Privacy Policy

1. Card and personal data

All credit/debit cards’ details and personally identifiable information will NOT be stored, sold, shared, rented or leased to any third parties.

ASHASH will not pass any debit/credit card details to third parties. Card data is captured directly by our PCI DSS compliant acquiring partner and is replaced with a token; we never see or hold full card numbers.

2. What we collect and why

We collect business and identity information required to open and maintain your account (company documents, licence details, owner and director identification), transaction data, and technical data such as device and log information.

We use this data to provide the service, meet our KYC / KYB, AML and sanctions obligations, prevent fraud, and improve our products. We do not sell personal data.

3. Security

ASHASH takes appropriate steps to ensure data privacy and security including through various hardware and software methodologies. However, ashash.com cannot guarantee the security of any information that is disclosed online.

Traffic is encrypted with TLS 1.3, sensitive fields are encrypted at rest, access is least-privilege and every action is logged to an audit trail.

4. Third-party websites

ASHASH is not responsible for the privacy policies of websites to which it links. If you provide any information to such third parties, different rules regarding the collection and use of your personal information may apply. You should contact these entities directly if you have any questions about their use of the information that they collect.

5. Sharing with partners and authorities

We share data only with our regulated banking, acquiring and compliance partners to the extent needed to deliver the service, and with regulators or law enforcement where we are legally required to do so.

6. Retention and your rights

Records are retained for the period required by applicable UAE and KSA financial regulations, typically five years after the relationship ends.

You may request access to, correction of, or deletion of your personal data (subject to our legal retention duties) by writing to compliance@ashash.com.

7. Changes to this policy

The website policies and terms & conditions may be changed or updated occasionally to meet the requirements and standards. Therefore, customers are encouraged to frequently visit these sections to be updated about the changes on the website. Modifications will be effective on the day they are posted.