Sherta Tech

Privacy Policy

Last updated: 4 September 2026

This policy explains what personal information Sherta Technology Services collects through this website and through the Sherta ERP, CRM and e‑invoicing service, why we collect it, who we share it with and what rights you have. It is written to meet UAE Federal Decree‑Law No. 45 of 2021 on the Protection of Personal Data.

1. Who we are

Sherta Technology Services, Musaffah, Abu Dhabi, United Arab Emirates, is the data controller for the information described in this policy.

Where our customers put their own records — their employees, their customers, their suppliers — into the Sherta system, the customer is the controller of that data and Sherta acts as a processor on their instructions. Section 4 explains what that means.

2. What we collect

When you enquire or book a demo: your name, company, email address, telephone number and whatever you tell us in your message.

When you register or subscribe: company name, work email address, UAE mobile number, the password you choose (stored only in encrypted form, never in plain text), the plan and billing cycle you select, and, where you take e‑invoicing without UAE hosting, a record of the data‑residency confirmation you give us, including the name you type and the date and time.

When you pay: your card details are entered into and processed by our payment service provider, Network International (N‑Genius). Sherta does not store your full card number or your CVV/CVC. We keep the transaction reference, the amount, the date and the result of the payment so that we can issue invoices, answer billing queries and handle refunds.

When you use the system: your user name, the actions recorded in the system’s own audit and approval logs, sign-in times, IP address and browser type, and the technical logs our servers keep.

When you email us or raise a service request: the correspondence itself and the contact details in it.

We do not collect special categories of personal data through this website, and we do not knowingly collect information from children.

3. Why we use it, and on what basis

  • To create and run your account and provide the Service — necessary to perform our contract with you.
  • To take payment, invoice you and manage renewals and refunds — necessary to perform our contract with you.
  • To provide support and answer your enquiries — necessary to perform our contract, or our legitimate interest in responding to you.
  • To keep the Service secure, prevent fraud and abuse, and investigate incidents — our legitimate interest, and our legal obligations.
  • To meet accounting, tax and other legal obligations in the UAE — legal obligation.
  • To send you occasional information about our products — with your consent, which you can withdraw at any time using the unsubscribe link in any such email or by writing to us. We do not sell your details to anyone, and we do not use them for third-party advertising.

4. Data our customers put into the system

Our customers use Sherta to hold their own business records, which include personal data about their employees, customers and suppliers. For that data:

  • The customer decides what is stored and why. Sherta processes it only to provide, support, secure and back up the Service, or where the law requires.
  • Our staff access a customer’s environment only when it is necessary to deliver support, resolve a fault or meet a legal obligation.
  • We do not use customer data to build profiles, to train models, or for our own marketing.
  • If you are an employee, customer or supplier of one of our customers and want to exercise your rights over your data, please contact that company directly; we will assist them in responding.

5. Who we share information with

  • Network International (N‑Genius) — to process card payments.
  • Our hosting providers — who operate the data centres in which the Service runs. They provide infrastructure only and do not use your data.
  • Our email provider — to send account, approval, notification and support email.
  • Accredited e‑invoicing service providers — where you use e‑invoicing, to transmit invoices through the channels the UAE requires.
  • Professional advisers and auditors — where necessary and under a duty of confidentiality.
  • Government authorities — where we are required to disclose by UAE law or by a valid order.

We do not sell personal data, and we do not share it for anyone else’s advertising.

6. Where your data is held

Unless you select the UAE Server hosting option, your ERP environment is hosted in our European data centre. If you select the UAE Server option, your ERP is hosted in the United Arab Emirates. UAE e‑invoicing data is always held on our UAE infrastructure, whichever option you choose.

Where data is transferred outside the UAE, we do so only to a country or provider offering an adequate level of protection, or under contractual safeguards, in line with the UAE Personal Data Protection Law.

7. How long we keep it

  • Enquiries and demo requests: up to 24 months from your last contact with us.
  • Account and subscription data: for as long as your account is open.
  • Data inside your ERP environment: kept for 30 days after termination so you can export it, then permanently deleted.
  • Invoices, payment records and tax records: retained for the period UAE law requires, currently five years.
  • Security and system logs: normally up to 12 months.

8. How we protect it

The website and the Service are served over encrypted HTTPS connections. Passwords are stored only as one-way hashes. Access to production systems is restricted to named administrators, each environment is separated from every other, and we take regular backups. No system can be guaranteed completely secure, but we review our controls and act promptly on any incident. If a breach is likely to affect you, we will notify you and the relevant authority as the law requires.

9. Cookies and tracking

Our public website does not use advertising, profiling or analytics cookies, and it loads no third-party trackers. WordPress may set a functional cookie if you comment or log in to the site.

Our registration and checkout pages use your browser’s session storage to carry your selected plan and details between the two steps; it is cleared when the process finishes. Those two pages also load styling and icons from third-party content delivery networks (Tailwind and Cloudflare‑hosted Font Awesome), which receive your IP address as part of serving those files. Inside the Service, cookies are used only to keep you signed in and to keep your session secure.

10. Your rights

Under the UAE Personal Data Protection Law you may:

  • ask what personal data we hold about you and receive a copy;
  • ask us to correct data that is wrong or incomplete;
  • ask us to delete data we no longer have a lawful reason to keep;
  • ask us to restrict or stop certain processing, including marketing;
  • ask for your data in a portable, machine-readable form;
  • withdraw consent where our processing relies on it; and
  • complain to the UAE Data Office if you believe we have handled your data wrongly.

To exercise any of these, write to sales@shertatech.com. We will respond within 30 days and may need to verify your identity first.

This website links to our demo system and may link to other sites. We are not responsible for their privacy practices; please read their own policies.

12. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with the date it was last updated, and we will notify you by email of any change that materially affects you.

13. Contact us

See also our Terms and Conditions, which include our cancellation and refund policy.

WhatsApp