1. Introduction 

Eemaan customers retain ownership and control of their data at all times. 

Eemaan does not independently access or use customer platform data except where required for authorised support, operational or contractual purposes. 

This Privacy Policy explains how Eemaan (“Eemaan”, “we”, “our” or “us”) safeguards information processed through our websites, products, services, support platforms and related systems. 

Eemaan primarily operates as a software and services provider for enterprise customer experience platforms. In most cases, Eemaan acts as a data processor on behalf of its customers and does not independently determine the purpose or means of processing customer data. 

We are committed to handling information securely, transparently and in accordance with applicable data protection laws, including the UK GDPR and EU GDPR where applicable. 

2. Information and System Data

As part of delivering services and support, Eemaan systems may process limited operational, technical and service-related information, including: 

• Customer configuration and operational metadata  

• System and infrastructure logs  

• Authentication and access records  

• Support and service communications  

• Technical diagnostics and monitoring information  

• Website security and analytics information  

Customer data processed through Eemaan-supported platforms remains under the control and ownership of the relevant customer organisation. 

Eemaan does not sell customer data or use customer information for advertising or profiling purposes. 

3. How Information is Used 

Information processed through Eemaan systems is used solely for legitimate operational and service-related purposes, including: 

• Delivering products and services 

• Providing customer support 

• Maintaining platform security and availability 

• Troubleshooting and diagnostics 

• Monitoring service health and performance 

• Legal and regulatory compliance 

• Business continuity and disaster recovery activities 

Eemaan does not use customer information for behavioural advertising, marketing profiling, or unrelated commercial exploitation. 

4. Sharing of Information

Eemaan does not sell or commercially disclose customer information. 

Information may only be disclosed where necessary for: 

• Service delivery 

• Infrastructure hosting 

• Security operations 

• Legal or regulatory obligations 

• Protection of legal rights and platform security 

Where third-party service providers are used, they are expected to maintain appropriate confidentiality and security controls. 

5. International Data Transfers 

Depending on customer deployments and hosting arrangements, information processed by Eemaan systems may transit through or be hosted within the United Kingdom, European Economic Area (EEA) or other customer-approved jurisdictions.

Where applicable, appropriate safeguards are implemented in accordance with relevant data protection laws.

6. Data Retention

Eemaan retains operational and service-related information only for as long as reasonably necessary for: 

• Service delivery 

• Security monitoring 

• Legal obligations 

• Contractual requirements 

• Backup and recovery purposes 

Retention periods vary depending on customer agreements, system requirements and legal obligations. 

7. Security Measures 

Access to systems and operational information is restricted to authorised personnel with legitimate business need. 

Eemaan maintains technical and organisational security controls designed to protect systems, infrastructure and information against unauthorised access, disclosure, alteration or destruction. 

Security measures may include: 

• Encryption in transit and at rest 

• Role-based access controls 

• Multi-factor authentication 

• Network segmentation and firewall protections 

• Security monitoring and logging 

• Vulnerability management 

• Secure development practices 

• Backup and disaster recovery protections 

8. Data Subject Rights

Where Eemaan acts as a data processor on behalf of customers, requests relating to personal data should generally be directed to the relevant customer organisation acting as data controller. 

Eemaan will reasonably assist customers in meeting applicable data protection obligations where contractually required. 

9. Cookies & Website Usage 

Eemaan websites may use essential cookies, security technologies and limited analytics capabilities necessary for website functionality, security and performance monitoring. 

Users may manage cookie preferences through their browser settings where applicable. 

10. Changes to This Privacy Policy

This Privacy Policy may be updated periodically to reflect operational, legal, regulatory or security changes. 

The latest version will always be published on this page together with the updated review and revision dates. 

11. Contact Information

For privacy-related enquiries, please contact: 

https://www.eemaan.com/contact-us