Privacy Policy

This policy explains how QadriSoft (“we”, “us”) collects, uses and protects personal information when you use this website. QadriSoft is a software development business operating remotely from Riyadh, Saudi Arabia and the United Kingdom. It is not yet a registered company and is operated by its founder, who is the data controller for the information described here. You can contact us by email at info@qadrisoft.com or through our contact form.

Information we collect

• Contact form submissions: your name, email address, company (optional), the service you are interested in, optional budget and timeline, and the project details you choose to share.
• Abuse-prevention data: a one-way, salted hash of your IP address and your browser's user-agent string, stored with your inquiry to limit spam and repeated submissions. We do not store your raw IP address with your inquiry.
• Hosting logs: our hosting provider processes standard technical logs (such as IP address, requested page and time) to deliver and secure the website.

We do not ask for sensitive personal data. Please do not include it, or confidential business information, in the contact form.

How we use it and why

• To reply to your inquiry and discuss a possible project. This is in our legitimate interest in responding to business inquiries, and it is a step you ask us to take before any contract.
• To keep a record of our correspondence, for the same legitimate interest and to meet legal record-keeping duties if we work together.
• To protect the website from spam, abuse and attacks, in our legitimate interest in keeping the service secure.

Where the law requires consent, we rely on the consent you give when you tick the box on the contact form. You can withdraw it at any time. We do not sell personal information, use it for advertising, or make decisions about you by automated means.

Which laws apply

We handle personal information in line with the data-protection laws that apply to you. These include the UK GDPR and Data Protection Act 2018, the EU GDPR, Saudi Arabia's Personal Data Protection Law (PDPL), the UAE's Federal Decree-Law No. 45 of 2021 on Personal Data Protection, and the laws of Pakistan. If these laws differ, we apply the protection that is more favourable to you where we can.

Who we share it with

We use a small number of service providers who process data on our behalf, under contracts that require them to protect it:

• Vercel: website hosting and content delivery.
• Supabase: database and sign-in for authorised staff. Inquiries are stored here.
• An email delivery provider, if we enable email notifications, so that inquiries reach us.

We may also disclose information when the law requires it, or to protect our rights, users or the public.

International transfers

Our database and hosting are located in the United States, so your information is transferred outside your country. We rely on our providers' data-processing terms, including standard contractual clauses or equivalent safeguards where the law requires them, to protect it.

How long we keep it

We keep contact-form inquiries for up to 24 months after our last contact with you, then delete them. If your inquiry leads to a project, we keep the related correspondence for the length of the engagement and for as long as accounting, tax or other legal obligations require. Hosting logs are kept by our provider for a short period, typically days to weeks.

How we protect it

The website is served only over encrypted HTTPS. Inquiries can be read only by authorised staff who have been given the inquiries permission, and the database enforces this access on every request. Staff accounts are personal and can be withdrawn at any time.

Cookies

The public website does not use advertising, analytics or tracking cookies. Strictly necessary cookies are used only when authorised staff sign in to the administration area. If we add analytics in future, we will update this policy and, where required, ask for your consent first.

Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy;
• correct inaccurate information;
• have your information deleted;
• restrict or object to how we use it;
• receive it in a portable format; and
• withdraw consent at any time, without affecting earlier processing.

To make a request, contact us by email at info@qadrisoft.com or through our contact form. We may need to confirm your identity, and we aim to reply within one month. You may also complain to your data-protection authority, such as the UK Information Commissioner's Office (ICO), the Saudi Data & AI Authority (SDAIA), or the authority in your country. We would appreciate the chance to resolve your concern first.

Children

This website is intended for businesses and is not directed at children under 18. We do not knowingly collect their information.

Changes to this policy

We may update this policy as our services or the law change. The “Last updated” date at the top shows the latest version. If a change significantly affects how we use your information, we will make it clear on this page.