Sportra
Legal Document

Privacy Policy

Effective date: 1 January 2025
Last updated: March 2025
Jurisdiction: Qatar Free Zone

This Privacy Policy explains how United Systema QFZ LLC ("we", "us", "our"), the operator of the Sportra platform, collects, uses, stores, and protects your personal data when you access or use the Sportra mobile application or website at sportra.net.

We are committed to handling your data responsibly, transparently, and in compliance with applicable data protection laws. Please read this policy carefully. By using the Platform, you agree to the practices described herein.

01
Who We Are — Data Controller

The data controller responsible for your personal information is:

  • Company: United Systema QFZ LLC
  • Registration: Qatar Free Zone Authority — CR FZA #544
  • Address: Qatar Free Zone, State of Qatar
  • Email: [email protected]
  • Platform: sportra.net

As the data controller, we determine the purposes and means by which personal data is processed. For any data-related enquiries, please contact us at the email address above.

02
Data We Collect

We collect the following categories of personal data depending on how you interact with the Platform:

Category Examples
Identity data Full name, username, profile photo, date of birth
Contact data Email address, phone number, location
Account data Login credentials, account preferences, account type (user or service provider)
Transaction data Booking history, payment records, invoices, refund requests
Profile data Sports interests, skill level, preferences, reviews submitted
Technical data IP address, device type, browser type, operating system, session timestamps
Usage data Pages viewed, features used, search queries, interaction patterns
Communications Messages sent via the Platform, support requests, feedback
Service provider data Business name, credentials, service listings, pricing, payment details

We do not intentionally collect sensitive personal data such as health information, biometric data, or government identification numbers unless explicitly required and consented to.

03
How We Collect Your Data

We collect data through the following means:

  • Directly from you — when you register, complete your profile, make a booking, contact support, or submit a listing as a Service Provider.
  • Automatically — through our servers and application logs as you browse and interact with the Platform. This includes technical identifiers such as IP addresses, device identifiers, and session data collected to maintain platform security and performance.
  • Through cookies and similar technologies — as described in Section 10 of this Policy.

Our infrastructure incorporates industry-standard network security services that automatically process certain technical data, including IP addresses, to protect the Platform against malicious traffic, DDoS attacks, and unauthorised access attempts. This processing is carried out as part of our legitimate security operations.

04
How We Use Your Data

We use your personal data for the following purposes:

  • To create and manage your account and authenticate your identity.
  • To enable bookings, transactions, and communications between Users and Service Providers.
  • To process payments and maintain financial records.
  • To personalise your experience and surface relevant services and content.
  • To send you transactional communications such as booking confirmations, receipts, and account alerts.
  • To send you marketing communications where you have opted in, and to allow you to opt out at any time.
  • To operate, maintain, and improve the Platform and its features.
  • To detect, investigate, and prevent fraud, abuse, and security threats.
  • To enforce our Terms and Conditions and other policies.
  • To comply with legal obligations applicable to us in Qatar and relevant jurisdictions.
  • To respond to legal requests, court orders, or regulatory enquiries.
05
Legal Basis for Processing

We process your personal data on the following legal grounds:

Basis When it applies
Contractual necessity Processing required to fulfil your account, bookings, or service provider obligations
Legitimate interests Platform security, fraud prevention, network protection, service improvement, and analytics
Consent Marketing communications, optional cookies, and any processing you explicitly agree to
Legal obligation Compliance with applicable laws, regulatory requirements, and lawful government requests
06
Data Sharing & Disclosure

We do not sell, rent, trade, or share your personal data with any third party for any purpose, commercial or otherwise.

Your data is collected and used exclusively by United Systema QFZ LLC for the internal operation of the Sportra Platform. We do not engage external analytics providers, advertising networks, data brokers, or marketing platforms in connection with your personal information.

The only exceptions to this are narrow, legally mandated circumstances:

  • Legal and regulatory obligations — where we are compelled by applicable law, court order, or a lawful directive from a regulatory authority in Qatar or a relevant jurisdiction to disclose specific data. In such cases, we will disclose only the minimum information required and, where permitted by law, will notify affected users.
  • Protection of rights — where disclosure is strictly necessary to protect the safety, rights, or property of the Company, our users, or the public, and only to the extent required for that purpose.

