Who this policy applies to
This Privacy Policy explains how TasheelExpress handles personal data submitted through the public website, quote and contact forms, customer or supplier interactions, uploaded project files and supporting operational systems. It is intended to describe actual website and language-service processing without exposing internal security configuration.
Data we collect
Depending on how you use the service, we may collect identity and contact details, organization information, quote and project instructions, language pairs, billing or procurement references, account information, messages, technical logs, device and request metadata, and documents or media you choose to upload.
Uploaded documents and project content
Project files can contain personal or sensitive information belonging to you or other people. You should submit only material you are authorized to provide. Files are stored outside the public web directory where configured, use randomized server-side names, and are subject to technical validation and hosting-level malware protection. Access is restricted according to operational need.
Why we process data
We process information to respond to enquiries, prepare quotes, deliver translation or related services, authenticate users, communicate about projects, maintain terminology or language assets when agreed, invoice and administer accounts, prevent abuse, protect systems, keep operational records, comply with law, and improve service reliability.
Legal basis
The legal basis depends on context and applicable law. Processing may be necessary to take steps requested before entering a contract, perform a contract, comply with legal obligations, protect legitimate interests such as security and service administration, or rely on consent where consent is the appropriate basis. Mandatory rights under applicable privacy law remain unaffected.
Service providers and processors
We may use hosting, email, database, payment, conferencing, file-processing, CAT, AI or other technology providers where required for the service. Access is limited to the function they perform and is subject to appropriate commercial or technical controls. We do not publish private processor credentials or internal configuration on the public website.
AI and language technology
AI or machine-translation providers are used only when configured for the relevant workflow and appropriate for the content and confidentiality requirements. Sensitive or regulated projects may require AI to be disabled or restricted. Where a client requires a specific technology policy, that requirement should be agreed before production.
Cookies and local storage
The website may use strictly necessary cookies or browser storage for session security, form protection, language preferences and functional state. We avoid unnecessary third-party tracking by default. If analytics or additional cookie categories are introduced, the relevant notice and choice mechanism should be updated accordingly.
Security
Security measures include HTTPS, access controls, restricted file paths, randomized filenames, validation of uploads, secure session handling, logging and hosting-level malware protection. No internet service can guarantee absolute security. We continuously use proportionate technical and organizational safeguards based on the nature of the service.
Retention
We keep information only for as long as reasonably necessary for the project, contractual record, legal requirement, security need, dispute handling or agreed language-asset retention. Different categories can have different retention periods. Clients with specific deletion or retention requirements should raise them before or during the project.
International processing
Translation and localization may involve people, systems or providers in more than one country. Where personal data is transferred internationally, the transfer is handled according to applicable legal requirements and the project’s confidentiality or residency constraints. Specific data-region requirements should be agreed at intake.
Your rights
Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability or withdrawal of consent. Rights can be subject to legal exceptions, identity verification and record-retention duties. Requests can be made through the contact page and should include enough information to locate the relevant account or project.
Children
TasheelExpress business and professional services are not directed to children acting independently. If a project legitimately involves children’s data, the client must have an appropriate legal basis and should identify the sensitivity so that handling requirements can be agreed.
Changes and contact
We may update this policy when processing activities, technology or law changes. The current version and last-updated date appear on this page. Privacy questions or rights requests can be submitted through the TasheelExpress contact page; do not include unnecessary sensitive documents in an initial privacy enquiry.