Privacy and Cookies Policy
Status
DRAFT | 1 November 2026 | Management/legal and technical verification required before publication.
1. Operator
ALRIFFAIE CONSULTANCY, CR 133228-1, Flat 43, Building 148G, Road 4104, Block 941, Riffa / Al Buhair, Bahrain. Email: info@malriffaie.com. This notice applies to personal information handled when visiting malriffaie.com and interacting with its enquiries, bookings, paid services and AI Concierge. A separately identified seller may have an additional notice for its own service.
2. Information that may be collected
Depending on actual features used: name, contact details, company/project information and files supplied through forms; bookings, orders, invoices and payment status; communications, AI Concierge transcripts and requested feedback; IP address, browser/device details, usage logs and cookie choices. Do not ask users to provide government IDs or sensitive records unless necessary and separately explained. The developer must inventory actual collected fields.
3. Purposes and lawful basis
Information is used to answer enquiries; book appointments; assess proposed projects; provide purchased services; manage customer relationships; prevent misuse and protect website security; maintain statutory records; and, when permitted, offer customer communications or marketing. Specify the applicable lawful grounds for each processing activity after legal review. Where consent is needed, collect and record it separately and allow withdrawal.
4. AI Concierge
Chat inputs and associated metadata may be handled by the website and its actual AI or automation provider. The specific platform, access permissions, storage duration, international processing, training controls and human review must be verified with the developer. AI output may be inaccurate; do not place passwords, payment card numbers or unnecessary sensitive information in chat. No claim that chats are never retained or used for training may be published without verification.
5. Sharing and processors
Where necessary to fulfil a stated purpose, information may be shared with the actual hosting provider, scheduling system, email/CRM tools, payment processor, AI provider, professional advisers, and authorities where required by law. List actual suppliers, permitted uses, security obligations and any separate controllers after vendor audit. We do not authorise disclosure of customer information for unrelated purposes.
6. Payment data
The website provides a payment checkout. The developer must confirm the processor and whether card data are tokenised/hosted externally. Do not assert that ALRIFFAIE CONSULTANCY never receives card details until the payment flow is verified. Payment receipts, status and billing data may be retained for operational and legal obligations.
7. Cookies and analytics
The site may use essential session and security cookies and optional analytics or advertising cookies. The developer must provide a current cookie inventory with name, provider, purpose, expiry and category, and implement appropriate choices/consents where required. The final public notice should link to the actual cookie controls; no statement that non-essential tracking is blocked until tested.
8. International transfers and retention
Some contracted technology providers may process information outside Bahrain. Before publication, identify transfer locations and applicable legal safeguards. Personal data will be retained only as necessary for disclosed purposes, valid contracts and statutory obligations, then deleted or securely anonymised under the approved retention schedule. Do not invent a fixed number of days or years without the underlying register.
9. Security
Apply proportionate access controls, encryption in transit, least-privilege account permissions, routine backup/testing and incident response. No site is guaranteed absolutely secure. Report suspected security issues to info@malriffaie.com.
10. Rights and requests
Individuals may contact info@malriffaie.com to ask about their personal information and exercise applicable rights under Bahrain’s Personal Data Protection Law, including access, correction, objection or deletion where lawful. Verify identity proportionately before disclosing data; respond within statutory requirements and explain any lawful limits.
11. Children and external links
The site targets business users and is not intended for children to submit information without appropriate guardian involvement. External websites and separate licensed service providers may have their own notices. Review links before submission of personal data.
12. Updates and contact
Display the final policy’s effective date and update it when technologies, vendors or purposes change. Contact: info@malriffaie.com; ALRIFFAIE CONSULTANCY, CR 133228-1, Bahrain.
Internal sign-off checklist – REMOVE BEFORE PUBLICATION
Confirm cookie/analytics inventory; AI platform and data training/retention controls; payment gateway and actual card handling; data processors and overseas locations; CCTV/CRM/WhatsApp tools if used; lawful bases and consent; data subject request workflow; retention schedule; security contact; privacy rights under the current law; approved effective date. The existing historical ‘Terms and data policies’ document includes salon-service template language and must NOT be copied.