Privacy Policy
This policy explains how Gharaba ("Gharaba", "we") collects, uses and protects personal data when you use gharaba.com and the Gharaba Contract Builder at docs.gharaba.com. We are the data manager (controller) for this data under the Kingdom of Bahrain's Personal Data Protection Law, Law No. (30) of 2018.
What we collect
When you contact us
Your name, email address, and, if you give them, your company, phone number, the service you are interested in and your message.
When you use the Contract Builder
- Account: your email address, used to sign you in with a one-time link or code.
- Documents: the options and details you enter to build a contract, such as party names, and a copy of each document generated, so we can show what was produced and apply plan limits.
- Disclaimer acceptance: when you accept the terms before generating a document, we record the time, your IP address and your browser type, as evidence of acceptance.
- Subscriptions and payments: your plan, payment amounts, status and dates. Card details are entered on our payment provider's page and never reach us.
Cookies
gharaba.com does not use cookies, analytics or advertising trackers. The Contract Builder uses only the cookies needed to keep you signed in.
Why we use it
- To reply to your enquiry and, if you engage us, to provide our services. This is based on your request and on taking steps towards a contract with you.
- To provide the Contract Builder, manage your subscription and send sign-in emails. This is necessary to perform our agreement with you.
- To keep records of documents generated and terms accepted, and to meet legal, accounting and tax obligations.
- To keep our services secure and prevent misuse.
We do not sell personal data and do not use it for advertising.
Who we share it with
We use trusted providers who process data for us under contract and only on our instructions:
- Amazon Web Services: website and application hosting, and sending emails.
- Supabase: Contract Builder sign-in and database.
- Microsoft 365: our email, where enquiries are received.
- Tap Payments: payment processing, once online subscriptions open.
We may also disclose data where the law requires it, for example to a competent authority.
Transfers outside Bahrain
Some of these providers store data outside the Kingdom of Bahrain, including in the United States. Where we transfer personal data abroad, we do so as permitted by the Personal Data Protection Law, relying on appropriate safeguards such as contractual protections and our providers' security commitments.
How long we keep it
- Enquiries that do not lead to an engagement: up to 2 years, then deleted.
- Contract Builder accounts and documents: while your account is open, and for up to 2 years after it closes, unless you ask us to delete them sooner.
- Payment and subscription records: as long as Bahraini commercial and tax law requires.
Your rights
Under the Personal Data Protection Law you may ask us to tell you what personal data we hold about you and how we use it, to correct it, to delete or block it where processing is unlawful or no longer needed, and to object to processing. To make a request, email sales@gharaba.com. We will reply within the time the law allows, and may need to confirm your identity first.
If you are not satisfied with our response, you can complain to the Personal Data Protection Authority in the Kingdom of Bahrain.
Security
We protect personal data with encryption in transit, access controls and sign-in without passwords. No system is completely secure, but we work to keep your data safe and will act promptly if a breach occurs.
Changes and contact
We may update this policy; the date below shows the latest version. Questions about privacy can be sent to sales@gharaba.com.
Last updated: 26 September 2026