Privacy policy
khatm is a digital loyalty card service operated by stelleninfotech, licence no. [licence number], Tax Registration Number (TRN) [TRN], Dubai, United Arab Emirates. Privacy contact: [email protected]
1) For store customers (card holders)
Who is responsible for your data
The store you signed up with is responsible for your data. khatm only runs the system on the store's behalf, under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).
What we collect
- Your first name, email, mobile number and language.
- Your stamp and reward history (time, branch and cashier).
- Whether you added the card to your phone wallet.
We don't collect payment details, ID, or your location.
Why
To issue your card, count your stamps and rewards, and send you card updates and offers from the store on the card. You can turn card notifications off at any time in your phone wallet's settings for the card.
Who sees it
The store and its staff (your number is partly hidden from them), and the technical providers that run the service. Some providers are outside the UAE. We never sell your data.
How long
Your data stays while the store subscribes to khatm, and we delete it within 90 days of the store cancelling.
Your rights
You can ask for a copy of your data, a correction or deletion, or stop offers. Ask the store, or email [email protected]. Deletion closes your card and cancels your stamps. Removing the card from your wallet only stops notifications; it doesn't delete your data with us.
Age
The service is not aimed at anyone under 18.
2) For merchants (store owners)
For your account data you are our customer and we are responsible for it. Your customers' data we process on your behalf under the data processing agreement in the terms of use.
| Data | Use | Provider |
|---|---|---|
| Email, mobile number, business name, logo, branches and their locations | Login, running the account, card design | Cloudflare, Neon |
| Cashier names and PIN (hashed) | Cashier login, activity log | Cloudflare, Neon |
| Billing details | Subscription and invoices. Card details stay with Stripe; we don't store them | Stripe |
| Email and language | Login codes and service emails. Marketing emails include an unsubscribe link | Loops |
- Retention: account data stays for the life of the subscription and is deleted within 90 days of cancelling. Invoices are kept as long as tax law requires.
- Security: each merchant's data is isolated, PINs are hashed, logins lock after 5 wrong attempts, and every action is logged.
- Your rights: a copy, correction or deletion of your data at [email protected]. We reply within 30 days.
- Cookies: only those needed for login and the session.
3) Signing up on this website
When you register your interest on getkhatm.com we collect your email, mobile number, business name, business type, page language, and how you found us. It is stored with Loops so we can contact you about khatm, and you can unsubscribe from any email. The demo card on the home page runs only in your browser; we store nothing from it.
4) Data transfers outside the UAE
We use technical providers outside the UAE: Cloudflare (hosting), Neon (database), WalletWallet, Apple and Google (wallet passes), Loops (email) and Stripe (payments). Each receives only the data it needs to run the service.
5) Changes
We email merchants 14 days before any material change and update the date at the top of this page.
6) Law
This policy is governed by the laws of the UAE, and the courts of Dubai have jurisdiction.