1.1 This is the Privacy Policy (“Privacy Policy”) for the Platform hosted at www.comfi.ai (“Site”) and the Comfi app “App” (together, the “Platform”). The Platform is operated by or on behalf of Comfi FZ-LLC as Comfi (“Comfi”, “we”, “us” and “our”). This Privacy Policy applies to individuals and companies browsing our Platform, and individuals or companies using our services and our Platform (“you” and “your”). We are committed to protecting and respecting your privacy.
1.2 This Privacy Policy sets out:
1.3 Please read the following carefully to understand our views and practices regarding your personal and/or business data and how we will treat it.
1.4 By using our services you acknowledge you have read and understood our Privacy Policy.
We will collect and use the following categories of personal and/or business data from you, from other organisations and automatically via our Platform – for example, when you fill in any of the application forms on our Platform. We explain what we do with each of the categories in the next section.
2.1 Comfi does not access, collect, or store your payment information. We use a payment processor to manage this for us.
2.2 You provide us with the following categories of information about you or your company.
This is information about you that you give us, usually via our Platform, or by phone, e-mail or otherwise. It includes information you provide when you register to use our Platform, subscribe to our service, pay for an installment, submit a query, and when you report a problem with our Platform.
2.3 Information we receive from other sources.
We are working closely with third parties (including, for example, business partners, sub-contractors in technical, payment, advertising networks, analytics providers, and search information providers).
We may receive information about you from other organisations, including:
2.4 Information we collect about you from your use of our Platform:
We will automatically collect information from you each time you use our Platform.
(a) Technical information
Technical information may include the Internet protocol (IP) address, login information, browser type and version and, browser plug-in types and versions, device settings (e.g. language, time zone), device or similar IDs, operating system and platform, hardware version, mobile operator or ISP.
(b) Information about your visit
Information about your visit may include the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call our customer service number or social media handle used to connect with our customer service team and our social media accounts.
(c) Location data
Location data includes specific geographic locations (such as through GPS, Bluetooth, or Wi-Fi signals) which we use to provide location services (if you ask or permit us to), so that we can deliver content, advertising or other services that are dependent on knowing where you are, like checking for fraudulent transactions.
Location data may be collected in combination with device ID, so we can recognise your mobile browser or device when you return to the Service.
(d) Information on In-app Browser Usage: We also collect information regarding your activities within our in-app browser. This includes tracking the URLs you visit while using the in-app browser. This data helps us understand your preferences and improve your user experience.
We use information held about you in the following ways, and we explain the legal reason (or ‘lawful basis’) for each use as well. For more information about what these legal reasons mean, please read the next section: ‘Legal reasons explained’.
3.1 If you browse our Platform, we use automatically collected information to:
We do this with your consent, where required, or in our legitimate interests, where we have considered these are not overridden by your rights.
3.2 If you create and use your account with us, we use your Contact, Identity, Log- in, Financial, Identity Verification and Automatically Collected information to:
We may conduct some profiling and automated decision-making to help us determine whether or not to verify and approve your account, including on the basis of your credit history. If you would like more information about our automated-decision making practices, or would like to request a manual review of any decision, please contact us.
3.3 When you contact or engage with us, we use your Contact, Identity, Log-in, Financial, Verification and Communications information to:
3.4 If we share marketing or advertising with you, we may use your Contact, Marketing, Advertising and Automatically Collected information to:
We may conduct some profiling and automated decision-making to help us provide you with relevant information, suggestions and recommendations for products.
We do this if permitted in our legitimate interests (where we have considered these are not overridden by your rights) or with your prior consent (where required by law).
You can opt-out of further marketing at any time by selecting the “unsubscribe” link at the end of all our promotional updates and marketing to you, or by sending us an email at [email protected]
3.5 When we maintain and improve our Platform, we may use your Account, Marketing Advertising and Automatically Collected information (including Location data) to:
We do this in our legitimate interests, where we have considered these are not overridden by your rights. We also do this to comply with our legal obligations.
3.6 Information we receive from other sources
We may combine this information with information you give to us and information we collect about you in our legitimate interests (where we have considered that these are not overridden by your rights). We will use this information and the combined information for the purposes set out above (depending on the types of information we receive);
3.7 Aggregated Data
We may pseudonymise and/or anonymise and aggregate any of the above categories of information.
What does this mean?
We use aggregated information (such as statistical data or customer profile information) to help us analyse how visitors use our site (including behaviour patterns and the tracking of visits across multiple devices) and interact with us on social media (for example, statistics about demographics or users per country), provide more useful information to our customers, and understand which of our services are of most interest.
We may provide aggregated data (for example, demographic statistics about our customers) to our partners or other third parties in exchange for access to the products or services that they provide, or to promote our Platform.
Where such aggregate information is derived from your personal or business data we will take steps to pseudonymise or anonymise your personal or business data, so that you cannot be easily re-identified from aggregate information retained or used for these purposes.
