Privacy Notice
Last updated: 7 September 2026
This notice explains what personal data Arboura collects through this website, why we collect it, and the rights you have over it. It is written to align with the Kingdom of Bahrain's Personal Data Protection Law (Law No. 30 of 2018) and the equivalent regimes in the markets we serve.
Who we are
Arboura Digital Transformation and Consulting WLL, Office 21, Building 6, Road 355, Block 327, Al Adliyah, Manama, Kingdom of Bahrain (CR 188213-1) is the data controller for personal data collected through this site. For any question about this notice, or to exercise any right described below, write to saif.khan@arboura.ai.
What we collect
Information you give us. When you submit the enquiry form we collect your name, work email address, organisation, country, the service area you selected, and the message you write. We do not ask for and do not want special categories of personal data — do not include health, financial account or identity document details in an enquiry.
Information collected automatically. Our hosting provider records standard server logs — IP address, browser type, pages requested and timestamps — for security and reliability purposes.
Cookies. This site sets no cookies of its own and runs no advertising or analytics trackers. If that changes we will update this notice and, where consent is required, ask for it before any non-essential cookie is set.
Why we use it, and on what basis
We use enquiry data solely to respond to you and, where a conversation follows, to take steps at your request prior to entering a contract. We rely on your consent in submitting the form, and on our legitimate interest in responding to business enquiries addressed to us. We do not sell personal data, and we do not use it for automated decision-making or profiling.
Who else sees it
Enquiries are processed by our website form provider and delivered to our business email provider, and the site is served by our hosting and content delivery providers. Each acts as a processor on our instructions and under contract. Web fonts are served by Google Fonts, which receives your IP address in order to deliver them. We disclose personal data to no one else except where we are required to by law.
Transfers outside Bahrain
Some of our providers process data outside the Kingdom of Bahrain. Where that happens we rely on the transfer mechanisms permitted under the Personal Data Protection Law, including contractual safeguards with each provider. You may ask us which providers are involved and where they operate.
How long we keep it
Enquiries that do not lead to an engagement are deleted within twenty-four months. Where an engagement follows, records are retained for the duration of the relationship and for the period afterwards required by Bahraini commercial and tax law. Server logs are retained for a short operational period by our hosting provider.
Your rights
You may ask us to confirm what personal data we hold about you and to provide a copy; to correct anything inaccurate; to delete it; to restrict or object to our use of it; and to withdraw consent at any time, which does not affect anything done before you withdrew it. Write to the address above and we will respond within thirty days. If you are not satisfied with our response, you may complain to the Personal Data Protection Authority in the Kingdom of Bahrain, or to the supervisory authority in your own country.
Security
The site is served over TLS, access to enquiry data is limited to the partners and staff who need it, and our providers are selected on their security posture. No transmission over the internet is completely secure, and we encourage you not to send confidential commercial information through a web form.
Changes to this notice
We update this notice when our practices change. The date at the top always reflects the current version.