Privacy Policy
MENA Region Integrated Computing Solutions Company (Single Person Company)
Commercial Registry No. 541304 · License No. 2026/2242 Registered office: Fahad Al-Salem Street, Al-Qiblah, Capital Governorate (Al-Asimah), State of Kuwait
Last updated: 8 July 2026
Governing language. This Privacy Policy is issued in Arabic and English. The Arabic version is the governing text; this English version is a courtesy translation provided for convenience. In the event of any discrepancy or conflict of interpretation, the Arabic version prevails.
1. Scope of this Policy
This Policy explains how MENA Region Integrated Computing Solutions Company (“the Company”, “we”, “us”) collects and processes personal data through this marketing website (menaregionsolutions.com and its subdomains).
This Policy covers the website only. Our products — including Ithbat, Ahkam, and Marja’ — process data under separate contractual agreements and product-specific privacy and data-processing terms entered into with each client. Nothing in this Policy governs, describes, or limits the processing of client or end-user data within those products. Where you engage a product, the governing instrument is that product’s agreement, not this website Policy.
2. Regulatory framework
We process personal data in accordance with the Data Privacy Protection Regulation issued by the Communication and Information Technology Regulatory Authority (CITRA), Decision No. 26 of 2024 (“DPPR”), and applicable laws of the State of Kuwait. The Company is a CITRA-licensed entity (approval No. 222).
3. Website infrastructure and data residency — important distinction
We draw a deliberate and explicit distinction between two categories of infrastructure:
- This marketing website operates on commercial international hosting and service providers (identified in Section 8). Data submitted through this website — such as a demo request or newsletter subscription — is processed by those providers, some of which are located outside the State of Kuwait.
- Our products operate on infrastructure selected for data residency and sovereignty requirements under the applicable product agreement. Regulated client and end-user data handled within our products is governed by those agreements and their residency commitments, not by this website Policy.
We make this distinction plain so that the international providers supporting this brochure website are not mistaken for, and do not extend to, the residency arrangements that apply to our products.
4. Personal data we collect
We collect only the data you provide or that is strictly necessary to operate the website:
| Context | Data collected | Purpose |
|---|---|---|
| Demo / contact request | Name, email address, phone number, company, and message content | To respond to your enquiry and arrange a demonstration |
| Newsletter subscription | Email address and language preference | To send the newsletter you requested, using double opt-in confirmation |
| Meeting booking | Data you submit to the third-party booking tool (Cal.com), such as name, email, and selected time | To schedule a meeting you request |
| Rate-limiting / abuse prevention | IP address, processed transiently | To protect our forms from automated abuse; not retained as a profile |
| Cookie consent | Your consent choices | To record and honour your cookie preferences |
We do not operate website analytics, advertising trackers, or visitor profiling on this website.
5. Legal bases for processing
Under the DPPR, we rely on the following bases:
- Consent — for the newsletter (confirmed via double opt-in) and for any non-essential cookies.
- Legitimate operation of the service and taking steps at your request — for responding to demo and contact enquiries you initiate.
- Legitimate interest in security — for transient IP processing to prevent abuse of our forms.
You may withdraw consent at any time (Section 9); withdrawal does not affect processing carried out before withdrawal.
6. Cookies
Cookies on this website are managed through a consent management platform (CookieYes). On your first visit you are presented with a cookie banner allowing you to accept or reject non-essential categories.
- Strictly necessary cookies — including your language preference cookie (
mena_lang, retained for up to one year) and the cookies set by the consent platform to record your choices. These are required for the website to function and are not subject to consent. - We do not currently deploy analytics, functional-tracking, or marketing cookies beyond the strictly necessary category described above.
You can change or withdraw your cookie choices at any time via the cookie settings control on the website.
7. Retention
- Demo / contact enquiries — retained for as long as necessary to handle your enquiry and for a reasonable period thereafter for record-keeping, then deleted.
- Newsletter data — retained until you unsubscribe, or after 24 months of inactivity, whichever occurs first.
- IP addresses (rate-limiting) — processed transiently and not stored as a durable record.
- Cookie consent records — retained as required to evidence your consent.
8. Service providers (sub-processors)
We use the following providers to operate the website. Some are located outside the State of Kuwait; see Section 3 and Section 10.
| Provider | Function | Location |
|---|---|---|
| Vercel Inc. | Website hosting and content delivery | United States |
| Resend | Transactional email (demo requests, newsletter confirmation) | United States |
| Upstash | Rate-limiting (transient IP processing) | United States |
| Cal.com | Meeting booking embed on the contact page | United States |
| CookieYes | Cookie consent management | United States |
Each provider processes data only as necessary to deliver its function and under its own terms. We do not sell personal data to any party.
9. Your rights under the DPPR
Subject to the conditions and exceptions of the DPPR, you have the right to:
- access the personal data we hold about you;
- request rectification of inaccurate or incomplete data;
- request erasure of your data;
- object to or request restriction of processing;
- withdraw consent where processing is based on consent.
To exercise any right, contact us at privacy@menaregionsolutions.com. We aim to respond within 30 days of a verified request; where a request is complex, we will inform you and explain any necessary extension. (The DPPR does not fix a mandatory response period; 30 days is a service commitment we adopt voluntarily.)
If you believe your rights have not been respected, you may raise the matter with CITRA.
10. Cross-border data transfers
Because certain website providers (Section 8) are located outside the State of Kuwait, personal data you submit through this website may be processed abroad. We limit such transfers to what is necessary to operate this website, and we engage providers on terms intended to protect your data consistent with the DPPR. As stated in Section 3, this cross-border arrangement applies to the website only and does not extend to the residency commitments that govern our products.
11. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. No transmission over the internet can be guaranteed as absolutely secure; you submit data at your own discretion.
12. Children
This website is directed at businesses and professional users. We do not knowingly collect personal data from children.
13. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date reflects the most recent version. Material changes will be indicated on this page.
14. Contact
Data protection point of contact: Email: privacy@menaregionsolutions.com Postal: Fahad Al-Salem Street, Al-Qiblah, Capital Governorate, State of Kuwait
15. Governing law
This Policy is governed by the laws of the State of Kuwait. Any dispute arising from it falls within the exclusive jurisdiction of the competent courts of the Capital Governorate (Al-Asimah), State of Kuwait.