Privacy Policy

Effective date: April 15, 2026 · Last updated: April 15, 2026

1. Introduction

This Privacy Policy describes how [Your company legal name] (“we”, “us”) processes personal information when you use the IdControl mobile application (“App”) and related services. By using the App, you agree to this policy where permitted by law.

2. Data controller

The data controller responsible for your personal information is: [Legal entity name, address, country].

Contact for privacy inquiries: privacy@example.com (replace with your real privacy or DPO email).

3. Information we collect

Depending on how you use IdControl, we may process:

• Account and access data: username, credentials or authentication tokens, role or space assignment, and related event or venue identifiers provided by your organization.
• Registration and identity data: photos captured in the App, images of identity documents (for example Emirates ID or passport), and data extracted or entered during registration (such as name or document details where applicable).
• Operational data: badge or QR scan records, timestamps, device identifiers where required for sync or security, and diagnostic logs needed to operate the service.
• Technical data: app version, device type, and network connectivity information used to deliver uploads and offline handling.

4. How we use information

We use personal information to:

• Provide registration, verification, and event or venue access workflows;
• Store and transmit registration materials to systems operated by your organization or its service providers;
• Authenticate users and prevent misuse;
• Comply with legal obligations and enforce our terms.

5. Legal bases (where applicable)

If the EU/UK GDPR or similar laws apply, we rely on appropriate bases such as contract (providing the service), legitimate interests (security and integrity), or consent where we ask for it explicitly. Adjust this section with legal advice for your regions.

6. Sharing and subprocessors

We may share information with:

• Your organization or event operator that provisioned your account;
• Hosting and infrastructure providers (for example cloud storage or APIs used to transmit registration data)—identified in your agreements or internal documentation;
• Authorities when required by law or lawful requests.

We do not sell your personal information. List any named vendors (e.g. AWS region, API host) here after review: [Subprocessors to list].

7. International transfers

If data is processed in countries other than your own, we implement safeguards required by applicable law (for example standard contractual clauses). Update this with your actual transfer mechanisms.

8. Retention

We retain information only as long as needed for the purposes above, including legal, accounting, or security requirements. Retention periods may be set by your organization’s policy. Contact us or your administrator for specifics.

9. Security

We use administrative, technical, and organizational measures designed to protect personal information. No method of transmission over the internet is completely secure; we work to align with industry practices.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information, or to object to certain processing. To exercise rights, contact privacy@example.com or your event operator. You may lodge a complaint with a supervisory authority where applicable.

11. Children

The App is not intended for children below the age required by applicable law for consent without parental involvement. If you believe we have collected data from a child in error, contact us and we will take appropriate steps.

12. Changes

We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date. Material changes may require additional notice under local law.

13. Contact

Questions about this Privacy Policy: privacy@example.com

← Back to documentation home