Privacy & data collection
Last updated: 19 October 2026 · Version 2026-10-19
This notice explains how we handle website visitor and applicant information, and how you can exercise your choices.
1. Member community
The community is accessible to approved, activated members. Optional profile photos, display names and contributions are visible to other members. Photos are stored privately and can be replaced or removed; upload previews re-encode the photo before storage. professional details are shared only when enabled in your community profile. Display names can be searched to mention a member. Tags and helpful-reaction totals are visible; saved posts and followed discussions are private to your account. Optional in-community notifications cover replies, mentions and followed discussions. Moderators only manage assigned topics and do not gain access to membership applications or campaigns. Reports are private to authorised moderators; reporter identities are not displayed in the moderation queue. Warnings and temporary topic restrictions record a reason and an audit entry; affected members can see their notices. You can remove reactions, unfollow discussions, edit or delete your contributions and update profile visibility and notification preferences. Deleted contributions are hidden; operational records and moderation audit logs follow the existing retention and rights process.
2. Search interests and discovery statistics
Unified search runs locally on your device; the search sentence is not sent to an AI provider or stored in analytics. With your separate optional search-measurement consent, we record recognised interest categories, whether there were exact results, detail opens and registration-link clicks. A random browser identifier is used for up to 30 days. Signed-in approved members are distinguished from other visitors, without storing account identity in these events. Records are retained up to 90 days; administrative reports hide groups with fewer than five distinct browsers. Counts describe observed behaviour, not completed registration or attendance. Turn off the search statistics checkbox to stop future collection.
3. AI-assisted membership review
Authorised reviewers may request an advisory analysis using OpenAI. Only recognised professional selections (sector, field, qualification, career stage, experience, selected interests and goals, research stage and preferred participation format) are sent. Names, contact details, demographic fields, profile URLs and all free-text answers are excluded. The analysis is private to authorised reviewers, stored with a generation date, and may be corrected. It does not make membership decisions, verify qualifications, enrol anyone in campaigns or share profiles with institutions. Membership decisions remain human. Contact info@manarauae.com for questions or correction requests.
4. Membership needs assessment
Membership applications include contact details, professional background, interests and a required LinkedIn profile or organisation-page URL. Optional needs-assessment questions help programme planning and aggregate reporting for prospective sponsors and grant providers. They are self-reported baseline information, not verified outcomes. We do not publish individual answers, contact details or profiles to sponsors through these reports. Small groups require disclosure review before external sharing. Social-media featuring is a separate Yes/No choice and is not required for membership. You can update that preference in your profile or contact info@manarauae.com to withdraw it. Existing application snapshots remain as the dated baseline; contact us to correct the original submission.
5. Internal membership follow-up
Authorised reviewers may record private review notes, a responsible reviewer, priority and a follow-up date. These support human review and member service; assignment does not grant account access or approve membership. Notes and changes are audited and restricted to authorised reviewers. Saved review filters are private to the reviewer who created them. Do not include unnecessary sensitive information in notes. Records remain subject to the retention, correction and access processes in this notice.
6. Optional campaign clicks and membership attribution
A separate, optional email preference controls click measurement and membership attribution; existing open-measurement permission does not enable this. With permission, campaign links route through a unique delivery reference before redirecting to the original HTTPS destination. We store first and last click times and click counts, not IP addresses or location. Automated link scanners may create observations. A verified MANARA membership application or activation may be associated once with the latest consented click in the preceding 30 days, using the authenticated account or verified email. External event registrations are not inferred. Click observations stop after 90 days or when permission is withdrawn; links remain usable. Recipient-level results are restricted to authorised administrators and previous records follow the retention and correction process.
