DONE MENAT FZCO
Effective Date: 24th April 2026
This Data Processing Addendum (“DPA”) forms part of the agreement between:
This DPA governs the processing of Personal Data by DONE on behalf of the Client in connection with the DONE platform and services.
By using the services of DONE and by visiting our website and apps you agree to be bound by the following DPA.
DONE processes Personal Data only to:
May include:
Processing continues for the duration of the agreement and until the end of the applicable billing cycle after termination.
DONE shall:
The Client shall:
The Client is solely responsible for the data within its academy and applications.
DONE may use third-party providers for hosting, storage, analytics, and infrastructure. DONE ensures such providers maintain reasonable data protection standards.
Data may be processed outside the Client’s jurisdiction. By using DONE, the Client authorises such transfers.
DONE maintains commercially reasonable safeguards, including access controls, encryption where appropriate, and infrastructure security practices.
However, absolute security cannot be guaranteed.
In the event of a breach, DONE will take reasonable steps to investigate and mitigate and notify the Client where legally required.
DONE will assist the Client, where reasonably possible, in responding to access, deletion, and data portability requests.
Upon termination, data remains accessible until the end of the billing period. Thereafter, data may be deleted or made inaccessible.
To the fullest extent permitted by law, DONE shall not be liable for indirect or consequential damages, data loss beyond its reasonable control, or client misuse of the platform.
The Client may request reasonable information regarding DONE’s data protection practices. DONE is not required to allow intrusive audits.
This DPA is governed by the laws of the United Arab Emirates. Jurisdiction: Courts of Dubai.