Privacy and Personal Data Protection Policy

Effective draft: 1 August 2026. Final review by licensed Bahrain counsel is recommended.

1. Controller

CYBER EWORK IT SOLUTION (TECHTUKE), CR 100470-2, is the controller for personal data collected through techtuke.com. Privacy enquiries and rights requests may be sent to support@techtuke.com or made through the Contact page. The public registered-address disclosure remains an owner decision; support will provide an appropriate service channel for a verified request.

2. Data we process

Depending on the interaction, we process:

• account and identity data, such as name, username and login details;
• contact, billing, delivery and pickup details;
• cart, order, refund, warranty and support records;
• payment status and transaction references supplied by BENEFIT/MPGS; TECHTUKE does not claim to store full card credentials;
• quotation, CAD and project descriptions supplied by the customer (online file upload is not currently enabled);
• device, browser, IP, cookie and security-log data;
• newsletter preference and proof of consent; and
• communications and records needed to exercise legal rights or resolve disputes.

Do not send unnecessary sensitive or confidential information through ordinary forms.

3. Purposes and legal bases

We process data fairly and for specified purposes: account administration; responding to pre-contract enquiries; accepting and fulfilling orders; payment and fraud review; delivery/pickup; returns, warranty and complaints; legal/accounting compliance; service security; and, only with a valid basis, marketing. The legal basis may be consent, contract or pre-contract steps, legal obligation, vital interests, or legitimate interests that do not override the data subject’s rights, as applicable under PDPL article 4.

4. Required and optional data

Fields marked required are needed to provide the requested service or meet a legal/operational requirement. Optional data need not be supplied. Without essential order, address or contact data we may be unable to accept or fulfil an order.

5. Recipients and processors

Data may be disclosed only as necessary to hosting, website, email, analytics/consent, professional-support and security providers; BENEFIT/MPGS and relevant financial institutions; delivery providers; public authorities where legally required; and advisers supporting a claim or legal obligation. Processors must act on documented instructions and appropriate safeguards. TECHTUKE does not sell personal data.

6. International transfers

Some providers may process data outside Bahrain. A transfer will be made only using a mechanism permitted by PDPL articles 12–13, such as transfer to an adequate jurisdiction, a required Authority permission, an applicable statutory exception, or explicit informed consent where suitable. The exact provider/transfer inventory requires owner confirmation and is listed in the decision sheet.

7. Retention

We retain data only while necessary for the stated purpose, legal/accounting requirements, security, claims or dispute resolution, then delete or anonymise it. Exact operational retention schedules—including CAD/project correspondence—require owner approval and are not invented here. Customers may request deletion, subject to records TECHTUKE must lawfully keep.

8. Security and confidentiality

TECHTUKE applies reasonable technical and organisational controls appropriate to the risk and requires confidentiality from authorised persons. No internet transmission or storage method is guaranteed completely secure. Ordinary web forms are not represented as secure file-upload channels. If a project file is required, TECHTUKE will separately arrange an appropriate transfer method.

9. Rights

Subject to Bahrain law, a data subject may request information and access; correction, blocking or deletion of unlawful, inaccurate or outdated data; object to direct marketing; withdraw consent without affecting prior lawful processing; and complain to the Personal Data Protection Authority. PDPL article 18 sets a 15-business-day response period for access requests, and articles 20 and 23 set relevant 10-business-day periods for stopping direct marketing and certain correction/blocking/deletion actions.

To exercise a right, contact support and provide enough information to verify identity and locate the record. We will not ask for excessive identity data.

10. Marketing and cookies

Newsletter marketing is sent only after a clear opt-in and includes an unsubscribe method. Objection to direct marketing will be honoured. Non-essential cookies or trackers should not be activated until the user makes an informed choice; see the Cookies and Tracking Policy.

11. Children

The site is not directed to children. A person who cannot lawfully enter the relevant transaction should use the site only through an authorised parent or guardian. Do not submit a child’s data unnecessarily.

12. Complaints and updates

Raise a concern with support@techtuke.com. A data subject may also complain to Bahrain’s Personal Data Protection Authority. Material updates will be dated and will not retrospectively change the lawful basis of earlier processing.

Official legal basis

• Bahrain Law No. 30 of 2018 issuing the Personal Data Protection Law, especially arts. 2–4, 8–9, 12–13, 17–26: https://legalaffairs.gov.bh/Legislation/HTM/K3018
• Bahrain Personal Data Protection Authority: https://www.pdp.gov.bh/
• MOIC eFada data-protection policy requirement: https://www.moic.gov.bh/en/node/5220