7. Optional campaign open measurement
Campaign email consent and open-measurement consent are separate choices. When you allow measurement and an administrator enables it for a campaign, the message contains a unique small image. Loading it records the delivery reference, first and latest observation time and number of image loads. This feature does not store IP addresses, device fingerprints or location. Image blocking can hide opens and automatic image loading can create observations without reading; these are estimates, not proof that you read a message. Only authorised administrators can review recipient-level observations. You can turn measurement off in Member email preferences without turning campaign emails off; future observations stop. Tracking links stop recording after 90 days. Existing observation records follow the site retention and correction process. Older emails without tracking cannot be measured retroactively.
8. Optional demographics and interest tags
You may optionally share an age band, nationality/citizenship, gender, time based in the UAE, programme languages, interest keywords and skills. We do not request a date of birth or identity documents. These fields help plan relevant programmes and aggregate community reports; they do not determine automatic membership approval. Leave them blank or choose Prefer not to say where available. Demographic answers and free-text self-descriptions are private to you and authorised administrators, not public member profiles or sponsor contacts. Self-descriptions are excluded from statistics. Update or remove optional answers through your profile. Internal reports distinguish original applications from updated profiles; exported breakdowns suppress counts below five. Authorised administrators must review re-identification risks before external sharing. Unsaved form answers are held only on the open page, not in a persistent browser draft.
9. Member identifiers and invitations
Each activated member receives a permanent membership number and a separate random invitation code. If you open an invitation link, this browser remembers the code for up to 30 days to preserve it through sign-in. You may remove it before submitting. The invitation is attributed only at your first membership application. Authorised administrators can review both parties to verify eligibility. The inviter sees an anonymous referral date, points status and awarded amount, not your name, email, profile or membership decision. Referral points require approval and activation of both memberships and administrator verification.
10. Points and optional rewards
To operate the member points programme, MANARA stores activity submissions and evidence provided by members or administrators, verification decisions, points transactions, reward requests, accepted reward terms and notification read status. Activity evidence is restricted to authorised administrators; your points and reward history are private to you and authorised administrators. Rewards are optional and announced inside the member dashboard. We do not automatically share your professional profile with reward providers. Provide only the participation information needed for verification, without sensitive documents or information about unrelated people. Contact info@manarauae.com for corrections or withdrawal requests. Audit records are retained for integrity and reviewed under the retention process described in this notice.
11. Member accounts
Supabase manages member authentication. Google sign-in shares your verified email and account identifier with MANARA. Essential browser storage maintains your sign-in session until you sign out or it expires. Membership applications, professional profiles, consent records and reviewer decisions are stored in the website database. Resend delivers an application-details notification to the authorized membership mailbox at membership@manarauae.com. Profiles are private; institutional sharing and public directories are disabled. Automated checks flag missing or inconsistent information, but authorized reviewers make final decisions. You can withdraw membership consent in your account settings or contact info@manarauae.com for access, correction or deletion requests. Withdrawal disables member access and creates a retention review record; it does not instantly erase audit records.
12. Optional visitor statistics
With your permission, MANARA records page views, sections viewed and share-button clicks using a random browser identifier retained on your device for up to 30 days. Statistics are approximate browser counts, not identified people. We do not store your name, email or IP address in analytics records. Records are retained for up to 90 days and are visible only to authorised administrators and moderators. You can decline or withdraw permission using Privacy settings on the homepage; this stops future collection and removes the local identifier. Security rate limiting uses short-lived hashed network identifiers, and administrator sign-in uses an essential secure session cookie lasting up to eight hours.
13. Waitlist email notifications
Waitlist requests are saved in the site database. When configured, Resend processes an email copy for membership@manarauae.com. Resend also processes an acknowledgement email to the address supplied by the applicant; this does not confirm membership.
14. Who handles your data
MANARA operates this website and handles the requests submitted here. For privacy enquiries, correction, deletion or withdrawal of consent, contact the MANARA site administrator at info@manarauae.com. This is the current contact for this website.
