Privacy Policy

Effective date: 14 November 2026  ·  Last updated: 14 November 2026

1. Who we are

This website is operated by Graphivox, a creative design and IT solutions business based in the Kingdom of Bahrain (“Graphivox”, “we”, “us”, “our”). For the personal data described in this policy, we are the data controller (data manager): we decide how and why it is used.

This policy is written to meet the Kingdom of Bahrain’s Personal Data Protection Law (Law No. 30 of 2018, “PDPL”). Because we work with clients in many countries, we also apply the protections of other privacy laws that may cover you, such as the EU and UK General Data Protection Regulation (GDPR) and India’s Digital Personal Data Protection Act, 2023.

2. Data we collect

a) When you visit this website

Like every website, our hosting server automatically records basic technical information when a page is requested: your IP address, browser and device type, the page requested, the referring page and the date and time. These server logs are kept by our hosting provider for security and to keep the site working. We do not use them to identify or profile you.

All fonts, images and scripts on this website are served from our own server. Your visit is not reported to Google, Meta or any other third party.

b) When you use the enquiry form

The form asks for your name and, if you choose, your business name, the service you need and a short message. When you press Send On WhatsApp, these details are placed into a WhatsApp message on your own device. They are not sent to or stored on our website. We receive them only if you then send that message in WhatsApp.

c) When you contact us or become a client

When you message or call us, or we work together, we may collect:

• Contact details: name, phone / WhatsApp number, email address, business name and job title.
• Communications: the messages, voice notes and files you send us.
• Project materials: briefs, logos, photos, text, product information and other content you provide for your project. These may include personal data about other people (for example staff photos or testimonials). Please share them only if you are allowed to.
• Account access: where you ask us to manage a website, social media or advertising account, the access you give us to it. We recommend granting team or partner access instead of sharing passwords.
• Billing details: billing name, address, tax registration number, invoices and payment records. We do not store full card numbers.

We do not ask for sensitive personal data (such as health, religion, ethnicity or biometric data). Please do not send it to us unless it is truly needed for your project.

3. How and why we use your data

We use personal data only where the law allows it:

We do not use your data for automated decision-making or profiling that has legal or similarly significant effects on you.

4. Cookies and tracking

This website does not set any cookies and does not use analytics, advertising pixels, fingerprinting or similar tracking. That is why you do not see a cookie banner.

If you click a WhatsApp link, WhatsApp (operated by Meta) may use its own cookies or similar technology under its own privacy policy. If we ever add analytics or other tracking, we will update this policy first and ask for your consent wherever the law requires it.

5. Who we share it with

We never sell or rent personal data. We share it only when needed, with:

• Service providers who help us run our business, such as website hosting, WhatsApp and email, cloud file storage, and accounting. They may use your data only to provide their service to us.
• Trusted team members and subcontractors who help deliver parts of a project (for example development, printing or photography). They receive only what they need for the task and must keep it confidential. We stay responsible for their work.
• Platforms you ask us to use for you, such as social media networks, Google or Meta advertising, domain registrars and app stores, under their own terms.
• Authorities, courts or advisers (such as lawyers and auditors) where the law requires it or where needed to protect our rights.
• A future owner of our business if it is reorganised or sold, under the same protections.

6. International transfers

We are based in Bahrain, but some of our service providers (for example WhatsApp and cloud storage) and some subcontractors operate in other countries. Your data may therefore be processed outside Bahrain or outside your own country.

We transfer personal data abroad only where the applicable law allows it: to countries recognised as giving adequate protection, where the transfer is needed to perform the contract you asked us for, with your consent, or with suitable safeguards such as contractual commitments from the recipient. By sending us an enquiry through WhatsApp, you understand that the message travels through WhatsApp’s international infrastructure.

7. How long we keep it

• Enquiries that do not lead to a project: up to 12 months, then deleted.
• Client project files and messages: for the project and while you remain a client, so we can support you and supply files you need later. After that, we keep them for up to 3 years unless you ask us to delete them sooner.
• Invoices and accounting records: for as long as Bahraini commercial and tax law requires.
• Server logs: for the short period set by our hosting provider, normally no more than a few months.
• Account access you gave us: removed when the work ends. Please also remove our access on your side.

8. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. These include secure connections, access limited to people who need it, strong passwords and two-factor authentication on our accounts, and confidentiality duties for everyone who works with us. No system is completely secure. If a breach is likely to put your rights at risk, we will inform you and the relevant authority as the law requires.

9. Your rights

Subject to the conditions in the law that applies to you, you can ask us to:

• Access: tell you whether we hold your data and give you a copy.
• Correct data that is wrong or incomplete.
• Delete your data, or block its use, where it is no longer needed or was processed unlawfully.
• Object to our use of your data, including at any time for direct marketing.
• Withdraw consent at any time, without affecting what was done before.
• Restrict processing or receive your data in a portable format, where GDPR applies.

To use any of these rights, message us on WhatsApp (see Contact us). We may need to confirm your identity first. We will reply without undue delay and within the time the law allows, normally within 30 days. There is no charge unless a request is clearly unfounded or excessive.

If you are unhappy with how we handled your data, please tell us first so we can put it right. You also have the right to complain to the Personal Data Protection Authority of the Kingdom of Bahrain, or to the data protection authority in your own country.

10. Marketing messages

We send offers or updates only if you agreed to receive them or you are an existing client and the messages relate to similar services. Every message lets you opt out. Simply reply “STOP” and we will not contact you for marketing again.

11. Children

Our services are for businesses and adults. This website is not aimed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, please contact us and we will delete it.

12. Other websites

This website links to other services, such as WhatsApp, and our portfolio may name client businesses. We are not responsible for the privacy practices of other websites or apps. Please read their own policies.

13. Changes to this policy

We may update this policy when our services, tools or the law change. The “Last updated” date at the top shows the current version. If a change significantly affects you, we will tell you directly where we can.

14. Contact us

For any privacy question or request, contact Graphivox:

• WhatsApp +973 3450 3489
• Graphivox.com
• Kingdom of Bahrain

See also our Terms & Conditions.