Privacy Policy
1. Introduction
Welcome to ArasBella Solutions. We respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we look after your personal data when you visit our website (regardless of where you visit it from) and informs you about your privacy rights and how the law protects you.
ArasBella Solutions operates internationally with a presence in the United Kingdom, Oman, and Pakistan. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, ArasBella Solutions is the data controller responsible for your personal data.
2. Information We Collect
We may collect, use, store, and transfer different kinds of personal data about you which we have grouped together as follows:
- Identity Data: Includes first name, last name, username or similar identifier, title, and company name.
- Contact Data: Includes billing address, email address, and telephone numbers.
- Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, and platform.
- Usage Data: Includes information about how you use our website, products, and services.
- Marketing and Communications Data: Includes your preferences in receiving marketing from us and our third parties and your communication preferences.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data).
3. How We Use Your Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- To process and deliver your requested software solutions, audits, or consultations.
- To manage our relationship with you, including notifying you about changes to our terms or privacy policy.
- To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data).
- To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.
- To use data analytics to improve our website, products/services, marketing, customer relationships, and experiences.
4. Legal Basis for Processing (UK GDPR)
Under the UK GDPR, the lawful bases we rely on for processing this information are:
- Your Consent: You are able to remove your consent at any time. You can do this by contacting our Data Protection Officer.
- Contractual Obligation: Processing is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
- Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., maintaining the security of our IT systems, running our business operations) provided those interests are not overridden by your rights and interests.
- Legal Obligation: Processing is necessary for compliance with a legal or regulatory obligation.
5. Data Sharing & International Transfers
Because ArasBella Solutions operates globally, your personal data may be transferred to, and processed in, countries other than the country in which you are resident. Specifically, our engineering and operational hubs are located in the UK, Oman, and Pakistan.
Whenever we transfer your personal data out of the UK or the European Economic Area (EEA), we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
- Where we use specific service providers based in countries without an adequacy decision (such as our operational hubs), we use specific contracts approved for use in the UK (International Data Transfer Agreements / Standard Contractual Clauses) which give personal data the same protection it has in the UK.
6. Data Retention & Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.
We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
7. Your Data Protection Rights
Under data protection laws, you have rights including:
- Your right of access: You have the right to ask us for copies of your personal information.
- Your right to rectification: You have the right to ask us to rectify personal information you think is inaccurate.
- Your right to erasure: You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing: You have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing: You have the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability: You have the right to ask that we transfer the personal information you gave us to another organization, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
9. Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact our Data Protection Officer (DPO) in the following ways:
ArasBella (UK HQ)
27 Old Gloucester Street, London, United Kingdom, WC1N 3AX
ArasBella (Oman)
RASOUK BUSINESS CENTER, Office 145, Building 1404, Muscat Governorate, Al Amrat, Al Mahaj Al Janubiyya, Sultanate Oman