Privacy policy

PLACEHOLDER — this policy must be completed by qualified counsel before publication. It is deliberately not drafted here, because binding privacy wording depends on jurisdiction, data residency and the specific products in scope, and a plausible-sounding but wrong policy is worse than an obvious gap.

What the final policy must cover: the controller's legal identity and registration; what personal data is collected through this website and through each product; the lawful basis and purpose; retention periods; sub-processors and third-country transfers; data-residency commitments per region; the rights available to data subjects and how to exercise them; the security measures in place; and breach-notification procedure.

Regional considerations for our markets: India's Digital Personal Data Protection Act, and the UAE and Saudi data-protection regimes, place different obligations on controllers. Counsel should confirm which apply to each deployed tenant.