{"title":"Privacy Notice","lastUpdated":"2026-04-15","controller":{"name":"Burhan Cloud","address":"Manama, Kingdom of Bahrain","email":"privacy@burhan.cloud","dpo":"privacy@burhan.cloud"},"applicableLaws":["Kingdom of Bahrain — Personal Data Protection Law (Law No. 30 of 2018)","Kingdom of Saudi Arabia — Personal Data Protection Law (PDPL)","United Arab Emirates — Federal Decree-Law No. 45/2021 on Personal Data Protection (UAE PDPL)","European Union — General Data Protection Regulation (GDPR)"],"dataCategories":[{"category":"Identity data","examples":"Name, national ID, email, phone","basis":"Contract performance","retention":"7 years after matter closure"},{"category":"Case data","examples":"Matter details, court filings, evidence","basis":"Contract performance + legal obligation","retention":"10 years"},{"category":"Financial data","examples":"Invoices, payments, bank details","basis":"Contract performance + legal obligation","retention":"7 years"},{"category":"Usage data","examples":"Login times, audit trail, IP addresses","basis":"Legitimate interest (security)","retention":"2 years"},{"category":"Communication data","examples":"Chat messages, notifications","basis":"Contract performance","retention":"Duration of engagement + 1 year"}],"rights":["Right of access (Art. 15 GDPR / Bahrain PDPL / KSA PDPL Art. 14 / UAE PDPL Art. 13)","Right to rectification (Art. 16 GDPR / Bahrain PDPL / KSA PDPL Art. 15 / UAE PDPL Art. 14)","Right to erasure (Art. 17 GDPR / Bahrain PDPL / KSA PDPL Art. 16 / UAE PDPL Art. 15) — subject to legal hold","Right to data portability (Art. 20 GDPR)","Right to object (Art. 21 GDPR / Bahrain PDPL / KSA PDPL Art. 17 / UAE PDPL Art. 16)"],"crossBorderTransfers":"Customer environments are configured for Bahrain-region hosting. If cross-border transfers become necessary, they are handled under the applicable contractual and regulatory safeguards.","cookiePolicy":{"essential":"Session management, authentication (refresh_token cookie). Strictly necessary — no consent required.","analytics":"Public-site analytics may be deployed for page views and CTA measurement. Where required, consent and disclosure will be handled on the site."},"contact":"For data subject requests, email privacy@burhan.cloud or privacy@burhan.cloud"}