1. who we are
wagamama in the uae is operated and managed by rmal hospitality psc (“rmal,” “we,” “us”). we value your privacy and are committed to protecting your personal data under the uae federal decree-law no. 45 of 2021 on the protection of personal data (“pdpl”). questions? contact us at marketing@rmalhospitality.ae.
for the wider wagamama uk privacy policy (covering global brand operations), please visit: wagamama uk privacy policy
2. what personal data we collect and how
we may collect:
automatically, via website/app usage: ip address, device/browser type, location data, usage logs, cookies, and interaction details
when you download our loyalty app or interact with us: name, email, birthday (for birthday promotions), postal code, student status, marketing preferences, support inquiries, social media interactions, and optional info for events and loyalty programs
in-restaurant, including cctv footage for security, wi-fi usage metadata (anonymous and aggregated), payment app use, and take-away/delivery details
3. why we process your data (purpose & legal basis)
we process personal data to:
provide and personalize services, handle reservations/orders, manage loyalty programs and promotions
process payments and digital receipts securely via third-party processors
maintain operational and platform security, comply with laws, and improve business through analytics
conduct marketing (with consent), enhance experiences, and administer contests or events
consent is the principal legal basis for processing under pdpl; exceptions apply when processing is necessary for contractual performance, legal compliance, or legitimate interests that don’t override your rights.
4. your rights (under uae pdpl)
you have the right to:
access, correct, delete, restrict, or object to processing of your personal data; request portability
withdraw consent at any time (without affecting prior lawful processing)
file a complaint with the uae data office if your concerns are unresolved
to exercise any rights, please email marketing@rmalhospitality.ae. we may ask for identity verification before responding.
5. cookies & tracking
we use cookies to enhance site functionality and performance:
strictly necessary: essential for site operation
performance: anonymous usage insights (e.g. google analytics)
functionality: stores preferences like language
targeting/advertising: for delivering relevant ads (with your consent)
you can manage or disable cookies via your browser, though this may impact functionality.
6. data sharing & international transfers
your data may be shared with:
rmal’s affiliates, service providers, payment processors, and consultants — only as needed and under confidentiality
authorities if legally required
cross-border transfers occur only to countries with adequate protection or under appropriate legal safeguards.
7. data retention
we retain your personal data only as long as necessary for the purposes stated or as required by law. inactive account data may be deleted after a period (e.g., 3 years), unless relevant legal or business needs justify longer retention. anonymized data may be retained indefinitely for reporting and research.
8. security
we implement appropriate technical and organizational measures to protect your data. however, online communications inherently carry risks; please be mindful when providing personal information.
9. policy updates
we may update this policy as needed. please review it regularly — continued use of our services implies acceptance of updates.
10. contact us
for privacy inquiries or to exercise your rights, email marketing@rmalhospitality.ae.
last updated | 2024