LEGAL
Privacy Policy
This policy explains how Bassirah Technology collects, uses and protects personal data when you visit bassirah.com or contact us.
Last updated: [to be confirmed by counsel] · Version: [to be confirmed by counsel]
DRAFT — requires legal counsel review before publication
Not for publication. Wording below must be checked against actual processing activities. Remove this banner at publish.
1. Who we are
Bassirah Technology ([to be confirmed by counsel: full registered legal entity name(s), registration number and registered address]) (“Bassirah”, “we”, “us”) is responsible for the personal data described in this policy. Where more than one Bassirah entity operates the website or handles your inquiry, [to be confirmed by counsel: identify the controller per region].
Contact for privacy matters: info@bassirah.com [to be confirmed by counsel: or a dedicated privacy address]. Data Protection Officer / representative: [to be confirmed by counsel: if appointed or legally required].
2. Scope of this policy
This policy applies to personal data we collect through bassirah.com and its forms, and through related email correspondence. It does not cover data we process on behalf of customers under a services contract; that processing is governed by the relevant agreement and data processing terms.
3. Personal data we collect
Data you provide:
- Contact form: full name, work email, company / organization, job title (optional), country / region (optional), area of interest, technologies of interest, engagement type, your message, and your privacy and marketing choices.
- Email correspondence you send to us.
- [to be confirmed by counsel: event or webinar registrations, newsletter sign-ups, gated downloads, included only if these exist at launch]
Data collected automatically:
- Technical data such as IP address, browser type, device information and pages visited, through server logs and, where you consent, analytics cookies.
- The page and campaign source of your inquiry (for example, which page you contacted us from).
- [to be confirmed by counsel: list of actual tools, such as analytics, content delivery and spam protection]
We ask you not to submit passwords, credentials, architecture diagrams, sample data or sensitive personal data through our public forms.
4. How and why we use your data
| Purpose | Data used | Legal basis [to be confirmed by counsel per jurisdiction] |
|---|---|---|
| Respond to your inquiry and arrange discovery conversations | Contact form data, correspondence | Steps prior to entering a contract / legitimate interests / consent |
| Route your inquiry to the right specialist and manage our sales pipeline | Contact form data, source page | Legitimate interests |
| Send insights, event invitations and updates | Name, email, interests | Consent (separate opt-in; withdraw any time) |
| Operate, secure and improve the website; prevent spam and abuse | Technical data, spam-protection signals | Legitimate interests |
| Understand website usage | Analytics data | Consent via cookie banner |
| Comply with legal obligations | As required | Legal obligation |
We do not sell personal data. We do not use your data for automated decision-making that produces legal or similarly significant effects. [to be confirmed by counsel]
5. Cookies and similar technologies
We use strictly necessary cookies to run the website. Analytics and any marketing cookies are used only with your consent, which you can change at any time through Cookie settings in the website footer. Our cookie banner does not pre-select optional categories. A full list of cookies is available in our cookie notice [to be confirmed by counsel: link to the generated cookie policy page].
6. Who we share data with
We share personal data only as needed for the purposes above, with:
- Service providers acting on our behalf, such as website hosting, CRM, email delivery, analytics and spam protection [to be confirmed by counsel: categories and/or named processors].
- Bassirah group entities or regional teams handling your inquiry [to be confirmed by counsel].
- Technology partners, only where you ask us to involve them and with your agreement [to be confirmed by counsel: whether partner lead-sharing ever occurs].
- Authorities where required by law.
Service providers are bound by contract to protect your data and use it only on our instructions.
7. International transfers
Your data may be processed in countries other than your own, including [to be confirmed by counsel: hosting and CRM locations]. Where required, we apply appropriate safeguards such as [to be confirmed by counsel: standard contractual clauses, UK IDTA, adequacy decisions or local transfer mechanisms].
8. How long we keep data
| Data | Retention [to be confirmed by counsel] |
|---|---|
| Inquiries that do not progress | [to be confirmed by counsel] |
| Customer and prospect records | [to be confirmed by counsel: per contract and legal obligations] |
| Marketing preferences | Until you withdraw consent, plus a suppression record so we respect your choice |
| Website form entries stored in WordPress | [to be confirmed by counsel] |
| Analytics data | [to be confirmed by counsel: per analytics tool configuration] |
9. How we protect data
We apply technical and organizational measures appropriate to the risk, including encrypted connections (HTTPS), access controls and restricted administrative access [to be confirmed by counsel and the security owner].
10. Your rights
Depending on where you live, you may have the right to: access your personal data; correct it; delete it; restrict or object to processing; data portability; withdraw consent at any time (without affecting prior processing); and lodge a complaint with a supervisory authority [to be confirmed by counsel: relevant authorities].
To exercise your rights, email info@bassirah.com [to be confirmed by counsel]. We may need to verify your identity. We respond within the period required by applicable law.
11. Marketing communications
We send marketing emails only if you opt in. Every message includes an unsubscribe link, and you can also email us to stop receiving them.
12. Children
Our website and services are intended for business users. We do not knowingly collect data from children.
13. Links to other websites
Our pages link to partner and open-source project websites (see Technology Alliances). Their privacy practices are their own; please review their policies.
14. Changes to this policy
We may update this policy. The “Last updated” date shows the current version. Material changes will be highlighted on this page.
15. Contact us
Questions or requests about privacy: info@bassirah.com [to be confirmed by counsel] · Postal address: [to be confirmed by counsel: registered address].
Questions about your data?
Email info@bassirah.com [to be confirmed by counsel] with the subject “Privacy request”.