1. Introduction

Huru is a payment solution provider. It offers a digital platform to enable banks and exchange houses to offer Services on its Platform. We understand the significance of safeguarding your personal information and please be assured that our commitment to ensure the privacy of your personal information is unwavering. Our Privacy Policy aims to ensure that your sensitive personal information remains secure and confidential. You can trust us to handle your Personal Information (as defined hereafter) with utmost care, robust security measures and industry best practices. With Huru, you can enjoy the Platform’s features and functionalities with ease, knowing that your personal information and privacy is treated with the seriousness it deserves.

2. User consent

1. By using this Platform, you consent to the collection, storage, usage, and processing of your Personal Information by us in accordance with this Privacy Policy. If you do not agree to the terms of this Privacy Policy, please do not use or continue using this Platform.
2. You have the right to withdraw your consent at any time by contacting us, and we will take the consequent reasonable measures. Please note that once you withdraw your consent to this Privacy Policy, we may be unable to provide you with the ongoing Services availed by you.
3. Notwithstanding anything in this clause 2, we may be required to retain your Personal Information in order to comply with necessary applicable legal or regulatory obligations.

3. Collection of personal information

1. By accessing or using the Platform, you consent to provide us with your Personal Information and agree to the terms of this Privacy Policy.
2. We may collect and receive Personal Information as outlined below from you when you access our Platform, register for your account (if applicable) with us or when you access the services of an external third-party service provider via the Platform.
3. We may monitor the use of the Platform through use of certain tracking mechanisms. This information helps us to build your profile, make the Platform user-friendly and render better Services to you.
4. We may collect the following Personal Information, including but not limited to, from you.
1. Login Information – Details of your name, mobile number, email address, application pin, fingerprint or any information we may ask of you at the time of SignUp and/ or Login to the Platform.
2. Transactional Information – Details of recipient/beneficiary such as the recipient/ beneficiary's name, address, national ID, bank account details, card number, wallet address or any other information that may be required at the time of the transaction. If we determine necessary, at our sole discretion, we may also request and collect additional information from third party entities. For instance, obtaining credit-related information from a credit bureau (to the extent permitted by applicable law) or verifying the identification details provided by you.
3. Identity Information – Details of date of birth, gender, relevant Emirates ID, employment status (including but not limited to company name, segment, designation, monthly income, sponsor details, monthly transaction volume), United Arab Emirates (UAE) residential address, passport details, liveness test or any other information that may be required at the time of identity verification for KYC compliance.
4. Device Information – Details of device attributes and identifiers, plugins, name of your mobile operator or ISP, SMS, device make, device model, device language, time zone, geographic location, IP address, connection speed, device application, contact list, or any information available on such device.
5. You acknowledge that it is your responsibility to ensure that your Personal Information is always accurate, complete, and up-to-date. We will also make reasonable efforts to give you the opportunity to request corrections to your Personal Information if it is found to be inaccurate.
6. You acknowledge that you are aware that you can request the deletion of your Personal Information, subject to applicable law. However, we reserve the right to reject deletion requests that contravene the terms of this Privacy Policy,  or any relevant applicable laws. We or the third party service provider, subject to applicable law, may also decline requests that require disproportionately extensive technical efforts, endanger the privacy of others, or are highly impractical.

Usage of personal information

1. You hereby agree and confirm that you understand that Huru's role is limited to providing a digital platform that enables banks and exchange houses to offer Services on the Platform. Please note that in the course of providing the Services to you, we will refer to the Personal Information as mentioned in Clause 3.4 above.
2. The Personal Information collected will be used for the purposes of enabling you to use the Services provided by us, help promote a safe experience of the Services availed by you, calibrate consumer interest in Services, inform you about promotional offers and new updates, troubleshoot problems, customize your user experience, detect and protect us against any error, fraud and other criminal activity, collect money, enforce our Service usage terms and conditions, and any such other purpose as described to you at the time of collection of such Personal Information.
3. The Personal Information collected will also be used for internal record-keeping purposes, to process billing and payment, including sharing of such information with third party service providers in connection with the Services.
4. You agree and acknowledge that we may periodically send emails and SMSs on the email address and mobile number you provide regarding transaction updates, notifications, alerts on action taken on Platform, information on  new products or services, special offers from us or other information about us that we think would be relevant in enhancing your user experience on Huru.
5. We may use your Personal Information to assist law enforcement agencies, respond to subpoenas, prevent fraudulent transactions, monitor against theft and criminal activity, and protect the rights, safety, and property of the Platform. Your information helps us to prevent you from fraudulent transactions, monitor against theft, and protect against criminal activity within the Platform, safeguarding the rights, safety, and security of user
6. You hereby understand and confirm that by accepting the terms of this Privacy Policy you explicitly authorise us with your own free will and choice to permit us to deal with your Personal Information for the provision of the Services to you. 
7. You hereby agree and confirm that your Personal Information will be processed, exchanged, and/ or provided to any third party only after taking your consent.
8. You hereby agree that if it is unclear about how your Personal Information is being used, you will have the option to discontinue accessing the Platform and/ or using the Services. 
9. You hereby agree that you have decided to avail the Services on your own volition without any undue pressure or influence from anyone representing / associated / affiliated with us.
10. In case of any grievance pertaining to usage of Personal Information feel free to contact us at dpo@huru.co.
11. We or the third party service provider may receive limited data for limited purposes to ensure that the Services are provided in an efficient manner. 
12. Please note that any of your Personal Information received by a third party entity from you in pursuance of availing the Services will be governed by the independent relationship between you and the concerned third party entity. We will not be liable in any manner for treatment of such Personal Information by the concerned third party entity. In this regard, you hereby agree and confirm that you will exercise your own independent judgment and fair assessment prior to establishing any independent relationship with the concerned third party entity and we will have no role to play in your interaction with such third party entity.
13. You hereby agree and confirm that the limited data, as mentioned in this clause 4, will be stored for a minimum period of 5 years after you end your relationship with us. 
14. You hereby agree and confirm that you are aware that you have the right to end your association with the Platform and with us and to ensure that the limited data provided to us is erased subject to applicable law. 
15. Please note that you may end your relationship with us by way of explicitly requesting us to delete your account with us by following the steps as indicated by Huru once we receive your account closure request.

