Privacy Policy

Last updated: [DATE] · Effective from: [DATE]

1.Who we are

B24 Biz Solutions ([FULL REGISTERED LEGAL NAME]), trade licence number [TRADE LICENCE NO.], of Office 502, 5th Floor, Al Barsha Business Center, Al Barsha, Dubai, United Arab Emirates, is the controller of the personal data described in this policy.

Contact for privacy matters: info@b24.biz. [Consider a dedicated address such as privacy@b24.biz.]

2.Scope

This policy explains how we handle personal data when you visit b24.biz, contact us, request a quotation, book a consultation, or purchase a Bitrix24 licence or service from us.

It does not cover how the Bitrix24 platform itself handles data once you are using your own Portal — that is governed by Bitrix24's own privacy policy, and by your own privacy policy toward your customers. See section 12.

3.Data we collect

Category	Examples	Where it comes from
Identity & contact	Name, company, job title, email address, phone number, country	You — via email, phone, WhatsApp, or booking a consultation
Booking data	Meeting time, timezone, answers to booking questions	Calendly, when you book a consultation
Commercial	Quotation history, order details, licence type, plan size, renewal dates	Generated as we work with you
Billing	Billing name and address, VAT/TRN number, invoice records, payment references	You, and our payment processors
Support	Ticket contents, chat and email correspondence, screenshots you send	You, when you contact support
Technical	IP address, browser type, device type, pages viewed, referring URL, timestamps	Automatically, via our web server logs

We do not collect payment card details. Card payments are handled directly by our payment processor; we receive only a confirmation and a reference, never your full card number.

We do not intentionally collect special category data (health, religion, biometrics, political opinions). Please do not send it to us.

4.How we use it

• To respond to your enquiry and prepare a quotation.
• To supply, activate and renew Bitrix24 licences, including sending the licence key to your email.
• To deliver implementation, customisation, development, integration and training services.
• To provide support and diagnose issues in your Portal.
• To issue invoices, collect payment, and keep accounting and tax records.
• To notify you about renewals, plan limits and material service changes.
• To secure our website and prevent fraud or abuse.
• To comply with legal, regulatory and Bitrix24 partner obligations.
• With your consent, to send marketing about our Bitrix24 services. [Only keep this if you actually send marketing email. If you use Zoho Campaigns or Bitrix24 CRM marketing, say so.]

We do not sell your personal data, and we do not share it with third parties for their own marketing.

5.Legal bases

Where the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) or, for clients in Europe, the UK/EU GDPR applies, we rely on:

• Contract — to supply licences and services you have ordered.
• Legitimate interests — to run and secure our business, respond to enquiries, and prevent fraud, balanced against your rights.
• Legal obligation — to meet tax, accounting and regulatory requirements.
• Consent — for optional marketing and any non-essential cookies. You may withdraw consent at any time.

6.Cookies & tracking

This website does not set its own cookies and does not use analytics or advertising trackers.

Our web server automatically records standard technical log data (see section 3), which is used for security and troubleshooting.

Google Fonts. We load the Manrope typeface from Google's font servers. This means your IP address and browser details are disclosed to Google when you load a page. See Google's privacy policy for details. [To avoid this entirely, the font can be self-hosted on your Hostinger server — ask and I will do it.]

Bitrix24. Product screenshots shown in the "One workspace. Every department." section are loaded directly from bitrix24.com. Your IP address and browser details are therefore disclosed to Bitrix24 when you load our home page. No cookies are set by these requests. [This disclosure becomes unnecessary if the screenshots are self-hosted instead — see the note we sent you.]

Calendly. If you click through to book a consultation, you leave our site and Calendly's own cookies and privacy policy apply.

7.Who we share with

We share personal data only with parties who need it, under contract, and only for the purposes described:

Recipient	Purpose	Notes
Bitrix24	Issuing and activating your licence; escalating platform defects	We must pass your account details to register the licence
Zoho	Our business email (info@b24.biz)	Correspondence with us is stored in Zoho Mail
Calendly	Consultation scheduling	Only if you book a meeting
Hostinger	Website hosting and server logs	Infrastructure provider
Payment processors (incl. Stripe)	Taking payment	They act as independent controllers for card data
Banks	Fund and wire transfers
Accountants, auditors, lawyers	Professional advice, statutory compliance	Bound by confidentiality
Authorities	Where required by law or valid legal process

If our business is sold or reorganised, data may transfer to the acquirer subject to this policy.

[Add any tool not listed — WhatsApp Business, a CRM, a ticketing tool, an email marketing platform. Omissions here are the most common way a privacy policy becomes inaccurate.]

8.International transfers

We operate from the UAE and serve clients across the Middle East and South Asia. Our service providers operate globally, so your data may be transferred to and stored in countries outside your own, including the [LIST: e.g. United States, European Union, India].

Where such a transfer is subject to UAE PDPL or GDPR restrictions, we rely on an adequacy decision where one exists, or on appropriate safeguards such as Standard Contractual Clauses. You may request details of the safeguards used.

9.How long we keep data

Data	Retention
Enquiries that do not become clients	[e.g. 24 months] from last contact
Client contract and project records	Duration of relationship + [NUMBER] years
Invoices, accounting and tax records	5 years from the end of the relevant tax period, per UAE tax law [confirm with your accountant — some records require longer]
Support tickets	[e.g. 36 months] from closure
Web server logs	[e.g. 30–90 days — confirm Hostinger's actual retention]
Marketing consent records	Until withdrawn, plus proof of withdrawal

When no longer needed, data is deleted or anonymised.

10.Security

We apply appropriate technical and organisational measures, including encryption in transit (HTTPS/TLS), access control on a need-to-know basis, credentialled access to client Portals, and use of reputable providers.

No system is perfectly secure. We cannot guarantee absolute security, and transmission over the internet is at your own risk. If a breach occurs that is likely to result in a risk to your rights, we will notify you and the competent authority as required by law.

11.Your rights

Subject to applicable law, you may have the right to:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion where we have no overriding basis to keep it.
• Restriction — limit how we use your data while a concern is resolved.
• Objection — object to processing based on legitimate interests, and to direct marketing at any time.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — at any time, without affecting prior lawful processing.
• Complain — to the UAE Data Office or your local supervisory authority.

To exercise any right, email info@b24.biz. We will respond within 30 days. We may need to verify your identity first. There is no fee unless a request is manifestly unfounded or excessive.

12.Client data in your Portal

This is an important distinction.

When we implement, customise or support your Bitrix24 Portal, we may be exposed to personal data about your customers, employees and contacts. For that data:

• You are the controller. You decide what data goes into your Portal and why.
• We act as a processor, acting only on your documented instructions.
• We access your Portal only as needed to deliver agreed Services, and we do not use your customer data for our own purposes.
• You are responsible for having a lawful basis for that data, for your own privacy notice to your customers, and for your own retention decisions.
• Where required, we will enter into a separate data processing agreement with you.

13.Children

Our services are sold to businesses and are not directed at children. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we will delete it.

14.Third-party links

Our website links to third-party sites including Bitrix24, Calendly, Facebook, Instagram, X and YouTube. We are not responsible for their privacy practices. Review their policies before providing data.

15.Changes

We may update this policy. The "Last updated" date shows the current version. Material changes affecting your rights will be communicated to you directly where reasonably possible.

16.Contact & complaints

For any privacy question, request or complaint:

If you are not satisfied with our response, you may complain to the UAE Data Office, or to your local data protection authority if you are outside the UAE.