Data Processing Agreement
Last Updated: May 24, 2026 | Version 1.0
⚠️ Important: This agreement explains how RentalFormz processes personal data when you use our platform.
1. Our Roles
RentalFormz as Data Processor
We process data only as instructed. We provide enterprise-grade security measures.
RentalFormz as Data Controller
For your account data (email, preferences) we're the primary controller.
2. Security Measures
Encryption
AES-256-GCM at rest, TLS 1.3 in transit
Access Control
Role-based access with least-privilege principle
Audit Logging
Immutable logs for all data access
3. Types of Data Processed
You may upload the following categories of personal data:
- Identity data (name, ID number, passport)
- Contact data (email, phone)
- Financial data (bank account, salary)
- Rental history (previous applications, dates)
4. Data Retention Period
Rental Contracts:
7 years (Legal requirement)
Payment Records:
7 years (Tax compliance)
Audit Logs:
7 years + (PDPL requirement)
5. Your Rights as a Data Subject
You have the following rights under UAE PDPL:
🔓 Right of Access
Request a copy of your personal data
✏️ Right of Correction
Request correction of inaccurate data
🗑️ Right of Deletion
Request account deletion (30-day grace period)
⚡ Right to Object
Opt-out of marketing or AI processing
How to Exercise Your Rights:
6. AI Processing
We may use AI to:
- Extract information from documents
- Classify documents (contracts, IDs)
- Detect duplicate applications
Note: You can disable AI processing anytime in your account settings.
7. Breach Notification
If we discover a security breach, we'll notify you within 72 hours with full details about the incident.
8. Contact Us
Document Control: Version 1.0 | Last Updated: May 24, 2026 | Compliance: PDPL Articles 21-23