Privacy Policy

Kaza is academy management software. Academies use it to run CRM, fees, VAT invoices, coach attendance and WPS payroll. That means the platform can hold children's data, parent contact details, and staff payroll information. This policy explains who controls that data, what we collect, and how to reach us.

1. Who is responsible

For student, parent and staff records entered by an academy, the academy is the Data Controller. Kaza acts as a Data Processor on the academy's instructions. For the academy owner's own account (name, email, phone used to sign up), Kaza is the controller.

2. Information we collect

From academy owners: name, email, phone, academy name, and usage of the product. Through the academy: player and parent records (which may include children's names, dates of birth, Emirates ID uploads, medical notes and contact details), fee and invoice history, coach attendance, and payroll fields needed to generate a WPS SIF file (for example bank details and contracted salary).

Children's data is collected only because an academy enrolls a player. The academy must have a lawful basis and parental consent where required. We do not use children's data for our own marketing.

3. How we use information

We use it to operate the service, generate invoices and WPS SIF files for the academy, communicate about the product, keep the platform secure, and meet UAE law. We do not sell personal data.

4. Third-party services

We may share data with processors that host or send communications for the service (for example database hosting, email, and WhatsApp Business API). They may only use the data to provide that function.

5. UAE PDPL rights

Under UAE Federal Decree-Law No. 45 of 2021 (PDPL), people can ask to access, correct or delete their personal data. Parents and staff should first contact their academy (the controller). Academy owners can contact Kaza at info@kaza.ae.

6. Retention and security

We keep data for as long as the academy account is active and as required by UAE law (including tax and payroll records). After an academy closes its account we delete or anonymise personal data except where we must keep it for legal reasons. We use access controls, encryption in transit, and tenant isolation so one academy cannot read another academy's records.

7. Contact

Privacy questions: info@kaza.ae. Founder: Muhammad Ramees.