Privacy Policy
Last updated: 29 September 2026
This policy explains what personal data Rilaih collects when you use rilaih.com or work with us, why we collect it, who we share it with, how long we keep it and the choices you have. We have written it to match what our website and systems actually do.
1. Who we are
Rilaih is a trading name of Thinkron FZC, Dubai, UAE ("Rilaih", "we", "us"). We decide how and why your personal data is used, which makes us the controller of that data under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the "PDPL") and similar laws.
For any privacy question or request, email contact@rilaih.com or WhatsApp +971 50 481 7082.
2. What we collect
When you send us an enquiry
Our contact form, cost calculator, pricing and quote forms, service enquiry forms and chat all collect some of the following, depending on the form:
- your name, email address, phone number and whether you prefer WhatsApp
- your company name, country, city, nationality and preferred language
- the service you are interested in, your message, and any answers you give on the form (for example your business activity, number of visas or budget)
- whether you agreed to be contacted and to receive marketing, and the exact wording you agreed to
Recorded automatically with an enquiry
- the page you sent it from, the page you first arrived on and the website that referred you
- campaign tags in the link you followed, if any (such as utm_source or gclid), so we know which campaigns bring enquiries
- your browser type (user agent)
- a one-way scrambled code (hash) made from your IP address, used to stop spam and abuse. We do not store the IP address itself.
Your account
If you create an account, we store your name, email address and sign-in history. If you sign in with Google, Google shares your name, email address and profile picture with us (see section 10). Passwords are handled by our sign-in provider and stored only in hashed form; we never see them.
Documents
When you use our document builder, we store your answers and the finished document so you can download it again. When you upload a document for review, we store the file so our team, or the licensed professional handling your request, can review it.
Payments
Card payments are processed by Stripe. We receive confirmation of the payment, the amount and a payment reference. We never receive or store your full card number.
When you become a client
Company formation, visas and bank accounts need identity and company documents, which authorities, banks and anti-money-laundering rules require. These can include passport copies, photos, Emirates ID, proof of address, shareholder and director details, source-of-funds information and business plans. If you apply for a family or dependent visa, this can include your family members' details.
Messages and calls
We keep the emails and WhatsApp messages you send us, and notes our team makes of calls and meetings with you.
3. How we use your data
- To answer your enquiry and give you a quote, because you asked us to.
- To provide the services you order, under our contract with you.
- To run your account and keep your documents available, under our contract with you.
- To take payments and keep accounting and tax records, because the law requires it.
- To carry out identity and anti-money-laundering checks, because UAE law requires them for the services we provide.
- To keep the website secure and filter spam and fraud, in our legitimate interest. Our spam filter is automatic, but a person can review anything it flags.
- To understand which pages and campaigns bring enquiries, in our legitimate interest, using only the page and link details listed above. We do not use analytics or advertising trackers.
- To send you news and offers, only if you ticked the box to receive them. You can unsubscribe at any time.
We do not sell your personal data, and we do not make decisions about you that have legal or similar effects based only on automated processing.
4. Emails we send
After you send an enquiry, we email you a one-off confirmation and notify our team. This does not add you to a mailing list. Emails are delivered by Twilio SendGrid.
6. Where your data is stored
Our database and stored files are kept in Mumbai, India, with Supabase and Amazon Web Services. Some of our providers, such as Stripe, SendGrid, Google and Vercel, also process data in other countries, including the United States and the European Union.
When we transfer personal data outside the UAE, we do so as the PDPL allows, for example under contracts in which our providers commit to protect it, or where the transfer is needed to provide the service you asked for.
7. How long we keep your data
- Enquiries and client data: one year after our last contact with you or after our work together ends. Then we delete it.
- Spam: enquiries our filter marks as spam are deleted.
- Your account and documents: until you ask us to delete them. When you do, we confirm the request with you, then remove your account and documents within 30 days.
- Records the law requires: where UAE law requires us to keep certain records for longer, such as invoices, tax records and anti-money-laundering checks, we keep only those records, only for as long as required, and use them for nothing else.
9. How we protect your data
Data travels between your browser and our systems over encrypted (HTTPS) connections, and our providers encrypt stored data. Only authorised team members, who must sign in, can see enquiries and client records, and our database is closed to public access. IP addresses are stored only as one-way hashes. No system is completely secure. If a breach puts your data at risk, we will tell you and the UAE Data Office as the law requires.
10. Google user data
If you sign in with Google, Google shares your name, email address and profile picture with us. We use them only to create your Rilaih account, sign you in and keep your account secure. We do not use Google user data for advertising, we do not sell it, and we do not share it with anyone except the service providers in section 5 that run your account.
Rilaih's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Rilaih's access at any time from your Google Account settings.
11. Your rights
Under the PDPL you can ask us to:
- give you a copy of the personal data we hold about you
- correct data that is wrong or incomplete
- delete your data, where we are not required to keep it
- restrict or stop certain uses of your data, including marketing
- send your data to you or another organisation in a usable format
- withdraw a consent you gave, at any time (this does not affect what we did before)
If you are in the European Union or the United Kingdom, you have similar rights under the GDPR and can complain to your local data protection authority. If you are in India, you have rights under the Digital Personal Data Protection Act, 2023, including grievance redress and nominating someone to act for you.
To use any of these rights, email contact@rilaih.com or WhatsApp +971 50 481 7082. It is free. We may ask you to confirm your identity, and we will reply within 30 days. If you are unhappy with our answer, you can complain to the UAE Data Office.
12. Children
Our services are for adults aged 18 and over, and we do not knowingly collect children's data directly from them. If you apply for a family or dependent visa through us, you may give us your children's details; we use them only for that application.
13. Changes to this policy
When we change this policy, we update the date at the top. If a change is significant, we will also tell account holders and clients by email before it takes effect.
14. Contact us
Thinkron FZC
Sharjah and Dubai, United Arab Emirates
Email: contact@rilaih.com
WhatsApp: +971 50 481 7082