Privacy Policy

Privacy Policy & Data Protection Charter

Effective Date: January 1, 2026 | Last Reviewed: September 2026

Welcome to ImranOnline (imranonline.net), operated by Imran Nazir ("we", "our", "us"), an independent Senior Technology Leader, Fractional CTO, and Principal Enterprise Solutions Architect based in Dubai, United Arab Emirates.

We are dedicated to safeguarding your personal data and ensuring full transparency regarding how information is gathered, processed, secured, and retained. This Privacy Policy outlines our compliance with applicable global data protection regulations, including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), the European Union General Data Protection Regulation (EU GDPR 2016/679), the UK Data Protection Act 2018 / UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA).

1. Data Controller Identification

For the purposes of applicable data privacy legislation, the data controller responsible for your personal data is:

2. Categories of Information We Collect

We strictly adhere to the principle of data minimization. We only collect personal information that is strictly necessary for professional consulting inquiries, technical evaluations, and platform security:

• Direct Inquiry Data: When you submit our project contact form or contact us via WhatsApp/Email, we collect your full name, business email address, phone number (if provided), company name, estimated project budget, and project scope details.
• Technical & Telemetry Data: Automated server log data collected when navigating the platform, including IP addresses, browser user-agent headers, operating system information, referring URLs, request timestamps, and response HTTP status codes.
• Cookie & Preference Data: Pseudonymous identifiers, session security tokens, and language/direction preferences (such as RTL/LTR preference).

3. Legal Bases for Processing

We process your personal information under the following lawful legal grounds:

• Contractual Necessity (Pre-contractual & Engagement): Processing inquiry details necessary to assess your project requirements, prepare Statements of Work (SOWs), and deliver consulting deliverables.
• Legitimate Business Interests: Maintaining platform stability, investigating security incidents, mitigating DDoS attacks, preventing fraudulent submissions, and optimizing website performance.
• Explicit Consent: Where you have expressly consented to non-essential functional or analytics cookies.
• Legal Compliance: Complying with UAE accounting, financial reporting, and statutory record-keeping obligations.

4. Cross-Border Data Transfers

As a global advisory practice with enterprise infrastructure, your data may be stored or processed in secure cloud facilities located in the United Arab Emirates, the European Union, or North America. Whenever cross-border transfers occur, we implement robust contractual and technical safeguards, including Standard Contractual Clauses (SCCs) and 256-bit encryption (TLS 1.3 in transit and AES-256 at rest).

5. Data Retention Periods

Personal data is retained only for as long as necessary to fulfill the specific purposes outlined in this policy:

• Project Inquiries & Communications: Retained for 12 months following initial inquiry if no commercial engagement ensues.
• Client Contracts & Delivery Artifacts: Retained for 5 years following engagement conclusion to satisfy statutory accounting, tax, and liability limitation requirements.
• Automated Server Logs: Automatically rotated and purged within 90 days.

6. Your Statutory Privacy Rights

Depending on your geographic location, you enjoy comprehensive rights over your personal data:

• Right of Access: Request confirmation and copies of your personal data held by us.
• Right to Rectification: Request correction of inaccurate or incomplete personal details.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal records where no overriding legal obligation exists.
• Right to Restriction & Objection: Object to or request restriction of specific processing workflows.
• Right to Data Portability: Obtain your data in a structured, machine-readable format.
• Right to Withdraw Consent: Revoke cookie or communication consent at any time.

To exercise any of these rights, please email your request to imran@haitechnologies.com. We respond to all verified Data Subject Requests within 30 days without charge.

7. Policy Amendments

We may update this Privacy Policy periodically to reflect evolving legal standards and architectural practices. Material updates will be highlighted on this page with an updated revision date.