Privacy Policy

1. Information We Collect

When you interact with our website (dotit.qa) or engage our digital design and development services, we may collect:

• Identity & Contact Data: Name, professional title, company name, email address, phone number, and Qatar business registration details when provided voluntarily through our project inquiry forms.
• Project & Technical Scope Data: Details of your website, e-commerce, or custom software requirements submitted for quotation and scoping.
• Usage & Device Information: Anonymized technical data including browser type, IP address, general geographic location, and interaction events via session cookies.

2. How We Use Your Information

We use collected information solely for legitimate business and client service objectives:

• Preparing proposals, technical architecture scopes, and commercial quotes.
• Executing client web development contracts and providing ongoing maintenance.
• Responding promptly to inquiries via WhatsApp, email, or telephone.
• Ensuring security, preventing fraud, and optimizing website performance.
• Complying with statutory reporting and legal obligations in Qatar.

3. Legal Basis for Processing

Under Qatar Law No. 13 of 2016, we process your personal data based on:

4. Data Storage & Infrastructure

We adopt industry-standard cryptographic protocols (TLS 1.3, HTTPS, encrypted databases) to protect against unauthorized access. Client assets and databases can be hosted on sovereign Qatar cloud infrastructure (e.g., Azure Qatar Central or Google Cloud Doha region) upon request to fulfill domestic residency regulations.

5. Third-Party Disclosures

DOT IT never sells, rents, or trades your personal information. Data is disclosed only to vetted technical sub-processors (cloud hosting providers, domain registrars, messaging gateways) strictly bound by data protection agreements.

6. Your Rights under Qatar PDPPL

As an individual in Qatar, you hold rights to:

• Request access to the personal data we maintain about you.
• Request correction or updating of inaccurate records.
• Request erasure or deletion of personal data when no longer legally required.
• Withdraw consent for optional communications at any time.