Legal
Privacy policy
Your privacy matters to us. This policy explains what personal data Mullak+ collects through this website and platform, why we collect it, how long we keep it and the rights you have under Bahrain’s Personal Data Protection Law.
Who we are
Mullak Plus ("Mullak+", "we", "us") operates this website and the Mullak+ property management platform. We are the data controller for the personal data described in this policy. Our office is at Seef Hub Tower, Seef District, Kingdom of Bahrain, and you can reach us at [email protected].
We process personal data in line with the Kingdom of Bahrain's Personal Data Protection Law (Law No. 30 of 2018) and its implementing regulations.
What this policy covers
This policy explains how we handle personal data collected through this website: the contact form, the careers application form, the newsletter sign-up and the technical data our servers record when you visit. When you use the Mullak+ app and services under an agreement with us, the data you enter to manage your properties is also handled as described here, together with the terms of that agreement.
The information we collect
- Contact form: your name, email address and message, and — if you choose to give them — your phone number, company, the topic of your enquiry, the plan you are interested in and the number of units you manage.
- Careers applications: your name, email address, phone number, the role you are applying for, an optional link to your profile or portfolio, your cover note and your CV file.
- Newsletter: your email address and your consent to receive our updates.
- Technical data: when you visit the website, our servers record technical information such as your IP address, browser type, the pages requested and the date and time. We use it to keep the website secure, prevent abuse and fix errors.
- Platform data: when you use the Mullak+ app, the information you enter about your properties, units, contracts, tenants, payments and maintenance requests, and the details of your account.
We do not ask for special categories of personal data through the website. Please do not include them in your messages.
How we use your information
- to answer your enquiry, arrange a demo and provide the information you asked for;
- to assess job applications and contact candidates about them;
- to send the newsletter to people who have subscribed;
- to provide, secure and improve the Mullak+ platform and its services;
- to protect the website against spam and misuse, for example with rate limits and anti-spam checks;
- to comply with our legal obligations.
We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
Legal bases
We process personal data on the basis of your consent (for example when you send a form or subscribe to the newsletter), to take steps at your request before entering into an agreement, to perform an agreement with you, to comply with legal obligations, and where necessary for our legitimate interests in running and securing our website and services — always balanced against your rights.
Who we share it with
Your data is accessed only by the Mullak+ team members who need it. We use trusted service providers — for example for hosting and for sending email — who process data on our behalf and under confidentiality obligations. We may disclose data to public authorities or courts where the law requires it, or where it is necessary to establish, exercise or defend legal claims.
Transfers outside Bahrain
Where a service provider stores or processes data outside the Kingdom of Bahrain, we make sure the transfer is permitted under the Personal Data Protection Law and that your data remains adequately protected.
How long we keep it
- contact messages: for up to 24 months after our last exchange, unless an ongoing business relationship requires longer;
- job applications and CVs: for up to 12 months after the recruitment process ends, unless you ask us to delete them sooner;
- newsletter subscriptions: until you unsubscribe;
- technical server logs: for a short period, normally no longer than 90 days, unless they are needed to investigate a security incident;
- platform data: for the duration of your agreement and afterwards only as long as the law requires.
How we protect it
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), restricted access for authorised staff only, and files stored under generated names rather than the names you upload them with. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.
Your rights
Under the Personal Data Protection Law you may ask us:
- to tell you whether we process your personal data and to give you a copy of it;
- to correct data that is inaccurate or incomplete;
- to delete or block data that is processed unlawfully or is no longer needed;
- to stop processing your data for direct marketing;
- to object to processing that causes you material or moral harm.
Where processing is based on your consent, you can withdraw it at any time without affecting processing that has already taken place. To exercise your rights, email [email protected]. We may ask you to confirm your identity. If you are not satisfied with our response, you can complain to the Personal Data Protection Authority in the Kingdom of Bahrain.
Cookies and similar technologies
This website does not use tracking or advertising cookies by default. It stores a few small values in your browser — for example to remember that the opening animation has already played or that a font has loaded — which are not used to identify or follow you. The private administration area uses a strictly necessary session cookie for authorised staff only. If we ever add analytics, we will update this policy and ask for your consent where the law requires it.
Links to other websites
Our website links to other services, such as the App Store, Google Play and Google Maps. They have their own privacy policies, and we are not responsible for how they handle your data.
Children
Our website and services are intended for adults and businesses. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it last changed. Significant changes will be highlighted on this page.
Contact us
For any question about this policy or your personal data, write to [email protected] or use our contact form.