5. Sharing and disclosing of your personal information

1. Disclosure: We will disclose or share your Personal Information, without notice, for the primary purposes for which it was collected in accordance with the terms of this Privacy Policy, including, without limitation:
   1. where you have consented to such disclosure or sharing without limitation by consenting to the terms of this Privacy Policy;
   2. where permitted under the applicable law and relevant data protection laws. For the purposes of this Privacy Policy, the UAE Data Protection Law in Article 2 has defined the personal data (which may include "Personal Information") as "any information that relates to an individual and by which that individual can be identified, directly or indirectly, including, but not limited to, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual";
   3. where it is necessary to protect and defend the rights or property of Huru, our third party service providers, and/or our other vendors in connection with the Services;
   4. where it is necessary to act under exigent circumstances to protect the personal safety of other users on the Platform, or the general visitors visiting the Platform;
2. Sharing your Personal Information with Service Providers / Partner: We work with certain third party service providers and/or partners to execute various functionalities of the Platform and to provide the relevant Services. We may share your Personal Information with such third party service providers and/or partners to ensure a better customer experience of the Platform.
3. Sharing your Personal Information with group companies: Subject to applicable law, we may share any data, including Personal Information that we collect from you with our group companies for product research and development; for making our Services better; and tailoring the Platform for your benefit. We will not use any of your Personal Information for upselling and/or cross selling without your prior consent.
4. Sharing your Personal Information with law enforcement agencies as and  when needed: We will share your Personal Information, without prior notice, on a request from any competent governmental authority or a court of competent jurisdiction or law enforcement agencies that we find appropriate or necessary in order to comply with applicable law.
5. Sharing your Personal Information during a change of our business:In the event of a reorganization, material financing event (as decided by us), material investment activity, merger, sale, joint venture, partnership, assignment, transfer, or other disposition of all or any of our business, assets or stock, or bankruptcy or similar proceedings, you hereby agree and confirm that we retain the right to enable the your Personal Information to be shared or transferred, subject to standard confidential agreements.

6. Storage, processing and retention of personal information

1. Personal Information collected by us may be stored and/or processed in the UAE where we or third party service providers maintain the relevant infrastructure. We will also be entitled to use Amazon Web Services to store your Personal Information. The storage location(s) are chosen to operate efficiently, improve performance, and reduce probability of errors for protecting your Personal Information in the event of an outage or other problems. We take steps to ensure that the Personal Information we collect is processed according to the provisions of the terms of this Privacy Policy.
2. We may retain your Personal Information for a minimum period of 5 years after you have ended your relationship with us as indicated in Clause 4.15 above. 
3. We will cease to retain your Personal Information or decide how the data would be associated with you as soon as it is reasonable to assume that such retention (as indicated in Clause 6.2 above) no longer serves the purpose for which the Personal Information was collected and is no longer necessary for legal or business purposes subject to applicable laws.

7. Minimum age requirement

Please note that you must be aged 21 years or older to use the Services. If we have accidentally obtained any information from you and you are under the age of 21 years, please inform us immediately. 

