Legal
Privacy Policy
Effective date: 30/07/2026. This policy is written for a UAE-based compensation platform serving organizations across the GCC.
1. Scope
This Privacy Policy explains how Qeemly collects, uses, stores, shares, and protects personal data when people visit our website, request a demo, create an account, or use Qeemly's compensation intelligence platform in the UAE and across the GCC.
Qeemly is a business-focused software service. In many cases, our customers submit workforce and compensation-related information to us so they can benchmark pay, manage approvals, and run compensation workflows. Where a customer uploads employee or contractor information into the service, that customer remains responsible for deciding why the data is processed.
2. Who this policy applies to
This policy applies to website visitors, prospective customers, customer administrators, authorized users, and individuals whose data is included in customer-submitted records.
If your employer or another organization gives you access to Qeemly, that organization may separately explain how your data is collected and used within its own HR, finance, or compensation processes.
3. Data we collect
- Identity and contact details, such as your name, work email address, company name, job title, and support or sales correspondence.
- Account and usage information, such as login activity, device/browser information, IP address, session data, and product interaction history.
- Customer Data uploaded to the service, including compensation records, job levels, role mappings, location data, workforce planning inputs, and related internal notes or approval data.
- Website and marketing information, including cookie-related signals, page visits, and campaign attribution where permitted by applicable law.
4. How we use personal data
- To provide, secure, and support the Qeemly platform and related services.
- To create and deliver compensation benchmarks, analytics, reports, and workflow outputs requested by customers.
- To authenticate users, prevent misuse, investigate incidents, and protect the confidentiality and integrity of the service.
- To communicate about onboarding, support, service updates, product changes, legal notices, and commercial requests.
- To improve our products, infrastructure, reporting quality, and customer experience.
- To comply with applicable legal, regulatory, tax, accounting, or law enforcement obligations.
5. Our role and the customer's role
When Qeemly processes account, billing, support, and website information for its own business operations, Qeemly acts as the controller of that personal data.
When a customer uploads employee, candidate, or compensation data into Qeemly, the customer is the controller and Qeemly generally acts as a processor or service provider, processing data on the customer's documented instructions and the applicable commercial agreement.
6. Legal bases and permissions
Qeemly processes personal data where processing is necessary to provide the service, enter into or perform a contract, comply with legal obligations, protect the service and our customers, or where consent has been provided. In the UAE and across the GCC, the exact legal characterization may vary depending on the applicable privacy framework, the source of the data, and the parties involved.
If consent is required for a specific activity, such as optional marketing communications, you can withdraw that consent at any time without affecting prior lawful processing.
7. Sharing personal data
- Cloud hosting, infrastructure, analytics, communications, identity, and support vendors who help us operate the platform under confidentiality and security obligations.
- Professional advisers, auditors, insurers, and legal counsel where necessary for business operations, disputes, or compliance.
- Authorities, regulators, courts, or law enforcement where disclosure is required or reasonably necessary under applicable law.
- A purchaser, investor, or successor entity in connection with a merger, financing, acquisition, restructuring, or sale of assets, subject to appropriate confidentiality controls.
8. Cross-border processing
Qeemly supports customers operating in the UAE and the GCC, and personal data may be processed in the UAE or in other jurisdictions where our approved service providers operate. Where cross-border transfers occur, we use contractual, organizational, and technical safeguards designed to protect the data and keep the transfer proportionate to the service being delivered.
Customers with localization or residency requirements should raise them during procurement or onboarding so they can be addressed in the relevant order form or implementation scope.
9. Retention
We retain personal data only for as long as reasonably necessary to deliver the service, satisfy contractual commitments, resolve disputes, maintain security records, and comply with legal or regulatory obligations.
Retention periods differ depending on the nature of the data, the customer relationship, legal requirements, and whether data must be preserved for support, audit, or incident response purposes.
10. Security
Qeemly uses administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. Those measures include access controls, environment segregation, logging, vendor oversight, and security practices appropriate to the sensitivity of compensation and workforce information.
No internet-based system can be guaranteed to be fully secure, so customers and users should also maintain appropriate password hygiene, access controls, and internal governance.
11. Your rights
Subject to applicable UAE and GCC legal requirements, individuals may have rights to request access to personal data, request correction, request deletion, object to certain processing, restrict use in specific cases, or withdraw consent where processing depends on consent.
If Qeemly processes your data on behalf of one of our customers, we may direct your request to that customer so it can assess and respond in line with its own obligations.
12. Children
Qeemly is intended for business users and is not directed to children. We do not knowingly collect personal data from children in connection with the service.
13. Changes and contact
We may update this Privacy Policy from time to time to reflect product, legal, or operational changes. When we make material changes, we will update the effective date and take reasonable steps to notify customers where appropriate.
For privacy questions, requests, or complaints, contact us at hello@qeemly.com or through our contact page.
Contact us
Email hello@qeemly.com or visit our contact page if you need help with a privacy question or a data request.