Legal
Privacy Policy
This policy explains the categories of personal data we handle through tech-lumen.com and our business operations, the controls we apply, and the choices available to you.
Last updated: 18 August 2026
Who we are
TECH LUMEN is an active Individual Establishment [Sijilli], CR 199243-1, registered in the Kingdom of Bahrain and operating tech-lumen.com under the Tech Lumen brand. For anything related to this policy or your data, contact us at support@tech-lumen.com.
What we collect
We limit collection to what is reasonably needed for the relevant activity:
- Contact details you send us through the contact form or by email: your name, email address, and the content of your message
- Client, contact, project, contract, support, invoice, and communication records needed to scope, approve, deliver, and account for work
- Corporate-authority and identity-verification results or references when the transaction risk or applicable documents require them
- Basic technical logs kept by our hosting provider (such as IP address and request time) for security and reliability
On ordinary public pages, Google Analytics helps us understand aggregate use such as page, country, and device category. We do not use advertising trackers, and the payment-return route is excluded so its internal reference is not sent to analytics. Your theme preference remains in your browser.
Identity and signing checks
We do not routinely request CPR, Civil ID, or passport images for an ordinary enquiry or low-risk contract. Where a higher-risk signature, fraud control, or legal requirement justifies verification, we use the minimum appropriate fields and prefer an approved provider's result and reference rather than an identity-document copy.
Any exceptional document collection is disclosed before collection, restricted to authorised personnel, kept outside general CRM notes, and removed under the applicable controlled retention schedule. Never send an identity image or one-time code through ordinary email or chat.
Payments
When online payment is enabled for an invoice, the payment page is operated by the configured third-party provider. Card details go directly to that provider; Tech Lumen records only the references, status, and reconciliation evidence needed for the invoice and does not store the card number.
The presence of this policy does not mean online payment is currently enabled for every invoice or customer.
How we use your information
We use the information above to:
- Reply to your enquiries and messages
- Prepare and control quotations, engagement documents, signatures, projects, support, invoices, and payments
- Verify authority, prevent fraud, resolve disputes, and keep records required for the relevant transaction
- Protect the website and our services against abuse
We do not sell your data, and we do not use it for advertising.
Providers, subprocessors, and transfers
We use providers only for the functions we enable and need, including hosting, email delivery, public-site analytics, electronic signatures, identity verification, and online payment. Professional advisers, auditors, or authorities may receive information where the engagement or law requires it.
A provider or its subprocessor may handle data outside Bahrain. Before enabling a material workflow, we record the provider, purpose, data categories, locations, and appropriate contractual, organisational, and technical safeguards required for that transfer. The applicable controlled notice or engagement schedule gives transaction-specific detail.
Retention
Retention follows the record category and purpose, not one blanket period. Unconverted enquiries are reviewed separately from active client, contract, project, financial, support, security, audit, and verification records. We keep each category only while needed for the engagement, an applicable legal or accounting requirement, a dispute, or a documented security need, then delete or anonymise it under the controlled schedule.
Security
We use access controls, encryption where appropriate, audit records, separation of sensitive evidence, and provider reviews proportionate to the data and risk. No website, provider, or transmission can be guaranteed absolutely secure. We assess suspected incidents and make any notification required by applicable law or contract.
Your rights
You may ask what personal data we hold about you and request an applicable correction, deletion, restriction, objection, or other right, subject to identity checks and lawful exceptions. Email support@tech-lumen.com; the applicable controlled notice explains any transaction-specific route.
We handle personal data in line with the Kingdom of Bahrain's Personal Data Protection Law (Law No. 30 of 2018).
Changes to this policy
If we change this policy, we will publish the new version on this page and update the date at the top.