8. Data security

1. We strive to maintain the security and safety of your Personal Information in line with industry standards. Once we have received your information or Personal Information, we use strict procedures and security features as per industry standards and the relevant data protection laws to try to prevent unauthorised access, loss, misuse, unauthorised disclosure and dissemination, destruction and alteration of your Personal Information.
2. Steps taken to ensure Personal Information security:
   1. All data is securely hosted on third-party servers like Amazon Web Service.
   2. We employ industry standard data security practices to keep your Personal Information safe from cyber-attacks and threats.
   3. We undertake periodic assessments of the Platform’s safety and security practices. 
3. You are responsible to keep your credentials for accessing the Platform confidential. You should not share your password/application PIN or login details with anyone. We will not be responsible for any liability or obligation you may face if you share your confidential account details with anyone.
4. While we sincerely strive to protect your Personal Information, we cannot guarantee its security, or warrant that no harmful code will enter the Platform (including but not limited to viruses, bugs, trojan horses, spyware, malware, forks or adware). Transmission of information through the internet is not completely secure. You should be aware of the risks associated with disclosing any information or transacting over the internet or when using online portals. We urge you to take every precaution when using the internet to disclose your  Personal Information to us, including using a strong password/App PIN and changing your password/App PIN regularly. YOU AGREE AND ACKNOWLEDGE THAT ANY INFORMATION YOU PROVIDE US IS AT YOUR OWN RISK AND DISCRETION.
5. You agree to immediately notify us if you discover or otherwise suspect any security issues related to any of our Services or your account. You can contact us at help@huru.co.

9. User right

1. Right of access of information: You have the right to obtain information on the categories of Personal Information being processed, the purpose of the processing, the decisions made upon automated processing, and entities with whom the Personal Information is shared.
2. Right to Request Personal Information Portability: You have the right to receive your Personal Information in a structured and machine-readable format.
3. Right to Rectification or Erasure of Personal Information: You have the right to rectify inaccurate Personal Information and the right to delete your Personal Information and be forgotten, subject to provisions of applicable law and terms of this Privacy Policy.
4. Right to Restriction of Processing: You have the right to restrict and stop the processing of your Personal Information upon receiving the request from you, where it is inaccurate, or you would object to the purpose of the processing of the Personal Information.
5. Right of Processing and Automated Processing: You have the right to object to automated decisions made with respect to your Personal Information.
6. Right to complain to the relevant data protection authority: You have the right to complain to the relevant data protection authority in case of any contravention of any of the legal provisions of the applicable Data Protection Law.

10. Third party services

The Services offered on the Platform are either provided directly by us or through third party service providers. Use of such third party services will be subject to you for complying with any additional terms and conditions applicable to such services. You acknowledge and accept that we will not be responsible and will have no liability for any default or breach of the terms of third party services and any policies. Further, you accept and acknowledge that the third party service providers will be solely responsible for provision of such third party services, and you shall have no right against us for any act or omission of such third party service providers.

11. Third party links and sites

1. The Platform may contain links to or information about third-party websites that are not within our control. We are not responsible for the data privacy practices of any external third party website or platform.
2. You hereby agree that we are not liable in any manner, whatsoever, for any content as may be displayed on such third-party websites. Such links do not constitute an endorsement by us of those external websites.
3. You acknowledge that we are providing these links to you only as a convenience, and further agree that we are not responsible for the content of such external links.
4. If you follow a link to any third-party websites or platform, please note that we do not accept any responsibility or liability for the same. Please check the relevant policies before you submit any information to these websites, platforms, or to their affiliates.

12. Restricted jurisdiction

You agree that the intended recipient/beneficiary shall not be a citizen or resident of a geographic area in which access to or participation in such Service is prohibited by applicable law, decree, regulation, treaty, or administrative act.

13. Changes to this Privacy Policy

1. Notwithstanding anything contained in the terms of this Privacy Policy or terms of any other contract with you, we reserve the absolute and unconditional right to update, modify, delete, or otherwise make changes to the terms of this Privacy Policy at any time. Any changes to this Privacy Policy will be reflected in the Platform and will be notified to you from time to time as applicable. 
2. You can determine when this Privacy Policy was last modified by referring to the “Last updated on” legend at the beginning of this Privacy Policy. It shall be your sole responsibility to check this Privacy Policy periodically for changes, if any.
3. Any changes to this Privacy Policy will take effect and be binding on you from the time of posting the changes to the Platform. If you continue to use any Services following any changes to this Privacy Policy, you will be deemed to have accepted the changes to the terms of this Privacy and the updated version of this Privacy Policy.
4. If you do not agree with the changes to the terms of this Privacy Policy, please refrain from using our Platform. It is your responsibility to review this Privacy Policy (and the applicable conditions) from time to time.
5. If any provision of this Privacy Policy shall be held to be invalid, illegal, or unenforceable for any reason whatsoever, the invalidity, illegality, and enforceability of the remaining terms of this Privacy Policy shall not in any way be affected or impaired thereby.

14. Complaints

If you wish to lodge a complaint about how we process data, please write to us at help@huru.co. We will endeavour to respond to your complaints as soon as reasonably possible. 

15. Contact

Questions, comments and requests regarding the terms of this Privacy Policy are welcomed and should be addressed to help@huru.co. with the subject line “Query on Privacy Policy”.