Effective date: 20 August 2026
iCity Services (“iCity”, “we”, “us”, or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you use the iCity mobile application (“App”) and website https://icity.qa (“Website”).
1. Who We Are
iCity Services is a facility management and hospitality services company established in the State of Qatar. For the purposes of applicable data protection laws, iCity Services is the controller of personal data processed through the App and Website.
Contact details:
iCity Services
الطابق 20، برج QIB (ب)، الدفنة، الدوحة، قطر
Email: privacy@icity.qa
2. Accounts
The App does not offer self-registration. User accounts are created and managed by iCity or an authorised administrator, employer, property manager, or client organisation.
The App may provide different functions depending on your role, including resident, client, employee, manager, technician, or administrator.
3. Personal Data We Collect
Depending on the App features available to you, we may collect and process:
a. Identity and contact information
Full name, mobile number, email address, employee or resident identifier, national ID/QID where required for verification, property or unit address, and profile information.
b. Account and service information
Username, account status, role, login activity, service requests, work orders, maintenance tickets, bookings, contracts, property details, service history, ratings, comments, and support requests.
c. Employee and HR information
Where employee self-service features are enabled, this may include employment-related information, leave requests, certificate requests, salary advance or loan requests, repayment-related information, and other records submitted through the App.
d. Payment and transaction information
Where payment services are made available, we may receive transaction records, invoices, refunds, and payment status information. iCity does not store full payment-card numbers on its own servers.
e. Device, technical, and diagnostic information
Device type and model, operating system version, app version, IP address, device and app identifiers where available, notification token, session identifier, usage information, login activity, error reports, crash reports, and diagnostic logs.
f. Communications
Messages, support correspondence, complaints, feedback, ratings, and information you provide when contacting us.
4. How We Use Personal Data
We use personal data to:
– create and manage accounts provided by iCity or an authorised organisation;
– provide facility management, maintenance, hospitality, resident, client, employee, and HR-related services;
– manage service requests, tickets, bookings, contracts, and related communications;
– process payments, invoices, or refunds where applicable;
– send service updates, account messages, and push notifications;
– provide customer support and respond to requests;
– maintain security, prevent fraud, investigate misuse, and protect our systems;
– diagnose technical problems, improve App performance, and analyse service quality;
– comply with legal, regulatory, accounting, tax, employment, and contractual obligations; and
– establish, exercise, or defend legal claims where necessary.
5. Push Notifications
The App may use Firebase Cloud Messaging to send service, account, and operational notifications. This involves processing a notification token and limited device/app information so that notifications can be delivered to your device.
You may manage notification permissions through your device settings. Disabling notifications may prevent you from receiving important service or account updates.
6. How We Share Personal Data
We share personal data only when necessary and for the purposes described in this Policy. Recipients may include:
– authorised iCity personnel;
– property managers, employers, client organisations, or authorised administrators responsible for your account;
– service providers, technicians, contractors, or vendors who need relevant information to deliver a requested service;
– payment processors, where payment services are used;
– IT, cloud hosting, security, diagnostics, and communications providers;
– Firebase/Google for push-notification delivery;
– professional advisers, insurers, auditors, or legal advisers where necessary; and
– government, regulatory, law-enforcement, or other authorities where required by applicable law.
We do not sell personal data.
7. Data Security
We use reasonable technical and organisational measures to protect personal data, including access controls, authentication measures, encryption in transit, restricted access to authorised personnel, and security monitoring.
No method of electronic transmission or storage is completely secure. You should protect your account credentials and notify us promptly if you believe your account has been accessed without authorisation.
8. International Transfers
Personal data may be processed or stored in Qatar or in other countries where our service providers operate. Where data is transferred outside Qatar, we take appropriate steps to ensure that the transfer is carried out in accordance with applicable law and appropriate safeguards.
9. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Policy, including to provide services, maintain records, resolve disputes, enforce agreements, prevent fraud, and comply with legal, tax, accounting, employment, or regulatory obligations.
When personal data is no longer required, we will securely delete it or anonymise it, unless retention is required or permitted by law.
10. Your Rights and Data Requests
Subject to applicable law, you may request to:
– access personal data we hold about you;
– correct inaccurate or incomplete personal data;
– request deletion of personal data that is no longer required for a lawful purpose;
– withdraw consent for optional processing, including marketing communications or notifications where applicable; and
– raise a privacy concern or complaint.
To submit a request, email privacy@icity.qa from your registered email address and include enough information for us to identify your account. We may ask for identity verification before processing a request.
The App does not provide self-registration. Requests relating to account access, deactivation, or deletion will be reviewed in accordance with our legal, contractual, employment, security, and record-retention obligations.
11. Children’s Privacy
The App is not directed to children under 18 years of age. We do not knowingly collect personal data from children through the App. If we become aware that personal data has been collected from a child without appropriate authority or consent, we will take appropriate steps to address the issue.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, data practices, or legal requirements. Material changes will be communicated through the App, Website, or by email where appropriate.
13. Contact Us
For privacy questions, access requests, correction requests, deletion requests, or complaints, contact:
iCity Services
الطابق 20، برج QIB (ب)، الدفنة، الدوحة، قطر
Email: privacy@icity.qa
