Privacy Policy

Definitions

"Personal Data" means any information that identifies or can be used to identify a natural person, directly or indirectly. "Processing" means any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, or deletion. "Controller" refers to Nuqtah Network For Services, Trademarks & Hospitality, the entity that determines the purposes and means of processing your personal data.

Information We Collect

We collect personal data only when you voluntarily provide it through our website's contact form. This includes your name, email address, phone number, the service you are interested in, and your message. In addition, our systems automatically record a one-way cryptographic hash of your IP address and a truncated version of your browser's user-agent string. We do not store your raw IP address. We do not collect sensitive personal data such as financial information, health data, or government-issued identification numbers through this website.

Legal Basis for Processing

We process your personal data on the following lawful grounds under Qatar's PDPPL: (1) Your consent, which you provide when you voluntarily submit the contact form; (2) Legitimate interest, to respond to your enquiry and provide the services you have requested; and (3) Legal obligation, where we are required to retain certain records under applicable law. You may withdraw your consent at any time by contacting us, without affecting the lawfulness of processing carried out before withdrawal.

How We Use Your Information

We use the information you submit to respond to your enquiry, provide the services you have requested, and communicate with you about those services. Hashed IP addresses and user-agent data are used solely for rate limiting and abuse prevention. We do not use your personal data for automated decision-making or profiling. We do not send marketing communications unless you have separately opted in.

Cookies and Tracking Technologies

Our public-facing website does not set any tracking, advertising, or analytics cookies on visitors' browsers. We do not use Google Analytics, social media pixels, or any third-party tracking scripts. A session cookie is used only within the password-protected administrative area of the site and is strictly necessary for authentication. This cookie is not placed on public visitors' browsers and expires when the administrative session ends.

Data Storage and Security

Your data is stored on a secured server located in the European Union (Frankfurt, Germany). We implement industry-standard technical and organisational measures to protect your information, including encrypted connections (TLS/HTTPS), cryptographically hashed credentials (Argon2), access controls limited to authorised personnel, security headers to prevent common web attacks, and regular software updates. While no method of electronic storage is completely secure, we take all reasonable steps to safeguard your data.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, we will notify the relevant competent authority without undue delay and, where required, inform affected individuals. We maintain procedures to detect, investigate, and report data breaches in accordance with applicable law.

Third-Party Sharing

We do not sell, rent, or trade your personal data to any third party. Your information may be shared only with: (1) our email delivery service provider, solely for the purpose of sending notification emails related to your enquiry; and (2) our hosting infrastructure provider, as necessary to operate the website. These providers process data only on our behalf and are contractually obligated to protect your information. We may also disclose data if required by law, regulation, or court order.

International Data Transfers

Your personal data is stored on servers located in the European Union. If your data is transferred outside Qatar, we ensure that appropriate safeguards are in place, including contractual obligations on service providers to maintain data protection standards equivalent to those required under Qatari law. We will not transfer your personal data to any country or organisation that does not provide adequate protection as required by the PDPPL.

Data Retention

We retain contact-form submissions for as long as necessary to fulfil the purpose for which they were collected, to maintain records of business communications, and to comply with any legal obligations. When personal data is no longer needed for these purposes, it is securely deleted. You may request deletion of your data at any time by contacting us using the details below.

Your Rights

Under Qatar's PDPPL and applicable data protection principles, you have the following rights regarding your personal data: the right to access the personal data we hold about you; the right to rectify inaccurate or incomplete data; the right to request deletion or erasure of your data; the right to restrict or object to certain processing activities; the right to withdraw your consent at any time; and the right to lodge a complaint with the competent authority in Qatar if you believe your data has been processed unlawfully. To exercise any of these rights, please contact us using the details below. We will respond to your request within thirty (30) working days.

Children's Privacy

Our website and services are not directed at individuals under the age of eighteen (18). We do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has submitted personal data through our website, please contact us immediately so that we can take steps to delete such information.

Third-Party Links

Our website may contain links to external websites, including social media platforms. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policy of any external website you visit through links on our site. Clicking on a third-party link does not imply our endorsement of that site's practices.

Governing Law and Jurisdiction

This privacy policy is governed by and construed in accordance with the laws of the State of Qatar, including Law No. 13 of 2016 concerning Personal Data Privacy Protection and its executive regulations. Any disputes arising from or in connection with this policy shall be subject to the exclusive jurisdiction of the competent courts in the State of Qatar.

Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. Any changes will be posted on this page with the updated date shown above. Where changes are significant, we will make reasonable efforts to notify you. We encourage you to review this page periodically.

Contact Us

If you have questions about this privacy policy, wish to exercise any of your data rights, or want to make a data-related request, please contact us at: info@nuqtahnet.com, or use the contact form on our website, or write to us at: Nuqtah Network For Services, Trademarks & Hospitality, Doha, Qatar. We aim to respond to all privacy-related enquiries within thirty (30) working days.