This policy explains what we collect when you use our website or a loyalty programme running on Walaa, why we hold it, and what you can ask us to do with it.
Last updated 1 January 2026Walaa Rewards is a product of Royex Technologies LLC, Business Bay, Dubai, United Arab Emirates. Where you interact with a loyalty programme built on our platform, the brand running that programme is the data controller and we act as their processor. Where you interact with this website directly, we are the controller.
We collect only what a loyalty programme needs to function, plus the minimum required to run our website.
To operate the loyalty programme you joined, to calculate and honour points and rewards, to prevent fraud and abuse of a programme, to meet legal and accounting obligations, and to respond when you contact us. We do not sell personal data, and we do not use programme member data to market our own services.
Our platform is hosted in the GCC by default, and we can meet market-specific data residency requirements where a client needs them. Access is role-based, restricted to staff who need it, and every access and change is logged.
Membership records are kept for as long as the programme is active and the member account is open, then for the period the operating brand is required to retain them for accounting and audit purposes. Website enquiry data is kept for 24 months. After that, records are deleted or irreversibly anonymised.
You can ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to a particular use.
If we change how we handle personal data in a way that affects you, we will update this page and change the date at the top. Material changes affecting programme members are communicated through the brand running the programme.
Questions about this page? Write to legal@walaarewards.com or through our contact page.
