INFINITEWARE COMPUTER WLL, trading as INFINITEWARE, is the data controller for the personal data described in this policy. We are registered in the Kingdom of Bahrain.

Registered office: Office 1250, Building 15, Road 3801, Block 338, Manama 82141, Bahrain.

Email: contact@infiniteware.com. Website: https://infiniteware.com.

This policy covers this website and the personal data we handle as a business: enquiries, client and supplier contacts, recruitment, and our own marketing.

It does not cover data inside a product we have deployed for a client. Where we install software on a client's own infrastructure, that client is the controller of the data in it and their own privacy notice applies. Our role there is described under Client data in our products.

Information you give us. If you contact us by email, apply for a role, or speak to us about an engagement, we receive what you choose to send: typically your name, email address, employer, job title, and whatever you write in the message or attach to it.

Information collected automatically. Our web server keeps standard access logs. These contain the IP address making the request, the time, the page requested, the referring page and the browser user agent. We use them to keep the site running and secure, not to build a profile of you.

We do not operate advertising networks, behavioral trackers, session recording, heatmaps or third-party analytics on this website.

• To answer your enquiry and to carry out any engagement that follows from it.
• To manage our relationship with clients, suppliers and partners, including contracts, invoicing and support.
• To assess job applications and keep in touch with candidates.
• To keep this website available, performant and secure, and to investigate abuse.
• To meet our legal, tax, accounting and regulatory obligations in Bahrain.

Our legal bases are your consent where you have given it, the performance of a contract with you, our legitimate interest in running and protecting our business, and compliance with legal obligations.

We do not sell personal data, and we do not use it to train artificial intelligence models.

This website sets no advertising or analytics cookies. Any cookie present is strictly necessary to serve the page you asked for.

Typefaces are compiled into the site at build time and served from our own domain, so your browser makes no request to a font provider while you read these pages.

Films on our Media pages use a click to load player. Until you press play, nothing is requested from YouTube and no YouTube cookie is set: the page shows only a still image. When you do press play, the video is loaded from youtube-nocookie.com and Google's own privacy policy applies to that playback. Google's policy is at policies.google.com/privacy.

Most of what we build is designed to run on the client's own servers, which means the data in it never reaches us. That is the point of the architecture, not a side effect.

Where a client does ask us to host or operate a system on their behalf, we act as a data processor under their instructions, under a written agreement that sets out the purpose, duration, security measures and the handling of data at the end of the engagement.

Where our engineers need access to a client's live environment for support, that access is granted by the client, limited to what the task requires, and logged.

We use Google API Services to manage our own INFINITEWARE accounts, for example to publish films to our own YouTube channel. Where we do, the account being accessed is ours, not yours.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer that information to others except as necessary to provide or improve the relevant feature, to comply with applicable law, or as part of a merger or acquisition. We do not use it for advertising, and we do not allow humans to read it except with the account holder's explicit consent, for security purposes, to comply with applicable law, or where the data has been aggregated and anonymized.

We share personal data only where there is a reason to:

• Service providers who host our website and email and who are bound by contract to process data only on our instructions.
• Professional advisers such as auditors, accountants and lawyers, where they need it to advise us.
• Public authorities, where we are legally required to disclose.
• An acquirer, in the event of a merger, acquisition or sale of assets, subject to this policy continuing to apply.

Some of the services we rely on to run the company, such as email and website hosting, operate outside the Kingdom of Bahrain.

Where personal data is transferred outside Bahrain, we do so in line with the Personal Data Protection Law and only where the receiving country offers adequate protection or appropriate safeguards are in place, including any authorization required from the Personal Data Protection Authority.

We keep personal data only as long as we need it for the purpose we collected it, and then for as long as the law requires us to.

• Enquiries that do not lead to an engagement: up to two years from the last contact.
• Client and supplier records: for the life of the relationship and then as required by Bahraini commercial, tax and accounting law.
• Job applications: up to one year after the decision, unless you ask us to keep you on file for longer.
• Web server logs: a rolling period measured in weeks, not years.

Access to personal data inside the company is limited to the people who need it to do their job. Accounts require multi factor authentication, laptops are encrypted, and administrative access to production systems is restricted and logged.

No system is perfectly secure. If a breach occurs that is likely to harm the people affected, we will notify them and the Personal Data Protection Authority as the law requires.

Under the Personal Data Protection Law of the Kingdom of Bahrain, Law No. 30 of 2018, you may:

• Ask whether we hold personal data about you, and ask for a copy of it.
• Ask us to correct data that is inaccurate or incomplete.
• Ask us to delete data we no longer have a lawful reason to keep.
• Object to processing based on our legitimate interests, and object at any time to direct marketing.
• Withdraw consent you have given, without affecting what we did lawfully before you withdrew it.

To exercise any of these, write to contact@infiniteware.com. We will respond within the period set by law. We may ask you to confirm your identity first, so that we do not disclose your data to someone else.

If you believe we have mishandled your data, you are entitled to complain to the Personal Data Protection Authority in Bahrain. We would rather you came to us first, so we have a chance to put it right.

This website and our services are intended for businesses and the people who work in them. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

We update this policy when our practices change or the law does. The date at the top reflects the current version. Where a change materially affects how we handle your data, we will say so clearly rather than quietly reissue the page.

Questions about this policy, or about data we hold, go to contact@infiniteware.com, or by post to INFINITEWARE COMPUTER WLL, Office 1250, Building 15, Road 3801, Block 338, Manama 82141, Bahrain.