Rakwa POS is a product of Rakeen Software. Trade licence [Trade licence number]. VAT TRN [VAT TRN].
1. Roles
For personal data in a customer's workspace (staff, guests, suppliers and users), the customer is the controller and Rakwa is the processor, acting only on the customer's documented instructions, including these terms and the settings the customer chooses in the product.
2. Scope of processing
- Purpose: providing Rakwa POS, including hosting, sync, backups, support, security and the features the customer uses.
- Data subjects: the customer's staff, guests and customers, suppliers and users.
- Data: names, contact details, order and loyalty history, reservations, attendance, payroll and WPS details, identity document references entered by the customer, device and audit logs.
- Duration: the subscription, plus the export and deletion period in the Terms.
3. Our commitments
- Process personal data only on the customer's instructions and in line with the UAE PDPL.
- Bind staff with access to confidentiality.
- Apply technical and organisational measures: encryption in transit, per-company isolation with row-level security, role-based access, two-step verification and passkeys, audit logs, monitored backups.
- Help the customer answer data subject requests and meet its security and breach duties.
- Notify the customer without undue delay after becoming aware of a personal data breach affecting its workspace.
4. Subprocessors
We use subprocessors for hosting, storage, e-mail and messaging, and error monitoring, under written terms with equivalent protection. The current list is available on request at privacy@rakwapos.com, and we will tell customers before adding a new one. Integrations the customer connects (delivery platforms, Qlub, accounting software) are the customer's choice and not our subprocessors.
5. Sovereign mode
In sovereign mode workspace data stays on the customer's Branch Box. Rakwa only receives licence renewal requests and, when the customer starts one, a time-limited support session.
6. Transfers
Where personal data is transferred outside the UAE, we do so only as the PDPL and its regulations permit.
7. Return and deletion
At the end of the subscription the customer can export its data. We then delete workspace data, subject to backup cycles and any legal duty to retain records.
8. Audits
We will provide information reasonably needed to show compliance with these terms. Sovereign customers may agree further audit terms in their order form.
Last updated: 5 November 2026.