PRIVACY POLICY

Effective Date: March 28, 2026
Last Updated: March 28, 2026

1. INTRODUCTION

Bahrain Event Rentals (“we,” “us,” “our,” “Company,” “Business,” or “Target Right Advertising & Rentals”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at eventrentals.bh (the “Website”) and use our event rental services.

This Privacy Policy applies to:

• Our Website and all related pages, subdomains, and mobile applications
• Event rental inquiries, bookings, and customer interactions
• Communications with us via email, phone, WhatsApp, contact forms, and other channels

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Website or services.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

We collect personal data that you voluntarily provide to us:

A. Contact Forms and Inquiries

When you fill out our contact forms or request event rental information, we collect:

• Full Name
• Email Address
• Phone Number
• Event Details (date, type, location, requirements)
• Message/Comments
• Any other information you choose to provide

B. Booking and Payment Information

When you make a reservation or purchase our services, we collect:

• Full Legal Name (as per identification)
• Billing Address
• Event Venue Address
• Payment Details (processed securely through payment gateways)
• Event Specifications and Requirements
• Number of Guests
• Special Requests and Preferences

C. Communications

We collect data from emails, phone calls, WhatsApp messages, and direct communications:

• Conversation records and timestamps
• Content of your inquiries and feedback
• Attachments and supporting documents

D. Account Information (if applicable)

• User account credentials
• Booking history
• Preferences and saved event details
• Customer service notes

2.2 Information Collected Automatically

When you visit our Website, we automatically collect certain information:

A. Usage Data

• IP Address (to identify your approximate location)
• Browser Type and Version
• Operating System
• Pages Visited and Time Spent
• Clickstream Data (path taken through our Website)
• Search Queries
• Referral Source (how you found our Website)
• Device Information (type, model, unique identifiers)

B. Cookies and Similar Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to:

• Remember your preferences and login information
• Understand how you use our Website
• Serve targeted advertisements
• Analyze Website performance
• Prevent fraudulent activities

Types of Cookies Used:

1. Essential Cookies: Required for Website functionality (e.g., security, login)
2. Analytical Cookies: Track Website usage (Google Analytics)
3. Marketing Cookies: For advertising and remarketing purposes
4. Functional Cookies: Remember your preferences and settings

You can control cookie settings in your browser. Disabling cookies may limit Website functionality.

C. Location Data

We may collect approximate location data based on:

• IP Address geolocation
• GPS data (if you enable location services)
• Information you provide about your event venue

D. Third-Party Tools and Integrations

Data collected through integrated services:

• Google Analytics: Website traffic analysis and user behavior
• Google Search Console: Website performance in search results
• Smart Slider 3: Image slider analytics
• WPForms: Form submission data and analytics
• Yoast SEO: Website optimization data
• MonsterInsights: Enhanced analytics
• LiteSpeed Cache: Performance optimization data
• Jetpack: Security and performance monitoring
• AIOS (All-In-One Security): Security and threat detection

2.3 Information from Third Parties

We may receive information about you from:

• Payment processors and financial institutions
• Google (analytics and advertising data)
• Business partners and referral sources
• Public databases and directories
• Service providers and contractors
• Customer reviews and feedback platforms

3. LEGAL BASIS FOR DATA PROCESSING

Under Bahrain law and international regulations, we process your personal data based on:

3.1 Under Bahrain Law

• Performance of Contract: Processing necessary to fulfill your event rental booking
• Legal Obligation: Compliance with Bahrain commercial and tax regulations
• Legitimate Business Interest: Marketing, customer service, fraud prevention, security
• Consent: Where you have explicitly agreed to specific processing

3.2 Under GDPR (for EU/UK individuals)

• Contract Performance
• Legal Obligation
• Legitimate Interest
• Explicit Consent
• Vital Interest Protection

3.3 Under CCPA (for California residents)

• Business Purpose
• Contractual Necessity
• Consumer Request Fulfillment
• Legal Requirement

