Privacy Policy.

Mimar En Casa WLL respects your privacy. This policy explains what personal data we collect through this website, why we collect it, and what your rights are under Bahrain's Personal Data Protection Law (Law No. 30 of 2018, "PDPL").

01Who we are

Mimar En Casa WLL ("Mimar", "we", "us", "our") is a logistics company registered in the Kingdom of Bahrain.

• Commercial Registration: 127228-1
• Office 14, Building 739, Road 831, Sanabis 408, Kingdom of Bahrain
• Email: contact form · Phone: +973 1311 5515

For the purposes of the PDPL, Mimar En Casa WLL is the data controller of any personal data collected through this website.

02What data we collect

When you submit our contact form, we collect:

• Your name
• Your company (optional)
• Phone number
• Email address
• The content of your message
• The service category you selected

When you simply browse the site, our hosting provider automatically logs:

• IP address
• Browser type, version, and device information
• Pages visited and timestamps
• Referring URL

We do not currently use cookies, third-party analytics, or tracking pixels on this site. If this changes in the future, we will update this policy before enabling them.

03Why we collect it

We collect and process personal data to:

• Respond to your inquiry, quote request, or partnership proposal
• Follow up on an existing conversation or engagement
• Maintain technical records of site traffic for security and operational diagnostics
• Comply with Bahraini tax, commercial, and regulatory record-keeping obligations

Our lawful bases for processing under PDPL are:

• Consent — when you voluntarily submit the contact form
• Legitimate business interest — when we respond to communications you initiated, and when we maintain security logs
• Legal obligation — when record retention is required by Bahraini law

04How long we keep it

• Contact form submissions: retained for up to 24 months after our last communication with you, then deleted unless an ongoing engagement requires longer retention.
• Server access logs: retained for approximately 90 days by our hosting provider, then rotated out automatically.
• Client relationship records: if you become a client, relevant records are retained for the duration of our engagement plus up to 7 years thereafter, as required by Bahraini tax and commercial law.

05Who we share it with

We do not sell, rent, or trade personal data. We share data only with:

• Our email service provider (Google Workspace) — which processes emails sent to and from our business addresses
• Our hosting provider (DigitalOcean) — which stores site files and generates access logs
• Our form-processing provider (Web3Forms) — which receives contact form submissions and forwards them to our inbox. Web3Forms does not retain submission content beyond delivery.
• Government or legal authorities — only when required by law, court order, or regulatory request

Both Google and DigitalOcean are contractually bound to process data only on our instructions and to maintain security standards consistent with their own international data protection commitments.

06International transfers

Some of our service providers (notably Google Workspace and DigitalOcean) store and process data on servers located outside the Kingdom of Bahrain. These international transfers are protected by the providers' standard contractual clauses, internal data protection frameworks, and — where applicable — compliance with equivalent international regimes such as the EU General Data Protection Regulation.

07Your rights under Bahrain PDPL

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal retention obligations)
• Object to or restrict our processing of your data
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
• Lodge a complaint with the Personal Data Protection Authority in the Kingdom of Bahrain if you believe your rights have been violated

To exercise any of these rights, use our contact form or call +973 1311 5515. We will respond within 30 days.

08Security

We use industry-standard technical and organizational measures to protect personal data — including HTTPS encryption in transit, access controls on internal systems, and vetted third-party service providers. No digital system is 100% secure, but we take data protection seriously and review our practices regularly.

In the event of a personal data breach that is likely to result in risk to your rights, we will notify affected individuals and the Personal Data Protection Authority without undue delay, in accordance with PDPL requirements.

09Changes to this policy

We may update this policy from time to time to reflect changes in our practices, technology, legal obligations, or for operational reasons. The "Last updated" date above shows the most recent revision. Material changes will be announced prominently on the site at least 30 days before taking effect.