Privacy notice

Who is responsible

The Sudanese Social Club in Dubai, a public-benefit association licensed by the Community Development Authority, holds the personal data this website collects. Write to the general secretariat about anything in this notice.

What we collect

We collect only what you send us. From the contact form: your name, email address, an optional telephone number, the subject you select and your message. From a job application: your name, email address, telephone number, optionally your nationality, residency status and current role, anything you write in the covering note, and any document you attach. From an account: your email address, your name, and optionally a telephone number and the emirate you live in. From a membership application: your name, date of birth, nationality, telephone number, the emirate you choose, and your Emirates ID. The next section covers the Emirates ID on its own, because it deserves one.

Your Emirates ID

A membership application asks for your Emirates ID number, its expiry date, and a scan or photograph of the card. The club needs them because its articles of association require the board to confirm that every member is of legal age and holds valid residency in the Emirates. We use them for that and for nothing else.

We do not store the number itself. We turn it into a one-way code that cannot be turned back into your number, and we keep only that. The code lets us confirm that one person does not hold two memberships. Nobody at the club, and nobody who obtained a copy of our database, can read your Emirates ID number back out of it.

The scan is held in private storage that is not reachable from the internet. It is not on the public site, and there is no address you or anyone else can visit to open it. When the administrator for your emirate reviews your application, the club creates a link that works for sixty seconds and then stops working. Every time somebody opens your document, the club records who did it and when.

Only the administrator for the emirate you chose can open your application, along with the club's two central administrators. An administrator for a different emirate cannot see that your application exists.

Why we collect it

We use contact messages to answer you and to pass your enquiry to the right secretariat. We use job applications to assess you for the role you applied to. We use account details to let you sign in and follow an application you have made. We use membership applications, including the Emirates ID, to decide whether the board can admit you under the articles of association. We do not use any of it for advertising, and we do not sell it or hand it to anyone for their own purposes.

How long we keep it

We hold a job application, and any document attached to it, for twelve months from the day you send it, then delete it. We hold a contact message for as long as the enquiry takes to settle, and no longer than twenty-four months.

A membership application, including your Emirates ID scan, is held for as long as you are a member. The club keeps it so that an administrator can confirm your standing while you belong to the club. When your membership ends, we delete the scan. If the board refuses your application, we delete the scan once the decision is final.

You keep your account until you ask us to close it. Where the law or the club's articles of association oblige the club to keep a record for longer, that obligation wins.

Who sees it

Your job application reaches the secretariat responsible for the role and the general secretariat. Your contact message reaches the general secretariat and whichever secretariat the subject concerns. Your membership application reaches the administrator for the emirate you chose, and the club's two central administrators, and nobody else. Outside the club, only the company hosting this site can touch any of it, under a written duty of confidence.

Your rights

You may ask what the club holds about you, ask us to correct it, ask us to delete it, or ask for a copy of it. Write to the general secretariat, and quote the reference number the form gave you if you still have it. If you want your Emirates ID scan removed while remaining a member, tell us, and we will explain what the board needs instead before we can act on it.

If something goes wrong

The club holds identity documents, so it takes the possibility of a breach seriously rather than assuming one cannot happen. If personal data held by the club is exposed, the general secretariat will tell the authorities the law requires it to tell, and will write to everyone affected, describing what happened, what it means for them, and what the club has done about it.

Cookies and measurement

This site sets no advertising cookie and no tracking cookie. Your browser remembers whether you chose the light or the dark appearance, and never tells us. Should the club add audience measurement later, it will use a cookieless tool that does not identify you, and we will rewrite this section before that tool goes live.

The map

The map showing the club office comes from Google. When a page carrying it loads, your browser fetches that map from Google, and Google can see the request. We hold the map back until you scroll near it, and we ask Google for nothing about you, but we cannot stop Google seeing the request itself. The pages that carry a map are the contact page, the footer, and each branch page.

Security

What you send travels over an encrypted connection into systems only named people can open. Your password is stored as a one-way hash, so nobody at the club can read it, and staff accounts need a second factor before they can reach any of this.

No system is perfect. Please do not send a password or a card number through this website. Send a scan of an identity document only where a form asks for it by name, which today means the membership application and nowhere else. The club will never ask you for your password, and will never ask you to email a copy of your Emirates ID.