Privacy Policy

Royal Digital (the “Service Provider”) is committed to protecting the personal data of its website users and clients. This Policy sets out the categories of data collected, the purposes for which they are processed, the safeguards and retention rules applied to them, and the rights afforded to their subjects. Your use of the site or any of its services constitutes acknowledgment of, and consent to, this Policy.

1. Data We Collect

• Account data: the name, email address, and phone number provided when the account is created.
• Contract and transaction data: order details, invoices, and executed contracts, including electronic signatures captured through the site's digital system.
• Technical data: IP address, browser type, and country, processed for aggregated statistical purposes only.
• Communication data: contact-form messages and support-ticket content.

2. Purposes of Processing

• Performing executed contracts, delivering the agreed services, and issuing the related invoices and contracts.
• Communicating with you regarding your orders and support tickets.
• Sending essential transactional emails only (password resets, account verification, support-ticket updates).
• Improving the site and measuring its performance through aggregated, country-level visitor statistics only, with no individual tracking.
• Complying with applicable legal, accounting, and tax obligations.

Your data is not used for direct-marketing purposes and is not subject to any automated processing producing decisions with legal effect on you.

3. Disclosure & Third-Party Processors

The Service Provider does not sell, rent, or trade your personal data to any third party. Data is shared only with third-party processors engaged to operate the site, namely:

• Cloudflare — for site security and content delivery.
• Resend — for sending essential transactional emails only (password resets, account verification, support-ticket updates).

Each provider processes data strictly within the limits of the purpose assigned to it. Data may additionally be disclosed where required by applicable law or by an order of a competent judicial or regulatory authority in the Kingdom of Bahrain, and only to the narrowest extent necessary.

4. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes described above. Invoice, contract, and transaction records are retained for the periods required under applicable accounting and tax regulations. Upon account closure, account data is deleted or anonymized within a reasonable period, unless the law or an existing contractual obligation requires otherwise.

5. Data Security & Incident Notification

The Service Provider applies reasonable technical and organizational measures to protect data, including HTTPS encryption, an application-layer firewall, and one-way encrypted password storage that cannot be reversed. Nevertheless, no system connected to the internet can be guaranteed to be completely secure.

In the event of a security breach likely to materially affect your personal data, the Service Provider shall notify affected individuals without undue delay, describing the nature of the breach, the data affected, and the measures taken to contain it.

6. Your Rights

• Request access to, and a copy of, your personal data.
• Request correction of inaccurate data or completion of incomplete data.
• Request deletion of your data, unless this conflicts with an existing legal or contractual obligation (such as invoice and contract records required to be retained).
• Object to specific processing of your data where legitimate grounds exist.

Requests may be submitted using the contact details below and will be answered within a maximum of thirty (30) days. You are further entitled to lodge a complaint with the competent personal data protection authority in the Kingdom of Bahrain if you consider that your data has been processed in violation of the law.

7. Minors

The site's services are directed at businesses and at persons who have reached eighteen (18) years of age. The Service Provider does not knowingly collect personal data from minors and, upon becoming aware of any such data, shall delete it without delay.

8. Cookies

The site uses essential cookies only, to maintain your login session and display preferences (language and light/dark mode). It does not use advertising or third-party tracking cookies.

9. Changes to This Policy

The Service Provider may update this Policy from time to time. Any amendment will be published on this page with the last-revised date updated accordingly. Continued use of the site after an amendment is published constitutes acceptance of it.

10. Contact Us

For any inquiry, request, or complaint regarding this Policy or your personal data, please contact us at: [email protected]