Privacy Policy

Frodiq, in the Kingdom of Bahrain, is the controller of the personal data described in this policy. We have not appointed a Data Protection Officer; inquiries under this policy are handled by our team and reach us at the address in section 9.

This policy is written with reference to Bahrain's Personal Data Protection Law (Law No. 30 of 2018).

It does not cover personal data that a customer puts into the Frodiq product — their customers' records, transactions, alerts, cases and training records. For that data the customer is the controller and Frodiq is a processor acting on their instructions, and the terms are set out in that customer's own agreement, not here.

If you are an individual whose data may be held inside a Frodiq customer's account, the organisation you deal with is the right place to direct a request; we will support them in answering it.

This website has no analytics, no advertising or tracking pixels, no tag manager and no third-party scripts. There are no forms on it. What exists is the following, and nothing else.

Your language choice, stored in your own browser under the key fq-public-locale so the site opens in the language you picked. It is never sent to us.

Your light or dark theme preference, stored in a cookie named fq-theme so the site and the product look the way you chose. It carries no identifier and is used for nothing else.

Ordinary technical records kept by our hosting provider when a page is requested — including the IP address, the time, the page and the browser's user-agent string. These exist to deliver the site, keep it available and investigate abuse or faults.

If you contact us by email, WhatsApp or telephone, we receive what you choose to send: your name, the contact details you use, your organisation, and the content of your message. We keep that correspondence so we can respond, and so we have a record of what was discussed.

We do not need special categories of personal data in order to talk to us about the product. Please do not send them, and please do not send real customer records when a sample will do.

To deliver and secure this website, and to keep a record of requests made to it — on the basis of our legitimate interest in operating and protecting our own service.

To remember your language and theme choices — on the basis of your action in choosing them; both are preferences you can clear at any time by clearing your browser storage for this site.

To respond to your inquiry and to take steps at your request before entering into a contract — on the basis of that request, and of our legitimate interest in responding to people who approach us.

To meet our own legal, accounting and record-keeping obligations, where they apply.

Preferences stored in your browser remain until you clear them; nothing on our side depends on them.

Hosting request records are retained for a short operational period by our hosting provider and are not used to build any profile.

Correspondence about a possible or actual business relationship is kept for as long as the relationship is live and for a reasonable period afterwards, so that we can evidence what was agreed and meet any legal or accounting requirement. Inquiries that do not lead anywhere are deleted once they clearly will not.

We use a small number of service providers to run the site and receive messages. Each processes personal data on our instructions and under contract.

Vercel — hosting for this website, and the technical request records described in section 3.

Forward Email — inbound forwarding of messages sent to our published address, into our own mailbox.

Microsoft — the mailbox in which we receive and keep that correspondence.

Resend — sending email from us, including replies and product notifications.

If you choose to contact us on WhatsApp, that conversation also passes through WhatsApp's own service under its own terms, which is worth knowing before you use it for anything sensitive.

We do not sell personal data, and we do not share it for anyone else's marketing.

Some of the providers above operate infrastructure outside the Kingdom of Bahrain, so data covered by this policy may be processed abroad. Where that happens we rely on the contractual terms we have with each provider, which bind them to process the data only on our instructions and to protect it.

Where a transfer of personal data outside Bahrain requires a specific lawful basis or an authorisation under the Personal Data Protection Law, we will obtain it before relying on the transfer.

Where customer data inside the product is hosted and processed is a separate question, and it is answered in the customer agreement rather than here.

Under Bahrain's Personal Data Protection Law you may ask us to confirm what personal data we hold about you and give you access to it; to correct it where it is inaccurate or incomplete; to erase it; to stop or restrict a particular use; to object to processing we carry out on the basis of a legitimate interest; and to provide the data you gave us in a portable form.

To exercise any of these, write to hello@frodiq.com. We will respond within the period the law allows, and we may need to confirm who you are first so that we do not disclose your data to somebody else.

If you are not satisfied with how we have handled your request, you may complain to Bahrain's Personal Data Protection Authority. We would rather you told us first, but that route is yours either way and using it costs you nothing with us.

Access to the systems described here is limited to the people who need it, protected by individual accounts, and revoked when it is no longer required. Traffic to this site is encrypted in transit.

We hold no security certification, and we do not claim one. What we can describe is what the product actually enforces, and we would rather point a prospective customer at that than at a badge.

We may update this policy. The date at the top of this page always shows when it last changed, and where a change is significant we will say so on this page.

Questions, requests or complaints: hello@frodiq.com.