Privacy Policy

This policy explains what data Qallora Trends ("Qallora", "we") collects, why, who we share it with, and the rights you have. It covers our marketing site and the Qallora Trends application.

1. Who we are

Qallora Trends is a market-intelligence platform for aesthetic clinics in the GCC, operated by 030 Group. For any privacy question or request, contact Qallora@030.group.

2. Data we collect

• Account & workspace data, name, email, password (stored only as a salted hash), your clinic/organisation profile, offers, locations, team members and the settings you enter.
• Free-report enquiries, the clinic name, contact name, email, phone/WhatsApp, website/social links and treatments you submit through the "Get Report" form.
• Usage & device data, anonymous analytics about how the site is used (see §4), plus standard server logs (IP, user-agent, timestamps) needed to run and secure the service.
• Public social signals, Qallora analyses public social posts and market pages to produce trend intelligence. This is public content about the market, not personal data you provide.

We do not ask for, and Qallora Trends is not intended to store, patient health records.

3. How we use it

• To provide the service: run scans, generate opportunity cards, and deliver your workspace.
• To respond to your free-report enquiry and contact you about it.
• To secure the service, prevent abuse, and meter usage against your plan.
• To improve the product using aggregated, anonymous analytics.

4. Cookies & analytics

Essential cookies (e.g. your login session) are always set so the app can function. Anonymous analytics (Google Analytics) load only after you accept in the cookie banner, decline and no analytics cookies are set. You can change your choice by clearing site data. We do not use advertising or cross-site tracking cookies.

5. Who we share it with (sub-processors)

We do not sell your data. We use trusted providers strictly to run the service:

• Railway, application hosting and database.
• Google (Gemini / Analytics), AI analysis of public social content; anonymous site analytics.
• ScrapeCreators, collection of public social posts.
• Stripe, subscription billing (card data is handled by Stripe, never stored by us).
• Resend, transactional email (verification, password reset, notifications).

We may also disclose data where required by law.

6. Data location & UAE PDPL

Some processing and storage may occur outside the UAE via the providers above. We handle personal data in line with the UAE Personal Data Protection Law (PDPL) principles, lawful, limited, and secure processing, and apply appropriate safeguards to any cross-border transfer.

7. Retention

We keep account and workspace data for as long as your account is active, and enquiry data for as long as needed to follow up and for our legitimate business records. You can ask us to delete your account and associated personal data at any time.

8. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and object to or restrict certain processing. Email Qallora@030.group and we will respond within a reasonable period.

9. Security

We use HTTPS/HSTS, hashed passwords, scoped access controls, and least-privilege data handling. No system is perfectly secure, but we work to protect your data and to notify you of material incidents as required.

10. Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.