In all other circumstances, your personal data remains within the exclusive control of United Systema QFZ LLC and is not accessible to, shared with, or transferred to any external party.

07
Infrastructure & Security

The Sportra Platform is hosted on servers located in the Middle East region, in proximity to our primary user base in Qatar and the wider MENA region. We have chosen regional infrastructure to minimise latency, improve performance, and maintain data closer to the jurisdiction of our operations.

We implement a layered security architecture to protect the Platform and your data, which includes:

  • Enterprise-grade network protection services that filter and mitigate malicious traffic, bot attacks, and distributed denial-of-service (DDoS) attempts before they reach our servers.
  • Encrypted data transmission using TLS/SSL protocols across all Platform communications.
  • Access controls and authentication mechanisms limiting data access to authorised personnel only.
  • Regular security monitoring, vulnerability assessments, and incident response procedures.
  • Separation of environments between production systems and internal development.

Certain technical data, including IP addresses and request metadata, is necessarily processed by our network security infrastructure as part of traffic inspection and threat mitigation. This is a standard and necessary component of operating a secure online platform.

Despite these measures, no system is entirely immune to security risks. We will notify affected users without undue delay in the event of a data breach that is likely to result in a high risk to their rights and freedoms, in accordance with applicable law.

08
Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the satisfaction of any legal, accounting, or reporting requirements.

Data type Retention period
Account data Duration of account plus 2 years after closure
Transaction & booking records 7 years (financial compliance)
Technical & security logs Up to 12 months
Marketing preferences Until opt-out or account closure
Support communications 3 years from last interaction

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with an individual.

09
Your Rights

Subject to applicable law, you have the following rights in relation to your personal data:

  • Right of access — to request a copy of the personal data we hold about you.
  • Right to rectification — to request correction of inaccurate or incomplete data.
  • Right to erasure — to request deletion of your data where there is no legitimate reason for us to continue processing it.
  • Right to restriction — to request that we limit the processing of your data in certain circumstances.
  • Right to data portability — to receive your data in a structured, machine-readable format.
  • Right to object — to object to processing based on legitimate interests, including for direct marketing purposes.
  • Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable timeframe and in any event within 30 days. We may need to verify your identity before processing your request.

Please note that some rights may be limited where we are required to retain data for legal compliance, the prevention of fraud, or the exercise of legal claims.

10
Cookies & Tracking Technologies

The Sportra Platform uses cookies and similar tracking technologies to support platform functionality, security, and analytics. A cookie is a small text file placed on your device when you visit the Platform.

Type Purpose
Strictly necessary Essential for platform operation, authentication, and security. Cannot be disabled.
Performance Collect anonymous data on how users interact with the Platform to help us improve it.
Functional Remember your preferences and settings to personalise your experience.
Security Support threat detection, bot mitigation, and integrity verification of Platform traffic.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality or security of the Platform. By continuing to use the Platform, you consent to our use of strictly necessary and security cookies.

11
Children's Privacy

The Sportra Platform is not directed at children under the age of 13, and we do not knowingly collect personal data from children under this age without verifiable parental consent.

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at [email protected] and we will take prompt steps to delete such data.

Users between the ages of 13 and 18 may use the Platform with the consent of a parent or legal guardian. Service Providers offering services to minors are solely responsible for complying with all applicable child protection laws and regulations.

12
Contact & Policy Updates

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us:

  • Email: [email protected]
  • Company: United Systema QFZ LLC
  • Address: Qatar Free Zone Authority, State of Qatar
  • Platform: sportra.net

We aim to respond to all privacy-related requests within 30 days of receipt. For complex or high-volume requests, we may extend this by a further 30 days and will notify you accordingly.

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will notify users via the Platform or by email prior to the changes taking effect. The "Last updated" date at the top of this page will always reflect the most recent revision.

Continued use of the Platform after any update constitutes acceptance of the revised Privacy Policy.