DataPassage Privacy Policy

1. Who is responsible for your information

The website is operated by Data Passage LLC, a Jordanian limited liability company registered in Amman, Jordan (company registration no. 84336) (“DataPassage”, “we”, “us” or “our”). Our listed offices are City Tower 2, 13th Floor, Sheikh Zayed Road, P.O. Box 186661, Dubai, UAE, and Tla' Al Ali, next to Aramex, Building 16, 3rd Floor, Amman, Jordan. For privacy questions or requests, email support@datapassage.ai with the subject line “Privacy request”.

This policy applies to personal data collected through the website and its contact form. It does not govern information handled by another organization through a link, email, telephone, WhatsApp, or other service after you leave this website. The relevant provider’s own privacy terms apply to that separate interaction.

2. Information we collect

If you submit the website contact form, we collect the information you enter or select:

• your name;
• your work email address;
• your organization;
• your selected area of interest (Data, Artificial Intelligence, Cybersecurity, More than one practice, or Not sure yet); and
• the contents of your message and your recorded consent to our use of these details to respond.

Please do not include sensitive personal data, credentials, confidential client material, or information about another person unless it is necessary and you are authorized to provide it. The form is for business enquiries, not for sending sensitive or confidential material.

When your browser requests pages, Vercel, our hosting and delivery provider, may process technical information such as an IP address, request time, browser or device details, and security or error logs. Vercel retains these runtime logs for 1 day under the hosting plan used for this website.

3. Why we use information

We use contact-form information to receive, assess and respond to your enquiry, communicate with you about the subject you raised, and decide whether a separate business discussion is appropriate. We may also use technical information to deliver the website, diagnose errors, protect the website and its infrastructure, and meet legal obligations. We do not use contact-form details for advertising, behavioral profiling, or unsolicited mailing-list marketing.

4. Legal basis and consent

The contact form asks you to actively agree that DataPassage may use the submitted details to respond to your enquiry. We rely on that consent for the form’s stated purpose where consent is required or appropriate. You can withdraw consent by emailing support@datapassage.ai. Withdrawal does not make earlier processing unlawful and does not require us to erase information that we must retain for a legal obligation, a dispute, or another basis allowed by applicable law.

Where applicable, we may process limited information without consent when a law permits or requires it, including to secure the website, establish or defend legal claims, or comply with a legal obligation. We will not use that basis to expand the purposes described in this policy without providing any notice required by law.

5. Who receives information

Contact-form submissions are transmitted using Google’s email service to info@datapassage.ai so that we can reply. The website is hosted on Vercel, which may process data and technical request information to host, deliver and protect the website. Google and Vercel act as independent service providers or processors depending on the service and circumstances. We may also disclose information to professional advisers, competent authorities, or other persons where required by law or necessary to protect legal rights or security.

We do not sell personal data or share it with advertisers for targeted advertising. Access is limited to people and service providers who need it for the purposes above and are subject to appropriate confidentiality and security obligations.

6. International processing

Google and Vercel may process or store information in countries outside Jordan or the UAE. The locations and onward service providers depend on the services and their current arrangements. Where applicable law requires safeguards for an international transfer, we use a transfer mechanism permitted by that law.

7. How long we keep information

We keep enquiry emails that do not lead to a business relationship for up to 12 months after the last substantive contact, then delete or anonymize them unless a legal obligation, active dispute, or other lawful need requires longer retention. Information connected with a business relationship is kept for as long as needed to manage that relationship and meet applicable legal requirements. Vercel runtime logs are retained for 1 day, as described above.

8. Your privacy rights

Depending on where you are and which law applies, you may be entitled to ask us to confirm whether we hold your personal data, provide access or a copy, correct inaccurate or incomplete data, restrict or object to certain processing, erase data where legally available, or withdraw consent. Rights are subject to legal conditions and exceptions. We may need to verify your identity and clarify the request before acting. We will respond within the period required by applicable law.

To exercise a right or raise a concern, email support@datapassage.ai. You may also complain to the competent data-protection authority in Jordan or the UAE, as applicable. A request to withdraw consent can be made at any time using the same contact address.

9. Cookies and similar technologies

The website currently does not use advertising cookies or analytics or tracking cookies. We do not use cookies to build advertising profiles. Hosting, delivery, security, or browser functions may involve technical information or strictly necessary technologies. If we add analytics, advertising, embedded third-party content, or non-essential cookies, we will update this policy and provide any choice or consent mechanism required by law before using them.

10. Security and incidents

We use reasonable technical and organizational measures intended to protect information against unauthorized access, loss, alteration or disclosure. Internet transmission and storage cannot be guaranteed completely secure. If an incident affects your personal data, we will assess it and make any notifications required by applicable law.

11. Children

This business website is intended for organizations and business enquiries and is not designed for children. We do not knowingly request personal information from children through the contact form. If you believe a child has submitted information, contact us so we can review and address it.

12. Updates and contact

We may revise this policy when the website, processing arrangements, or applicable law changes. The current version will be posted on the website with its effective date. Material changes will be highlighted where required. Effective date: 30 September 2026.