15. What we collect
Forms collect your name, email, phone or WhatsApp number, organisation, field, membership type, qualification, experience, sectors of interest, requested opportunities, optional social profile links and any message you provide. We separately record your optional permission to be featured on MANARA social media; a blank answer is not permission. You may withdraw this permission by contacting us. Event and opportunity submissions can also include a title, category, link and optional coupon. We record a request identifier, submission time, review status, notification status and a record of consent with the policy version. Hosting and email services may process technical connection information such as IP addresses and request logs. Please do not submit identity documents, medical records, payment details or other sensitive personal information in these forms.
16. Why we use it
We use submitted information to review your application, respond to you, manage the waitlist and assess submitted listings. Required fields are identified in the form; without them we cannot process the request. Your consent covers these purposes, not unrelated advertising or a public member profile. Joining the waitlist does not create a paid membership. We do not sell submitted personal data.
17. Where your information goes
Requests are stored on the Sites / Cloudflare hosting infrastructure. Authorised staff review requests. Resend delivers waitlist notifications to membership@manarauae.com and acknowledgements to applicants. Other contact and listing requests use FormSubmit for email delivery. Published listings exclude private submission messages and contact information.
18. International processing
Our hosting and email providers may process information outside the UAE; this website does not promise UAE-only storage. Cross-border processing must meet applicable UAE legal requirements and safeguards. You can contact us before submitting to ask about the providers and available transfer information. Form submission is not a waiver of your statutory protections.
19. Retention and security
We retain information only for the request, follow-up and any applicable legal obligations. Retention depends on whether your request is pending, resolved or subject to a legal requirement; the site does not currently apply an automatic deletion schedule. Contact us to request deletion from the active database and administration mailbox. Provider backups and logs follow their own retention cycles. Access controls restrict administration to authorised users, but no online service can guarantee absolute security.
20. Your choices and rights
Subject to applicable law, you may request information about processing, access or a copy of your data, correction, erasure, restriction or cessation of processing, and portability where applicable. You may withdraw consent at any time by emailing us; this does not affect prior lawful processing. You may also raise a complaint with the competent UAE authority. We may need proportionate identity verification before acting on a request and will explain any legally required retention.
21. Cookies and external links
Optional visit statistics and campaign measurement are described above; advertising trackers are not added. Hosting, security and administrator sign-in services may use necessary cookies or technical storage. External event websites and social platforms have their own privacy practices when you follow their links. Any future non-essential tracking or additional use of your information will require an updated notice and consent where required.
22. UAE legal framework and updates
This notice is prepared with reference to Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, where applicable. Applicable sector-specific or free-zone rules take precedence where relevant. We will update this page when data practices change. The policy date identifies the notice presented for new submissions.
Contact us about your data: info@manarauae.com
Official Personal Data Protection Law — UAE Legislation ↗
Optional email campaigns / حملات البريد الاختيارية
MANARA sends optional campaigns only after a separate email opt-in. Campaign audiences may use membership status, professional interests, qualifications, location and points. You can change your preference in your account or unsubscribe through the link in each campaign. Essential account notices remain separate. Delivery status, consent changes and administrator actions are recorded; optional open and click measurement require their own separate preferences, as described above.
تُرسل الحملات الاختيارية بعد موافقة مستقلة. يمكن تخصيص الجمهور وفق حالة العضوية والاهتمامات والمؤهلات والموقع والنقاط. يمكنك تعديل التفضيل من الحساب أو إلغاء الاشتراك عبر رابط الرسالة. تبقى رسائل الحساب الأساسية منفصلة. تُسجّل حالات الإرسال وتغييرات الموافقة وإجراءات الإدارة؛ يحتاج القياس الاختياري للفتح والنقر موافقات مستقلة كما هو موضح أعلاه.
MANARA app & device notifications
You may install the site on your device. Only a generic offline page is cached; account pages and forms are not cached for offline use. Device notifications are optional and separate from email, and require browser permission. We store a device subscription endpoint linked to your account and your membership/reward preferences. Delivery requests pass through your browser’s push provider and contain no profile data. A generic notice is displayed. Disable notifications in account or browser settings. Subscriptions not updated for 180 days and delivery records older than 30 days are removed during notification processing.