How do I handle data protection (GDPR / UAE PDPL)?

If you collect personal information from customers, for example names, emails, phone numbers or payment details, you have obligations under the UAE's Personal Data Protection Law (PDPL), and under GDPR if you serve customers in the EU. Good hosting practices make compliance easier.

Practical steps on your Dirham A Day site:

• Encrypt everything in transit with your free SSL, so personal data submitted through forms and logins is protected. Force HTTPS site-wide.
• Secure the data at rest: strong passwords, two-factor authentication, correct file permissions, and a secured database.
• Keep off-site backups (DirhamVault) so you can recover data, and be able to restore or delete records on request.
• Publish a clear privacy policy explaining what you collect, why, and how people can request access or deletion.
• Collect only what you need and do not keep it longer than necessary.
• Use privacy-respecting cookie consent where required.

Please note we provide the secure infrastructure, but we cannot give legal advice; consult a qualified adviser for your specific obligations.

Our servers are managed with security controls (firewall, WAF, malware scanning) to help protect the data you hold. For questions about your hosting's security setup, contact our UAE-based team on WhatsApp +971 58 553 6767 or support@dirhamaday.ae. Manage your services at my.dirhamaday.ae.