Privacy Policy

1. Introduction

Model Service Society (MSS), a non-profit organization registered under the Community Development Authority (CDA), Government of Dubai, is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Integrated Social Service Management System (ISSMS) platform.

By using the ISSMS platform, you consent to the data practices described in this policy. We process your data in accordance with UAE data protection principles and applicable laws.

2. Information We Collect

We collect the following types of information:

2.1 Personal Information

• Full name (as per Emirates ID)
• Email address
• Mobile phone number
• Emirates ID number
• Date of birth
• Gender
• Nationality
• Marital status
• Blood group
• Residential address
• Passport details (optional)

2.2 Professional Information

• Occupation and employer details
• Professional qualifications
• Skills and areas of expertise

2.3 Membership and Activity Data

• Membership type and status
• Committee affiliations
• Volunteering history and hours
• Event participation records
• Payment and transaction history

2.4 Technical Data

• IP address and device information
• Browser type and version
• Login timestamps and session data
• Platform usage analytics

3. How We Use Your Information

We use your information for the following purposes:

• Processing and managing your membership application
• Verifying your identity and eligibility
• Coordinating volunteering activities and event participation
• Communicating important updates, events, and opportunities
• Processing membership fees and donations
• Issuing volunteering certificates and recognition
• Maintaining accurate membership records
• Complying with CDA reporting requirements
• Improving our services and platform functionality
• Ensuring platform security and preventing fraud

4. Data Sharing and Disclosure

We respect your privacy and do not sell your personal data. We may share your information only in the following circumstances:

• With CDA: As required for volunteer registration and compliance reporting
• With MSS Leadership: For membership management and activity coordination
• With Service Providers: Third-party services that help us operate the platform (e.g., payment processors, email services), bound by confidentiality agreements
• Legal Requirements: When required by UAE law, court order, or government authority
• Emergency Situations: When necessary to protect the safety of members or the public

5. Data Security

We implement robust security measures to protect your personal data:

• Encryption of data in transit and at rest
• Secure authentication mechanisms including Google OAuth
• Role-based access controls limiting data access to authorized personnel
• Regular security audits and vulnerability assessments
• Secure hosting infrastructure with industry-standard protections
• Employee training on data protection and confidentiality

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We encourage you to use strong passwords and keep your login credentials confidential.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, including:

• Active membership period plus 5 years after membership ends
• Volunteering records may be retained longer for certification purposes
• Financial records as required by UAE accounting regulations
• Legal compliance requirements may extend retention periods

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Update: Update your profile information through the platform
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Objection: Object to certain processing of your data
• Portability: Request transfer of your data in a structured format

To exercise these rights, please contact us using the information provided below.

8. Cookies and Tracking

Our platform uses essential cookies to:

• Maintain your login session
• Remember your preferences
• Ensure platform security
• Analyze platform usage to improve our services

You can control cookie settings through your browser, but disabling essential cookies may affect platform functionality.

9. Third-Party Services

Our platform integrates with the following third-party services:

• Google OAuth: For secure authentication
• Stripe: For payment processing
• Supabase: For database and authentication services

These services have their own privacy policies, and we encourage you to review them.

10. Children's Privacy

Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately.

11. Communication Preferences

We may communicate with you through:

• Email notifications about membership and activities
• SMS alerts for urgent communications
• WhatsApp messages for event coordination
• Platform notifications

All communications will remain professional, modest, and compliant with cultural and legal standards. You can manage your communication preferences through your profile settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of the platform after changes constitutes acceptance of the modified policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

14. Governing Law

This Privacy Policy is governed by the laws of Dubai, United Arab Emirates. Any disputes shall be subject to the exclusive jurisdiction of the courts of Dubai.