Privacy Policy.

This Privacy Policy explains how Idrak Consultancy for Technology and Knowledge, Commercial Registration No. 60347, a company incorporated under the laws of the State of Qatar with offices at The Gate, Tower 2, Floor 7, Doha ("Idrak", "we", "us", or "our"), processes personal data collected through the website located at www.idrak.qa (the "Site").

Idrak is the data controller in respect of the personal data described in this policy. We process personal data in accordance with Qatar Law No. (13) of 2016 concerning Personal Data Privacy Protection (the "PDPPL"), its executive regulations, and the guidance issued by the Ministry of Communications and Information Technology (MCIT) and the National Cyber Security Agency (NCSA).

We limit collection to what is necessary for the purposes set out below. We collect:

• 01Enquiry data, when you contact us by email or through any contact form, name, email address, phone number, employer, subject matter and the content of your message.
• 02Newsletter / Insights signup data, when you subscribe to receive future Insights content, your email address and, optionally, your name.
• 03Technical and usage data, collected automatically through cookies and similar technologies when you visit the Site, including IP address, device and browser type, referring page, pages visited, and approximate location derived from your IP address.

We do not knowingly collect personal data from children under the age of 18. We do not process special categories of personal data (such as data relating to health, religion or ethnicity) through the Site.

We process personal data for the following purposes and on the following legal bases under the PDPPL:

• 01To respond to your enquiries and provide the services or information you have requested, on the basis of taking steps at your request prior to entering into a contract.
• 02To send you Insights content that you have subscribed to, on the basis of your explicit consent, which you may withdraw at any time.
• 03To operate, secure and improve the Site, including analytics, error monitoring and protection against fraud and abuse, on the basis of our legitimate interests in running a secure and effective website.
• 04To comply with legal obligations to which Idrak is subject in the State of Qatar.

We will not use your personal data for any purpose materially different from those described above without first obtaining your consent.

The Site uses cookies and similar technologies. Strictly necessary cookies are always active, as they are required for the Site to function. We use analytics cookies to understand how visitors interact with the Site, which help us improve content and performance. Analytics cookies are only set with your consent, which you may withdraw at any time by clearing cookies in your browser or by contacting us at the address in section 10.

We do not sell personal data. We disclose personal data only to:

• 01Service providers and processors engaged by Idrak to host the Site, provide analytics, deliver emails or provide security services. Such providers act only on our instructions and under contractual obligations of confidentiality and data protection.
• 02Competent authorities in the State of Qatar, where disclosure is required by applicable law, court order, or a lawful request from a governmental or regulatory authority.
• 03Successors in interest, in the event of a corporate reorganisation, merger or acquisition, subject to the receiving party continuing to protect personal data on terms consistent with this policy.

Where Idrak transfers personal data outside the State of Qatar, such transfers are conducted in accordance with Article 20 of the PDPPL. We rely on the recipient providing a level of protection no less than that required under the PDPPL, and we put in place appropriate contractual and technical safeguards before any such transfer takes place.

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required under applicable Qatari law. Enquiry correspondence is retained for the duration of the engagement and for a reasonable period thereafter to address follow-up requests. Newsletter subscriber data is retained until you unsubscribe. Technical and analytics data is retained on an aggregated basis in line with standard industry retention windows.

Idrak applies administrative, technical and physical safeguards designed to protect personal data against unauthorised access, disclosure, alteration or destruction, consistent with the requirements of the PDPPL and with good industry practice. No transmission or storage system can be guaranteed to be entirely secure, and we encourage users to take reasonable care when sharing personal data online.

Subject to and in accordance with the PDPPL, you have the right to:

• 01be informed of, and object to, the processing of your personal data where such processing is likely to cause you serious harm;
• 02request access to, and a copy of, the personal data we hold about you;
• 03request the rectification, deletion, or blocking of inaccurate, incomplete or unlawfully processed personal data;
• 04withdraw consent to processing that is based on consent, without affecting the lawfulness of processing carried out before such withdrawal.

To exercise any of these rights, please contact us at the address in section 10. We will respond within the period required by the PDPPL. You also have the right to lodge a complaint with the competent supervisory authority in the State of Qatar.

Questions, requests or complaints regarding this Privacy Policy or the processing of your personal data should be addressed to:

Idrak may amend this Privacy Policy from time to time. The updated version will be published on this page with a revised "last updated" date. Material changes will be brought to your attention by reasonable means, and, where required by law, additional consent will be sought.

This Privacy Policy is governed by the laws of the State of Qatar. Any dispute arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the competent courts of the State of Qatar.