Privacy policy

Last updated: 9 June 2026

1. Who we are

Data controller: BARS AI LTD (company number 16732165), a company incorporated in England and Wales.

Registered office: 128 City Road, London, EC1V 2NX, United Kingdom

This policy describes how we process personal data when you use the website at barsagency.qa (the "Site") and related enquiry flows operated for BARS AI LTD. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) as supplemented by the Data Protection Act 2018 and applicable UK privacy and electronic communications rules.

2. Personal data we collect

We only collect information that is adequate, relevant, and limited to what is necessary for the purposes set out below. Depending on how you use the Site, this may include:

  • Identity and contact details (for example name, email address, telephone number)
  • Organisation and role details you choose to provide (for example company name)
  • Message content and project context you submit through forms
  • Technical and usage data (for example IP address, browser type, device identifiers, pages viewed)
  • Cookie and similar technology data, where you have consented or where strictly necessary

3. Purposes and lawful bases

We use personal data for purposes that may include:

  • Responding to enquiries and delivering services — lawful bases: performance of a contract, steps prior to a contract, and legitimate interests in operating our business.
  • Site security, fraud prevention, and abuse monitoring — lawful basis: legitimate interests (and legal obligations where applicable).
  • Analytics to improve the Site — lawful basis: consent where required, otherwise legitimate interests, depending on the technology used and your choices.
  • Compliance with law — lawful basis: legal obligation.

Where we rely on legitimate interests, we balance our interests against your rights and you may object in certain circumstances (see section 6).

4. Cookies and similar technologies

We use cookies and similar technologies where permitted by the Privacy and Electronic Communications Regulations (PECR) and related UK guidance. This may include:

  • Strictly necessary cookies required for the Site to function
  • Functional cookies that remember your preferences
  • Analytics cookies to understand aggregate usage (where consented or otherwise permitted)
  • Security and performance cookies

Where non-essential cookies are used, we will seek consent in line with UK requirements and you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

5. Recipients, processors, and international transfers

We may share personal data with trusted service providers who process data on our instructions (for example hosting, email delivery, analytics, security, or customer relationship tools). We require processors to implement appropriate safeguards.

If personal data is transferred outside the UK, we will ensure an approved transfer mechanism applies (for example the UK extension to the EU International Data Transfer Agreement, UK adequacy regulations, or another valid safeguard) unless an exception applies.

6. Retention

We retain personal data only for as long as necessary for the purposes collected, including to satisfy legal, accounting, or reporting requirements, and then delete or anonymise it in line with our retention schedules.

7. Your rights

Under UK data protection law you may have the following rights (subject to conditions and exemptions):

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure in certain circumstances
  • Right to restriction of processing in certain circumstances
  • Right to data portability where applicable
  • Right to object to processing based on legitimate interests or for direct marketing
  • Rights related to automated decision-making and profiling where applicable

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). For more information, visit ico.org.uk.

To exercise your rights, contact us using the details in section 9. We may need to verify your identity before responding.

8. Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. No method of transmission over the internet is completely secure; we encourage you to use strong passwords and secure channels when contacting us.

9. Contact

For privacy questions or requests, email privacy@barsagency.qa. Postal correspondence may be sent to the registered office in section 1.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top will change when we publish a new version. Where changes are material, we will take additional steps as appropriate under UK law (for example, providing a notice on the Site or seeking consent where required).