Data Sovereignty Guarantee
We do not train public foundational models on proprietary client data or research consultations without explicit, written mutual consent.
1. Information We Collect
We collect and process the minimum amount of information necessary to deliver technical research, consulting services, and client portal operations:
- Identity & Contact Data: Name, professional work email address, organization name, and sector classification submitted via consultation request forms.
- Technical & System Telemetry: Anonymized server logs, browser type, operating system parameters, and diagnostic telemetry required for system security and DDoS mitigation.
- Client Portal Credentials: Authentication tokens and access records associated with registered enterprise portal accounts.
2. How We Use Collected Information
Information gathered across our digital interfaces is utilized strictly for the following purposes:
| Purpose of Processing | Legal Basis | Retention Period |
|---|---|---|
| Consultation & Advisory Requests | Contractual Pre-engagement | Active Engagement + 12 Months |
| Client Portal Dashboard Operations | Contractual Fulfillment | Duration of Client Account |
| Network Security & Threat Prevention | Legitimate Security Interest | 30 Days (Rolling Log Cycle) |
| Regulatory & Export Compliance | Legal Obligation (UAE Law) | Mandated Statutory Period |
3. Data Protection & Security Architecture
All sensitive client communication, research data, and telemetry are guarded by enterprise-grade cryptographic standards. We enforce strict role-based access control (RBAC), end-to-end encryption in transit (TLS 1.3), and AES-256 encryption for data at rest.
Third-Party Sharing Policy
LAJHAR does not sell, rent, or trade personal identification or proprietary corporate information to third-party advertisers or data brokers under any circumstances.
4. Your Legal Rights
In accordance with applicable privacy regulations, including the UAE Data Protection Law, you maintain the following rights regarding your personal records:
- Right to Access: Request a complete audit record of your stored personal and corporate contact data.
- Right to Rectification: Correct inaccurate or incomplete records associated with your account.
- Right to Erasure: Request the deletion of non-statutory records when no longer necessary for operational purposes.
- Right to Restriction of Processing: Restrict how your data is handled during active dispute resolutions.
5. Contact Our Data Governance Team
For any inquiries regarding data protection, privacy compliance, or to exercise your statutory rights, please contact our designated privacy officer: