Effective Date: October 3, 2024Last Updated: October 3, 2024
This Privacy Policy governs the collection, processing, storage, and protection of personal data by our organization (“we,” “us,” or “our”). We are committed to maintaining the highest standards of data privacy, confidentiality, and security. By accessing our services or submitting personal information, you acknowledge and agree to the practices outlined in this policy.
1. Explicit Consent & Basis of ProcessingAll personal data processed by our organization is collected strictly on the basis of prior explicit consent provided by you at the time of submission. You have the right to withdraw your consent at any time, subject to legal or contractual obligations.
2. Strict Non-Disclosure & Anti-Misuse Guarantee
* Zero Commercialization: We do not sell, rent, trade, lease, or monetize your personal data under any circumstances.
* No Unauthorized Sharing: Your data is strictly kept internal. We do not share, disclose, or transfer your information to third-party advertisers, marketers, or data brokers.
* Prohibited Misuse: Your data is utilized solely for the explicit purpose for which it was collected. Any cross-purpose usage or unauthorized internal access is strictly prohibited.
3. Separation of Architecture & Data DecouplingTo minimize exposure risks and maximize privacy protections, we enforce a strict architectural segregation of data:
* De-Identified Primary Records: Our central databases store record histories and operational data stripped of direct contact details. Primary records do not carry essential contact information.
* Isolated Contact Vault: All user contact details (e.g., email addresses, phone numbers) are encrypted and stored in an isolated, dedicated internal contact database.
* Restricted Relational Access: Linkages between primary record data and contact information are restricted, access-controlled, and accessible only on a strict need-to-know basis.
4. Security Framework & InfrastructureEncryption in TransitAll communications between your device and our servers are encrypted in transit using strong SSL (Secure Sockets Layer) / TLS (Transport Layer Security) protocols with standard high-grade encryption ciphers.Internal Server Architecture
* Self-Hosted / On-Premise Internal Servers: Data is housed exclusively on secure internal server infrastructure protected by multi-layered perimeter defense firewalls and intrusion detection system protocols.
* Encryption at Rest: Sensitive stored data is encrypted using strong symmetric encryption standards (AES-256).Physical & Administrative Safeguards * Strict Access Control: Access to internal systems is regulated via Role-Based Access Control (RBAC), multi-factor authentication (MFA), and zero-trust administrative models.
* Audit Logging & Surveillance: All database interactions, queries, and administrative access events are logged and audited regularly to detect and prevent unauthorized access attempts.
5. Retention & Data LifecycleWe retain de-identified records and contact information only for as long as necessary to fulfill the operational purposes for which it was gathered, or as required by applicable laws and statutory retention schedules. Once the retention period expires, data is securely purged or permanently anonymized using sanitization methods.6. User RightsDepending on your jurisdiction, you retain fundamental rights regarding your personal information:
* Right of Access: Request confirmation and copies of personal data held about you.
* Right to Rectification: Request correction of inaccurate or incomplete information.
* Right to Erasure (“Right to be Forgotten”): Request the complete deletion of your isolated contact record and personal identifiers.
* Right to Withdraw Consent: Revoke previously granted consent without affecting the lawfulness of processing prior to withdrawal.
7. Compliance & Regulatory AlignmentThis Privacy Policy is designed to comply with global privacy frameworks, including the EU General Data Protection Regulation (GDPR), UAE Federal Decree-Law No. 45 of 2021 regarding Personal Data Protection, and applicable international privacy standards.8. Policy UpdatesWe reserve the right to amend or update this Privacy Policy at any time. Any updates will be posted directly to this page with an updated “Last Updated” date. Continued use of our platform constitutes acknowledgment of the updated policy terms.
