately at office@behandled.me.
10. International Transfers
Your data may be processed on servers located outside the UAE by our service providers (Airtable, Stripe, Make.com). Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated to active subscribers via WhatsApp or email with a minimum of 14 days' notice. The current version is always available at behandled.me/privacy.
12. Contact and Complaints
For any privacy-related questions or to exercise your rights:
- Email: office@behandled.me
- Subject line: "Privacy" or "Data Request"
- We aim to respond within 5 business days
If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.