Privacy Policy

Qualitas Data ("we", "us", or "our") is committed to protecting the privacy and personal data of all individuals who interact with our business. This Privacy Policy explains how we collect, use, store, and protect personal information in connection with our website and professional services.

This policy is governed by the Kingdom of Bahrain's Personal Data Protection Law (PDPL), Law No. 30 of 2018, and any regulations issued thereunder by the Personal Data Protection Authority (PDPA).

1. Data Controller

Qualitas Data is the data controller responsible for your personal information. If you have any questions or concerns regarding this policy or the handling of your data, you may contact us at:

2. Information We Collect

We collect personal information only to the extent necessary for defined and legitimate business purposes. This may include:

• —Contact and identity information: Name, job title, company name, email address, and phone number, provided when you contact us or enter into an engagement.
• —Business information: Details about your organisation, data environment, and requirements shared in the course of a scoping discussion or engagement.
• —Website usage data: Technical information such as IP address, browser type, pages visited, and referral source, collected automatically when you visit our website.
• —Correspondence: The content of emails, messages, or other communications you send to us.

We do not collect sensitive personal data (as defined under the PDPL) unless explicitly required and with your prior consent.

3. How We Use Your Information

We use personal information for the following purposes:

• —To respond to enquiries and communicate with prospective or current clients
• —To deliver, manage, and invoice for professional services
• —To fulfil contractual obligations arising from an engagement
• —To improve our website and understand how visitors use it
• —To comply with applicable legal or regulatory requirements

We do not use your personal data for automated decision-making or profiling, and we do not use it for unsolicited marketing without your explicit consent.

4. Legal Basis for Processing

Under the Bahrain PDPL, we process personal data on the following legal bases:

• —Contractual necessity: Where processing is required to perform a contract with you or to take steps at your request prior to entering a contract.
• —Legitimate interests: Where processing is necessary for our legitimate business interests, provided these are not overridden by your rights.
• —Legal obligation: Where we are required to process data to comply with applicable law.
• —Consent: Where you have freely given specific and informed consent, which you may withdraw at any time.

5. Disclosure of Your Information

We do not sell, rent, or trade personal data. We may share information in the following limited circumstances:

• —Service providers: Trusted third parties engaged to support our operations (such as cloud hosting, email, or invoicing tools) under contractual obligations of confidentiality and data protection.
• —Legal and regulatory authorities: Where required by applicable law, court order, or government directive.
• —Professional advisers: Such as legal counsel or accountants, where necessary and bound by professional confidentiality obligations.

6. Cross-Border Data Transfers

Where personal data is transferred to processors or service providers located outside the Kingdom of Bahrain, we ensure appropriate safeguards are in place in accordance with the PDPL, including contractual provisions that provide an equivalent level of protection. We do not transfer personal data to jurisdictions without adequate data protection frameworks unless expressly required and permitted under applicable law.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or professional standards. Client engagement records are retained for a minimum of five (5) years following the conclusion of an engagement, consistent with applicable commercial and regulatory requirements in Bahrain. Website usage data is retained for no longer than twelve (12) months unless anonymised.

8. Your Rights

Under the Bahrain PDPL, you have the following rights with respect to your personal data:

• —Right of access: To obtain confirmation of whether we hold personal data about you, and to receive a copy of that data.
• —Right to rectification: To request correction of inaccurate or incomplete data.
• —Right to erasure: To request deletion of your data where it is no longer necessary or where consent has been withdrawn, subject to legal retention obligations.
• —Right to restriction: To request that processing of your data be restricted in certain circumstances.
• —Right to object: To object to processing carried out on the basis of legitimate interests.
• —Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@qualitasdata.com. We will respond within a reasonable time and in accordance with the timelines prescribed by the PDPL. You also have the right to lodge a complaint with the Bahrain Personal Data Protection Authority.

9. Cookies and Website Analytics

Our website may use cookies and similar technologies to improve functionality and understand how visitors interact with the site. Cookies used are limited to:

• —Essential cookies: Necessary for the basic functioning of the website.
• —Analytics cookies: Used to understand aggregate visitor behaviour (e.g., pages viewed, time on site) in anonymised form.

We do not use advertising or tracking cookies. You may configure your browser to refuse cookies, though this may affect certain website functions.

10. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy applies solely to information collected by Qualitas Data. We are not responsible for the privacy practices of any third-party sites and encourage you to review their policies independently.

11. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These include access controls, encrypted communications, and secure storage practices. In the event of a personal data breach that is likely to result in a risk to your rights, we will notify the relevant authority and affected individuals in accordance with the PDPL.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or the nature of our services. The effective date at the top of this page will be updated accordingly. Where changes are material, we will take reasonable steps to notify affected individuals directly.

13. Contact

For any questions, requests, or concerns relating to this Privacy Policy or the handling of your personal data, please contact us at info@qualitasdata.com.