Privacy Policy : What’s New

We have updated Section 17 to include revisions to the policies on data retention, post-termination procedures, and the data deletion process

We have added CM.com in the sub processor list under section 14.

We have updated the policy for data protection and data security Section 9a & 9b, minor grammar and clarity, retention references and correction of email addresses.

We have implemented revisions to Section 14, encompassing expanded details regarding the sub processor that we use to provide the contracted service.

We have implemented revisions to Section 9b, encompassing expanded details regarding our adherence to data protection regulations in the UAE, Saudi Arabia, and Oman regions, demonstrating Crises Control’s commitment to compliance.

UAE PDPL

Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data (‘the Law’) became effective on 2 January 2022, and it is the UAE’s first federally applicable, General Data Protection Regulation (Regulation (EU) 2016/679) (‘GDPR’) style data protection law.

The Law follows key international data protection principles and best practices, such as those found within the GDPR and greater data protection harmonisation with international standards that is a necessity in today’s interconnected age, which is characterised by cross border data flows on an international level.

Kingdom of Saudia Arabia PDPL

The Kingdom of Saudi Arabia Personal Data Protection Law (PDPL) aims to protect individuals’ personal data privacy and regulate organisations’ collection, processing, disclosure, or retention of personal data.

The PDPL provides comprehensive requirements related to processing principles, data subjects’ rights, organisations’ obligations while processing the personal data of individuals, cross-border data transfers mechanisms, and lays out penalties for organisations in case of non-compliance with the PDPL.

OMAN PDPL

Royal Decree 6/2022 Promulgating the Personal data Protection Law.

We have added further clarification to Section 14 around data transfer safeguards.

We have added a new section 9.b. “What international regions do we operate in?” in section 9. This provides information about the different international regions we have data centres in and the compliance with data protection laws.

We have made minor edits for description of the service for clarity.

• Section 2 – We have made minor edits to description of the service for clarity.
• Section 9 – We have made minor edits to description of the service for clarity and corrected punctuation.

We have made minor edits for grammar and clarity.

We made edits throughout the privacy statement to reflect changes to:

• Cookie Policy (Section 6). The Cookie Policy is now a separate document.
• User can now modify cookie preferences by clicking the “Cookie Settings” link or by visiting our “Cookie Policy” page.

We made edits throughout the privacy statement to reflect changes to:

1. We have changed the numbering in section 14 “Will Crises Control share my information with anyone else” to include subsection e.
2. We have changed the numbering in section 19 “How can I find out what Personal Information Crises Control holds about me?” to include subsection a.
3. We have clarified the used of TLS and SSL encryption technologies used whilst data is in transit (section 9).
4. We have clarified section 14 b) “Do you transfer to third country safeguards?” By providing clarity about the option to use non EEC data centres for those customers that specifically require a non UK based data centre.
5. We have amended section 17 to include information about the data deletion process after 7 years.

   “After that period, we follow a process which deletes information that is older than 7 years and thereafter repacks/purge the data base of deleted entries. A record of the purging action is kept for audit purposes.

   The data deletion process is executed quarterly. The first deletion process is scheduled for June 30th 2025. Thereafter the deletion process will be repeated every quarter (three months).

   During this scheduled deletion process, all database records that have passed the 7 year expiration mark will be deleted from SQL databases, also all associated files to these records are permanently deleted from the file store.”

6. We have changed the numbering in section 19 “How can I find out what Personal Information Crises Control hold about me” to include subsection a.

Additionally, we have made minor edits for grammar and clarity.

We made edits throughout the privacy statement to reflect changes to:

1. We have changed the numbering order to make “How does Crises Control collect data?” a main section.
2. We have changed the numbering order to make “What security measures do we employ to protect your data?” a main section.

Additionally, we have made minor edits for grammar and clarity.

We made edits throughout the privacy statement to reflect changes to:

1. “What security measures do we employ to protect your data?” We have added further clarity about Advance Security provider.

Additionally, we have made minor edits for grammar and clarity.

We made edits throughout the privacy statement to reflect changes to “What Personal Data Crises Control collects?”

1. From the Crises Control app. We provide more transparency about Crises Controls collection of data related to our app.
2. Location Information we provide more transparency about Crises Controls collection of data related to our app.
3. Contact Information we provide more transparency about Crises Controls collection of data related to our app.
4. Calls, text and other messages we provide more transparency about Crises Controls collection of data related to our app.
5. Information from other sources we provide more transparency about Crises Controls collection of data related to our app

We made edits throughout the privacy statement to reflect changes to “Information you give Crises Control”.

1. Information you provide. We provide more transparency about this.

We have made edits to How we use Personal Information we provide more information about the collection and processing of data.

1. Safety and Security. We provide more transparency and clarity.
2. Research and Development. We provide more transparency and clarity.

Additionally, we made minor edits for grammar and clarity.

We updated the Privacy policy and made minor edits for grammar and clarity.

We updated the Privacy policy and made minor edits for grammar and clarity.

We have updated each of the sections below in the Privacy Policy.

1. Introduction & General Terms
2. What does Crises Control Do?
3. What information will Crises Control collect about me?What if I am accessing Crises Control websites outside the UK?
4. Web browser cookies?
5. What information will Crises Control collect from telephone calls?How will Crises Control use the information it collected about me?
6. Your Crises Control Account 
7. When will Crises Control contact me?
8. Will I be contacted for marketing purposes?
9. Will Crises Control share my information with anyone else?
10. Offensive or inappropriate content on Crises Control websites
11. What if I am a user aged under?
12. How long will Crises Control keep my data?
13. Can I delete or amend my data?
14. How can I find out what Personal Information Crises Control hold about me?
15. Apps and Devices
16. Changes to our Privacy and Cookies Policy
17. What is the scope of our Privacy Policy?
18. Contacting Crises Control about this Privacy and Cookies Policy
19. Key Terms