3.8 Legal reasons (or ‘lawful bases’) explained
In accordance with applicable data protection law, we rely on one or more of the following
grounds when processing your data:
Our legitimate interests include:
We may share your personal and/or business information:
(a) with any member of our group (which includes our subsidiaries and our ultimate holding company and its subsidiaries, who support our processing of personal and/or business data under this Notice, who we support in processing your personal and/or business data, or who we otherwise share your personal and/or business data with.
(b) with selected third parties we work with. Our selected third parties may include:
(i) Organisations who process your personal and/or business data on our behalf and in accordance with our instructions and the Data Protection Law. This includes supporting the services we offer through the Platform in particular those providing website and data hosting services, providing fulfillment services, distributing any communications we send, supporting or updating marketing lists, facilitating feedback on our services and providing IT support services from time to time. These organisations (which may include third party suppliers, agents, sub-contractors and/or other companies in our group) will only use your information to the extent necessary to perform their support functions.
(ii) Advertisers and advertising networks that require the data to select and serve relevant adverts to you and others. We do not disclose information about identifiable individuals and/or businesses to our advertisers, but we will provide them with aggregate information about our users. We may make use of the personal and/or business data we have collected from you to enable us to comply with our advertisers’ wishes by displaying their advertisement to that target audience and subject to the cookie section of this Notice.
(iii) Analytics and search engine providers that assist us in the improvement and optimisation of our site (this will not identify you as an individual).
(iv) Merchants and business partners who provide services to you, and with whom we have entered into agreements in relation to the processing of your personal and/or business data a list of whom can be provided upon request.
(v) Payment processing providers who provide secure payment processing services.
(vi) Debt collection agencies, should your account fall into arrears, in order to collect the amount you owe us from you.
(c) any person to whom disclosure is necessary to enable us to enforce our rights under this Privacy Notice or under any agreement we have with you, or to protect our rights or the rights of third parties. This includes exchanging information with law enforcement agencies (including regulators) or other similar government bodies
(d) where required to do so by court order or where we are under a duty to disclose or share your information in order to comply with (and/or where we believe we are under a duty to comply with) any legal obligation.
(e) in the event that we sell or buy any business or assets, in which case we will disclose your personal and/or business data to the prospective seller or buyer.
If we share your personal and/or business information with our group companies or other third parties, we will take steps to protect your personal and/or business information in our contractual agreements with these third parties, and to require that they have appropriate technical and organisational security measures in place, in compliance with applicable data protection laws.
5.1 We are based in the UAE. Our parent company is Comfi FZ-LLC in Dubai Internet City.
5.2 We may transfer your information outside the UAE. If we do, we will take all steps reasonably necessary to ensure that your data is subject to appropriate safeguards, such as relying on a recognised legal adequacy mechanism, and that it is treated securely and in accordance with this Privacy Notice.
5.3 We may transfer your personal and/or business information outside the UAE:
(a) in order to store it.
(b) in order to enable us to provide goods or services to you and fulfill our contract with you. This includes order fulfillment, processing of payment details, and the provision of support services.
(c) in order to facilitate the operation of our group of businesses, where it is in our legitimate interests and we have concluded these are not overridden by your rights.
5.4 We may transfer your personal and/or business information as detailed below.
6.1 Payment details you provide will be encrypted using secure sockets layer (SSL) technology before they are submitted to us over the internet.
6.2 Payments made on the Platform are made through our payment gateway provider. You will be providing credit or debit card information directly to our payment gateway providers which operate a secure server to process payment details, encrypting your credit/debit card information and authorising payment. Information which you supply is not within our control and is subject to their own Privacy Notice and terms and conditions.
7.1 We take reasonable steps, including physical, technical and organisational measures, to protect your personal and/or business information from unauthorised access and against unlawful processing, accidental loss, destruction and damage.
7.2 All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology.
7.3 Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal and/or business data, we cannot guarantee the security of your data transmitted to our Platform; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
7.4 External links
Our site may, from time to time, contain links to external sites. If you follow a link to any of these websites, please note that these websites have their own privacy policies. Please check these policies before you submit any personal and/or business data to these websites. We are not responsible for the privacy policies or the content of such sites.
7.5 Child safety
Protecting the safety of children when they use the Internet is important to us. Our Platform is intended for use only by persons who are at least 18 years of age. You may not use our Platform unless you are 18 or older.
8.1 We will keep personal and/or business data for:
(a) as long as you have an account with us in order to meet our contractual obligations to you, and
(b) for five years after that to identify any issues and resolve any legal proceedings.
8.2 If you opt-out from us sending you promotional updates and marketing, or object to any other processing of your personal and/or business information, we may keep a record of your opt-out or objection so we can ensure we respect your direct marketing preferences.
8.3 We may also retain aggregate information beyond this time for research purposes and to help us develop and improve our services. You cannot be identified from aggregate information retained or used for these purposes.
Any changes we make to our Privacy Notice in future will be posted on this page and, in relation to substantive changes, will be notified to you by e-mail. This Notice was last updated on 17 June 2023.
Questions, comments and requests regarding this Privacy Notice are welcomed and should be addressed to: [email protected]
COMFI FZ-LLC
Registration number 102557
Office no.: HD15C
Building: In5 Tech
Internet City, Dubai, United Arab Emirates
Last updated: @June 17, 2023