Under Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016), companies generally cannot process your personal data without your consent. Article 4 requires that a Controller (any company or entity handling your data) must obtain your consent before processing your personal data. The only exceptions are when processing is strictly necessary to achieve a lawful purpose.
Importantly, your consent is not permanent. Under Article 5, you have the right to withdraw your consent at any time, and you can also object to the processing of your personal data if it is not necessary for a legitimate purpose. This means if a company is using your data in ways you didn't originally agree to, you can push back.
As a practical tip, always read privacy notices carefully before signing up for services, apps, or loyalty programs in Qatar. If you want to withdraw consent, submit a written request directly to the company's data protection contact. Keep a copy of your request in case you need to escalate the matter to the Competent Department (the Ministry of Transport and Communications).
This is general legal information, not legal advice. For advice on your specific situation, consult a lawyer licensed in Qatar.