Privacy Policy

How we collect, use, and protect your personal information at Ihsan Ops

Last updated: 30 September 2025

Our Privacy Commitment

At Ihsan Ops, your privacy is fundamental to our mission. We believe in transparency, user control, and the highest standards of data protection. This policy explains exactly how we handle your information.

GDPR CompliantSOC 2 CertifiedCCPA Ready

Privacy at a Glance

What We Collect:

  • • Information you provide (name, email, business details)
  • • Usage data to improve our services
  • • Technical information for security

How We Protect It:

  • • End-to-end encryption
  • • Regular security audits
  • • Minimal data collection principle

1. Information We Collect

We collect information you provide directly, automatically through your use of our services, and from third-party sources to deliver personalised AI solutions and improve our services.

  • Personal identifiers (name, email, phone number)
  • Business information (company name, role, industry)
  • Technical data (IP address, browser type, device information)
  • Usage analytics (page views, feature interactions, session duration)
  • Communication records (support tickets, consultation notes)
  • Project data and files you choose to share with us

2. How We Use Your Information

Your information helps us provide, improve, and personalise our AI services while ensuring security and compliance with legal obligations.

  • Delivering and customising AI solutions for your business
  • Communicating about services, updates, and support
  • Analysing usage patterns to improve service quality
  • Ensuring platform security and preventing fraud
  • Complying with legal obligations and regulations
  • Processing payments and managing billing

3. Information Sharing and Disclosure

We do not sell your personal information. We may share information only in specific circumstances outlined below, always with appropriate safeguards.

  • With your explicit consent for specific purposes
  • With trusted service providers under strict confidentiality agreements
  • To comply with legal obligations or valid legal requests
  • To protect our rights, property, or safety and that of our users
  • In connection with business transfers (with user notification)
  • Aggregated, anonymised data for research and improvement

4. Data Security and Protection

We implement comprehensive security measures to protect your information from unauthorised access, alteration, disclosure, or destruction.

  • End-to-end encryption for data transmission and storage
  • Multi-factor authentication and access controls
  • Regular security audits and penetration testing
  • SOC 2 Type II compliance and security certifications
  • Employee security training and background checks
  • Incident response procedures and breach notifications

5. Data Retention and Deletion

We retain your information only as long as necessary to provide services and comply with legal obligations, with clear deletion policies.

  • Active account data: Retained while account is active
  • Project data: Retained per project agreement terms
  • Communication records: Up to 7 years for business purposes
  • Technical logs: 2 years for security and analytics
  • Marketing data: Until opt-out or 3 years of inactivity
  • Legal compliance data: As required by applicable laws

6. Your Privacy Rights

You have important rights regarding your personal information, including access, correction, deletion, and control over how we use your data.

  • Access: Request copies of your personal information
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal information
  • Portability: Receive your data in a structured format
  • Opt-out: Unsubscribe from marketing communications
  • Restriction: Limit processing in certain circumstances

Exercise Your Privacy Rights

You can exercise your privacy rights at any time. We'll respond to your requests within 30 days and provide clear information about any actions taken.

International Data Transfers

We may transfer your information to countries outside your jurisdiction to provide our services. We ensure appropriate safeguards are in place for international transfers.

Safeguards Include:

  • • EU Standard Contractual Clauses
  • • Adequacy decisions from data protection authorities
  • • Privacy Shield framework compliance where applicable

Transfer Locations:

  • • United States (primary data centers)
  • • European Union (EU customers)
  • • Other jurisdictions as needed for service delivery

Privacy Questions or Concerns?

If you have questions about this Privacy Policy, want to exercise your rights, or have concerns about how we handle your information, please contact our Data Protection Officer.

Data controller:

Abumusaa Ltd (trading as Ihsan Ops)
Registered in England and Wales, company number 15570536
Registered office: 6 Lucas Court, Biddenham, Bedford, England, MK40 4RN
For specific inquiries, please use our contact form

This Privacy Policy was last updated on 30/09/2025.

We may update this policy to reflect changes in our practices or for legal compliance. We'll notify you of significant changes via email or prominent notice on our platform.