Tareeq Technologies ("we", "us") operates GRC Sales Assist at grc.tareeq.one. This Privacy Policy explains what personal data we collect, why, and how we protect it.
| Data | Why we collect it | Retained for |
|---|---|---|
| Name, email, company, sector | Account creation and compliance analysis | Duration of account + 2 years |
| Payment details | Processed entirely by Dodo Payments — we never store card data | Not stored by us |
| Compliance analysis inputs | Generate your gap assessment and reports | Duration of account |
| Usage logs | Security, debugging, and service improvement | 90 days |
| IP address | Security and fraud prevention | 30 days |
We do not sell your personal data to third parties. We do not use your data for automated profiling that produces legal or similarly significant effects.
We share data only with:
All processors are bound by data processing agreements. No data is transferred outside the UK/EU without appropriate safeguards.
Under UK GDPR you have the right to:
To exercise any right, email [email protected]. We will respond within 30 days.
We use only a session cookie (stored in browser localStorage) to keep you logged in. We do not use advertising or tracking cookies. No third-party analytics scripts are loaded.
All data is encrypted in transit (TLS 1.3) and at rest. Access to production data is restricted to authorised personnel only. We conduct periodic security reviews.
Your account data is retained while your account is active. You may request deletion at any time by emailing [email protected]. We will delete your data within 30 days, except where retention is required by law.
We may update this policy periodically. Material changes will be communicated by email or in-platform notice. Continued use of the Platform constitutes acceptance.
Data controller: Tareeq Technologies, United Kingdom
Privacy enquiries: [email protected]
You may also lodge a complaint with the ICO (UK).