Privacy Policy

1. Who we are. This website and the services on it are provided by BEPRO IT CONSULTANTS L.L.C (Trade License No. 1191231), represented by Almunthir Saffan, Office No. 242, Property of Shatha Mousa Abda Ali Bin Arab, Muhaisnah 4, Deira, Dubai, United Arab Emirates. 2. What we collect, and why. Depending on the form or flow you use, we may collect: - identity and contact details (name, email address, phone number); - professional or organization details (job title, organization); - the details of your request (training, consultation, project or contact inquiry: topic, notes, context); - scheduling or delivery preferences (preferred date, language, format); - budget information you choose to share; - an attachment you choose to upload; - testimonial content you submit for publication; - newsletter consent records (email, consent time, consent wording version); - order information for book purchases: your name and email address, the book, the amount and currency, the payment status and date, references to the payment held by our payment provider, and a private access token for your purchase (see section 5); - billing and tax details for book purchases: your billing country and, only if you buy as a business and choose to provide them, your business name, billing address and tax registration number; - the tax invoice, and any tax credit note, issued for your purchase: document number and dates, the book, the amounts, the VAT and, for a purchase not made in UAE dirhams, the exchange rate used to state the VAT in dirhams; - technical, session and security data, including technical timestamps (see section 3). Not every form collects every category. Each form asks only for what it needs for that request. Payments are processed by Stripe; we never see or store your full card details. We use this data only to respond to you, deliver what you asked for, process purchases, issue tax invoices and keep the accounting and tax records that UAE law requires, send newsletters you subscribed to, and keep the site secure. We handle it in line with Federal Decree-Law No. 45 of 2021 Regarding the Protection of Personal Data, including its principles of purpose limitation and storage minimisation. 3. Technical and security data. Visiting a page creates a session record containing your IP address and a browser/device identifier. Session records are configured to expire after approximately 120 minutes of inactivity; actual cleanup timing may vary. Admin sign-ins (staff only) are logged with the IP address for security. Our records also carry technical timestamps, such as when a record was created, confirmed, paid or last updated. The retention periods in section 8 are counted from these timestamps, and tax years are counted in Dubai time. 4. Tax invoices and VAT. Prices shown at checkout include VAT where VAT applies. For each paid book purchase we issue our own tax invoice, in English and Arabic, and a tax credit note if a refund is made. Billing and location information may be used to determine the applicable VAT treatment. Where the appropriate treatment cannot be determined automatically, the tax document may be held for review. When a purchase is not made in UAE dirhams, we state the VAT amount in dirhams using the exchange rate published for VAT purposes by the Central Bank of the UAE; the invoice shows that rate and its date. We read this rate from the Central Bank's public page, and no personal data is sent to it. Only where the appropriate VAT treatment needs review, or an invoice cannot be issued immediately and has to be recovered, may a tax invoice be issued afterwards. This applies to those cases only, not to every purchase, and it does not affect your access to the book. For simplified consumer tax invoices, buyer information is limited to what is required for the transaction and applicable tax requirements. An invoice issued to a business with a UAE tax registration number shows the business name, address and tax registration number you provided. Issued tax documents are stored so that they cannot be altered; a correction is made with a credit note. 5. Your purchase access link. Each book order has a private access token. We store it with the order and use it in the links we email to you and show after purchase. Those links let you open your purchase confirmation, download the book again and open your tax invoice. Anyone who has a link can use it, so please keep it private. The token is kept for as long as the order is kept (see section 8). Downloads are switched off for an order that has been fully refunded. 6. Who receives your data. Stripe receives your payment details and the billing details you enter at checkout, and provides us with the billing country and, where provided, relevant business billing and tax-registration details. Our hosting provider stores site data and carries site email. We do not otherwise share your data except where the law requires it. 7. Cookies. See the Cookie Policy. 8. Current retention rules and behavior. The periods below are our own retention policy, except where a longer period is required by law. Newsletter sign-ups never confirmed: deleted after 30 days. Confirmed newsletter subscribers: kept while you remain subscribed. Unsubscribed newsletter addresses: when you unsubscribe, we remove your email address and your consent and confirmation details. We keep only a minimal suppression record: a one-way keyed hash of your email address (it cannot be turned back into the address), the unsubscribed status and the unsubscribe date. It is kept so that we do not email you again, until you actively re-subscribe and confirm afresh. Business inquiries (training, consultation, project, contact): kept for 24 months after the last relevant update while the request is in a closed or declined state, then permanently deleted. Resource and book download requests: 24 months, then permanently deleted. Privacy requests: kept for 3 years after the last update to a request that is completed, rejected or closed, for compliance and audit evidence, then permanently deleted unless an active legal obligation requires continued retention. Paid book orders: we keep the full paid order record, including your name and email address, the order details and the private access token, until 31 December of the seventh year after the year of purchase (for example, a purchase made in 2026 is kept through 31 December 2033), in line with UAE tax and accounting recordkeeping requirements. The record is then permanently deleted. Tax invoices and tax credit notes: kept for the same period, counted from the year of the sale, then permanently deleted. Unpaid, abandoned or expired book orders: deleted about 90 days after they expire or are abandoned. An order that is still marked pending after that time is first checked with the payment provider: if it was in fact paid, it is kept as a paid order; otherwise it is deleted. Admin security log: 12 months, then permanently deleted. When a retention period ends, the data is deleted from the live database. Copies may remain temporarily in hosting backups until those backups expire under the hosting provider's backup-retention cycle. 9. Your rights. You may ask to access, correct or delete your personal data, or make another privacy request, using the privacy request form linked from this page. We review every request manually and verify your identity before releasing, correcting or deleting any data. Where you ask us to delete data that we are legally required to keep, such as paid order and tax invoice records, we will explain what we must keep and for how long, and delete the rest. 10. Governing law. This policy is governed by the laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 Regarding the Protection of Personal Data. 11. Contact. info@almunthirsaffan.com