سياسة الخصوصية · Privacy Policy

This Policy explains how Hawares handles personal data in connection with websites, account registration, trials, subscriptions, service administration, security and NASQ QMS.

Where Hawares processes personal data solely on behalf of a customer inside NASQ QMS, the DPA and the customer's documented instructions also apply.

Data may include account and contact information, organization and role, authentication records, subscription and billing metadata, transaction references, technical logs, IP address, device/browser information, security events, audit records and customer-provided content.

Payment card data should be handled by the selected payment provider rather than stored by NASQ QMS unless expressly stated otherwise.

Personal data may be processed to create and administer accounts, authenticate users, provide and secure the service, manage subscriptions and payments, provide support, detect abuse, maintain audit and operational records, communicate service information and comply with legal obligations.

Where consent is the applicable legal basis, the accepted document version and related consent record should be retained.

Personal data may be shared with infrastructure, hosting, authentication, communications, payment, monitoring and professional service providers where necessary to operate the service, subject to appropriate controls.

Hawares uses technical and organizational measures designed to protect confidentiality, integrity, availability, access control, logging and recovery.

Retention depends on account status, legal requirements, security needs, billing obligations, support history, backup cycles and customer instructions.

Requests concerning access, correction, deletion or other applicable rights should be submitted through the contact channel published by Hawares or the relevant customer organization.

Cross-border transfers or remote access must follow applicable data-protection requirements and any required safeguards or approvals.

Customers remain responsible for assessing sector-specific or localization requirements applicable to their own data.