Legal

Privacy Policy

Last updated: [DATE] · Applies to visitors of the HASM website.

Note: This Privacy Policy is a structured draft intended to be reviewed by qualified legal counsel before publication. It should be adapted to reflect HASM's actual data practices, the jurisdictions in which HASM operates, and applicable law (including regional data protection requirements in Saudi Arabia and the GCC) prior to going live.

1. Information we collect

When you interact with this website, we may collect the following categories of information:

Contact-form data: name, work email, phone number, company, job title, country, area of interest, project stage, and message content you choose to submit.
Careers application data: name, email, area of interest, LinkedIn profile, resume link, and any information you include in your application message.
Website analytics: aggregated, non-identifying usage data such as pages visited, referral source, device type, and general location, collected through privacy-conscious analytics tools.
Cookies: essential cookies required for the site to function, and optional cookies used for analytics, subject to your consent choices via our cookie banner.

The standard contact form on this website is not designed to collect sensitive personal information (such as government identifiers, financial account details, or health information), and visitors should avoid submitting such information through the form.

2. Purpose of processing

Information submitted through this website is used to:

Respond to inquiries, consultation requests, and partnership discussions
Evaluate career applications
Improve website performance and content based on aggregated usage patterns
Maintain the security and integrity of our systems

3. Data retention

[Retention period placeholder — e.g., "Contact-form submissions are retained for up to 24 months unless a business relationship requires longer retention. Career applications are retained for up to 12 months."] Retention periods should be finalized based on legal review and business requirements.

4. Service providers

HASM may use third-party service providers to operate this website, process form submissions, send notification emails, and analyze site usage. These providers are engaged under confidentiality and data protection obligations appropriate to the services provided. [List specific service providers here once confirmed, e.g., email delivery provider, analytics provider, hosting provider.]

5. Data security

We apply reasonable technical and organizational measures designed to protect submitted information from unauthorized access, alteration, or disclosure. No system can guarantee absolute security, and we encourage visitors not to submit highly sensitive information through this website.

6. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the processing of your personal information, and to withdraw consent where processing is based on consent. To exercise these rights, contact us at [HASM_EMAIL]. [This section should be reviewed to reflect specific rights available under applicable law in your jurisdiction.]

7. International processing

Information submitted through this website may be processed and stored in locations outside your country of residence, including where HASM's service providers operate infrastructure. Appropriate safeguards are applied to such transfers where required by applicable law.

8. Policy updates

This Privacy Policy may be updated periodically to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when the policy was most recently revised.

9. Contact

Questions about this Privacy Policy or how HASM handles information can be directed to [HASM_EMAIL]or [HASM_ADDRESS].