Trust and privacy
Your data and your rights
A plain-language explanation of what the Mimess portal collects, why, who can see it, and how you stay in control.
What we collect
- Portal accounts are created from the municipal resident registry and activated only through a municipal invitation. We keep your name, the contact details you choose, and your country of residence.
- When you submit a request or report an issue, we store what you write, any location or photos you add, the reference number, and the history of updates.
- We log notification deliveries (email or WhatsApp) so we can confirm messages reached you.
Why we use it
- To deliver municipal services and follow your requests through to resolution.
- To notify you about changes to your requests, the issues you support, and municipal alerts, according to the settings you choose.
- To publish aggregate, anonymised performance statistics on the transparency page. Individual records are never published.
Who can see it
- Dates of birth, parent names, sect, registration numbers, addresses, phone numbers, emails, and family links are private registry data. Only authorised municipal staff and you can see them.
- Community issues are published after municipal review without the reporter’s name. Comments and votes are tied to verified accounts but are not displayed by name.
- The member directory is opt-in: your name is shown to other residents only if you enable it from your profile.
Your rights
- You can view your data on your profile page and change your contact details yourself.
- To correct registry data, use the “Correct my resident record” service. A registrar reviews the evidence and tells you the outcome.
- You can switch off any notification type from your notification settings. Account security messages stay on to protect you.
- To ask for your account to be suspended, or to ask about data retention, contact the municipality through the contact page.
How we protect it
- Passwords are hashed and never visible to municipal staff. Activation and reset links are single-use and time-limited.
- Database access is restricted with row-level permissions, and every administrative change to sensitive records is written to an audit log.
- Records retention policies are approved by the municipal council and published with the official documents once adopted.
Accessibility
We aim to meet WCAG 2.1 level AA: full keyboard navigation, clear form labels, sufficient colour contrast, and Arabic and English text at the right size and direction. If something gets in your way, tell us through the contact page and we will fix it.