How do I protect customer data?
- Collect only what you need and know where it's stored
- Encrypt in transit (HTTPS) and at rest
- Control access: role-based permissions and Row Level Security in the database
- Audit logs of who viewed or changed data
- Retention: delete data you no longer need
- Be transparent: a clear privacy policy; follow local law (the UAE has its own data protection law, the EU has GDPR)