Privacy Policy

Bronta ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website bronta.com and use our services. We are registered in Sharjah Media City (SHAMS) Free Zone, United Arab Emirates, and comply with applicable data protection laws including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. By accessing or using our services, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the site.

We collect information that you provide directly to us, including: **Personal Information:** • Name and contact information (email address, phone number) • Company name and job title • Payment and billing information • Communications you send to us **Automatically Collected Information:** • Device information (IP address, browser type, operating system) • Usage data (pages visited, time spent, click patterns) • Cookies and similar tracking technologies • Log files and analytics data **Information from Third Parties:** • Business partners and service providers • Publicly available sources • Social media platforms (if you connect your accounts)

We use the information we collect for the following purposes: • **Service Delivery:** To provide, maintain, and improve our products and services • **Communication:** To respond to inquiries, send updates, and provide customer support • **Personalization:** To customize your experience and provide relevant content • **Analytics:** To understand how users interact with our services and improve them • **Marketing:** To send promotional communications (with your consent) • **Security:** To detect, prevent, and address technical issues and security threats • **Legal Compliance:** To comply with applicable laws, regulations, and legal processes • **Business Operations:** To facilitate transactions, billing, and account management

We may share your information in the following circumstances: **Service Providers:** We work with third-party companies that help us operate our business, such as: • Cloud hosting providers (Supabase, Vercel) • Analytics services • Payment processors • Customer support tools **Legal Requirements:** We may disclose information if required by law or in response to valid legal requests from public authorities. **Business Transfers:** In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. **With Your Consent:** We may share your information for any other purpose with your explicit consent. We do not sell your personal information to third parties.

We implement appropriate technical and organizational measures to protect your personal information, including: • Encryption of data in transit (TLS/SSL) and at rest • Regular security assessments and penetration testing • Access controls and authentication mechanisms • Employee training on data protection practices • Incident response procedures While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your personal information for as long as necessary to: • Provide our services to you • Comply with legal obligations • Resolve disputes and enforce agreements • Fulfill the purposes described in this Privacy Policy When we no longer need your information, we will securely delete or anonymize it. Typical retention periods: • Account information: Duration of account + 3 years • Transaction records: 7 years (legal requirement) • Marketing preferences: Until you opt out • Analytics data: 26 months

Depending on your location, you may have the following rights: • **Access:** Request a copy of your personal information • **Correction:** Request correction of inaccurate data • **Deletion:** Request deletion of your personal information • **Portability:** Receive your data in a portable format • **Objection:** Object to processing of your information • **Restriction:** Request restriction of processing • **Withdraw Consent:** Withdraw consent where processing is based on consent To exercise these rights, please contact us at privacy@bronta.com. We will respond to your request within 30 days.

We use cookies and similar technologies to: • Remember your preferences and settings • Understand how you use our services • Provide personalized content • Analyze and improve our services **Types of Cookies:** • **Essential:** Required for basic site functionality • **Analytics:** Help us understand site usage • **Marketing:** Used to deliver relevant advertisements You can control cookies through your browser settings. Note that disabling certain cookies may affect site functionality.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards such as: • Standard contractual clauses • Data processing agreements • Compliance with applicable transfer mechanisms By using our services, you consent to the transfer of your information to the UAE and other countries where we operate.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@bronta.com. We will take steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of any changes by: • Posting the new Privacy Policy on this page • Updating the "Last Updated" date • Sending an email notification for material changes We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us: **Bronta** Sharjah Media City (SHAMS) Free Zone United Arab Emirates **Email:** privacy@bronta.com **Website:** bronta.com For data protection inquiries, you may also contact our Data Protection Officer at dpo@bronta.com.