Privacy Policy

Parent Company: Akaya Information Services WLL

Jurisdiction: State of Qatar

Effective Date: 10^th February 2026

Contact: support@malkiati.qa

This Privacy Policy explains how Malkiati.qa (operated by Akaya Information Services WLL, “Malkiati”, “we”, “us”) collects, uses, discloses, transfers, and protects personal data when you use our website and services (the “Platform”). It is designed to comply with the Qatar Personal Data Privacy Protection Law (PDPL) — Law No. 13 of 2016 and the regulator’s implementation guidelines.

Akaya Information Services WLL is the data controller for personal data processed via the Platform (except where we act as a processor for customersubmitted listing data, as described in our DPA).

We collect the following categories:

We process personal data where needed for:

Under PDPL, processing must respect privacy principles (transparency, purpose limitation, data minimisation, integrity/confidentiality, accuracy, storage limitation, accountability) and “lawful purposes”; PDPL guidelines also introduce programmatic requirements (e.g., records of processing, privacy notices, DPIAs) for regulated entities.

We apply encryption in transit and at rest for Personal Identification Information (PII) such as QID, CR, ID documents, phone, email, and WhatsApp numbers, with access restricted to authorised personnel for verification, compliance, safety, and fraud prevention. We maintain technical/organisational controls consistent with PDPL and regulator guidelines (e.g., riskbased measures, PDMS/records, DPIA where required).

We share personal data only as needed to operate the Platform or as required by law:

Crossborder access/hosting may occur. PDPL allows transfers where the data subject consents or where needed for a lawful purpose, provided transfers do not violate PDPL or cause gross harm; we use appropriate safeguards and require PDPLaligned contracts with processors.

Subject to PDPL, you may request to access, correct, delete, or object to processing of your personal data, and you may withdraw consent for direct marketing at any time. We will respond within applicable timeframes and may require verification.

We obtain optin consent before sending electronic direct marketing where required. You can opt out using the unsubscribe link or by emailing support@malkiati.qa. The PDPL guidelines clarify consent and transparency expectations for electronic marketing and privacy notices.

See our Cookie Policy for details about categories (strictly necessary, analytics, functionality, advertising), consent, and how to manage settings. The Electronic Transactions & Commerce Law includes consumer protection provisions and authenticity of ecommunications relevant to cookie banners and disclosures.

We retain personal data only as long as necessary for stated purposes or legal requirements. As a matter of Platform policy:

Retention aligns with PDPL principles (storage limitation & necessity).

While we employ reasonable safeguards, we do not guarantee perpetual storage or restoration of content (users should keep their own copies of important data).

The Platform is intended for users 18+. If you believe a minor has provided data, contact us to remove it.

If a personal data breach occurs that is likely to result in serious harm, we will notify the competent authority and, where required, affected individuals without undue delay, following PDPL guidelines (which introduce structured breachnotification practices).

We may update this Privacy Policy from time to time. Material changes will be posted on Malkiati.qa and, where practicable, notified electronically.

Akaya Information Services WLL (Malkiati.qa)

Doha, Qatar • support@malkiati.qa