Privacy Policy

— 01

Introduction

DREDOTT ("the Platform", "we", "us") is an online marketplace for property rentals, car rentals, and local services in Sharm El-Sheikh, Egypt. We are committed to protecting your personal data in accordance with Egyptian Personal Data Protection Law No. 151 of 2020 and its executive regulations. By using DREDOTT, you agree to the terms of this Privacy Policy.

— 02

Data We Collect

— 03

How We Use Your Data

• Create and manage your account and secure access to it.
• Publish your listings and match them with suitable guests or clients.
• Process bookings and send related notifications.
• Manage subscriptions and listing capacity.
• Send in-platform notifications (configurable in settings).
• Detect fraud, policy violations, and protect platform users.
• Improve platform performance using anonymised analytics.
• Comply with legal and regulatory obligations.

— 04

Data Sharing

We do not sell your personal data to any third party. We share data only in these cases: • Between users: When initiating a booking or enquiry, the property owner or service provider may see your name and phone number to complete the interaction. • Infrastructure services: The technical service providers we rely on (see "Third-Party Services" section). • Legal requests: When legally required or ordered by a competent court.

— 05

Admin Access

To maintain platform quality, resolve technical issues, and protect users, platform administrators with elevated privileges (Super Admin) have the ability to: • View account data for technical support and verification purposes. • Enter an owner's portal in view-only mode to understand an issue reported by the user — without the ability to modify any data. • Review listings before publication to ensure compliance with platform terms. Every admin access operation is automatically recorded in an internal audit log, including who performed it, when, and for what purpose.

— 06

Third-Party Services

— 07

Cookies & Tracking

We use the minimum cookies necessary for operation only: • Session cookies: To keep you signed in and maintain your session state. • Security cookies: Such as admin authentication tokens. We do not use advertising or third-party tracking cookies, and we do not share browsing data with ad networks.

— 08

Data Security

• All connections are encrypted via HTTPS at all times.
• Passwords are hashed with bcrypt and never stored in plain text.
• Row-Level Security on our database — every user sees only their own data.
• Short-lived JWT authentication tokens that expire automatically.
• Automatic screen lock for administrators after a period of inactivity.
• Two-factor authentication (TOTP) for all admin accounts.

— 09

Data Retention

• Account data: Retained while your account is active. • Deleted listings: Removed within 30 days of a deletion request. • Booking records: Retained for 3 years for legal and accounting purposes. • Admin audit logs: Retained for 1 full year. • Inactive accounts: May be deleted after 24 months of inactivity, with prior notice.

— 10

Your Rights

• Access: Request a copy of your personal data stored with us.
• Correction: Amend inaccurate data via your account page or by contacting us.
• Deletion: Request deletion of your account and associated data.
• Objection: Object to data processing for marketing purposes.
• Portability: Request a machine-readable copy of your data.

— 11

Contact Us

For any privacy-related enquiry or to exercise your rights, contact us: 📧 Email: info@dredott.com 💬 WhatsApp: available on our Contact page 📍 Sharm El-Sheikh, South Sinai Governorate, Arab Republic of Egypt We will respond to privacy requests within 30 days of receipt.