4. HOW WE USE YOUR INFORMATION

We use the personal data we collect for the following purposes:

4.1 Service Delivery

• Processing and fulfilling your event rental bookings
• Providing quotations and pricing information
• Coordinating event setup, delivery, and installation
• Managing rentals, returns, and logistics
• Customer support and problem resolution
• Handling refunds and billing disputes

4.2 Communication

• Sending booking confirmations and event details
• Providing order updates and delivery schedules
• Responding to your inquiries and requests
• Sending payment reminders and invoices
• Event reminder notifications (via email, SMS, WhatsApp)
• Follow-up communication post-event
• Customer service and support

4.3 Marketing and Promotions

• Sending promotional offers, discounts, and event announcements
• Email marketing campaigns (with your consent)
• WhatsApp and SMS marketing (with opt-in consent)
• Newsletter subscriptions
• Seasonal event promotions
• Special package announcements

4.4 Website Improvement

• Analyzing Website usage patterns and user behavior
• Improving Website functionality, design, and user experience
• Troubleshooting technical issues
• Optimizing page load speed and performance
• Enhancing search engine visibility (Yoast SEO)
• Testing new features and services

4.5 Analytics and Reporting

• Google Analytics reporting on Website traffic
• User behavior analysis through MonsterInsights
• Search performance metrics (Google Search Console)
• Customer demographics and interests
• Conversion tracking and ROI analysis

4.6 Security and Fraud Prevention

• Detecting and preventing fraud and unauthorized access
• Protecting against malware, security threats, and attacks
• Monitoring suspicious activities
• Enforcing our terms and conditions
• Protecting our business and customer rights
• Security audits through AIOS

4.7 Legal and Compliance

• Complying with Bahrain laws and regulations
• Tax and financial record keeping
• Responding to legal requests and subpoenas
• Dispute resolution
• Maintaining business records

4.8 Business Operations

• Inventory management and stock optimization
• Scheduling and resource allocation
• Team management and coordination
• Performance evaluation and improvement
• Business analytics and planning

5. SHARING AND DISCLOSURE OF PERSONAL DATA

5.1 We Do NOT Sell Your Data

We do not sell, trade, or rent your personal information to third parties for their marketing purposes.

5.2 Disclosure to Third Parties (Necessary Functions)

We may share your personal data with:

A. Service Providers and Contractors

• Payment processors (for secure transaction processing)
• Delivery and logistics partners
• Cloud hosting providers
• Email service providers
• Customer support software providers
• Website security and monitoring services

B. Google Services

• Google Analytics: Website usage statistics (anonymized where possible)
• Google Search Console: Website performance metrics
• Google Ads: For remarketing and targeted advertising (only aggregated data)

C. Analytics and Optimization Tools

• MonsterInsights: Enhanced analytics and reporting
• LiteSpeed Cache: Performance optimization
• Jetpack: Security and performance services
• WPForms: Form analytics and submissions
• Smart Slider 3: Image and content analytics

D. Legal Requirements

• Law enforcement agencies (if legally required)
• Government authorities in Bahrain
• Courts and judicial bodies (upon legal order)
• Regulatory compliance bodies
• Tax authorities

E. Business Transfers

In the event of:

• Sale, merger, or acquisition of our business
• Bankruptcy or asset sale
• Change of business ownership Your data may be transferred as part of the transaction. You will be notified of such changes.

F. Other Authorized Parties

• Event planners and coordinators you hire
• Venue managers and facility owners (with your consent)
• Business partners for joint events
• Insurance providers (when necessary)

5.3 Data Security in Third-Party Transfers

We ensure third parties have adequate security measures in place and comply with this Privacy Policy and applicable laws. However, we are not responsible for the privacy practices of third parties.

6. DATA RETENTION

6.1 Retention Periods

We retain personal data for the duration necessary to fulfill the purposes outlined in this Privacy Policy:

6.2 Data Deletion

After the retention period expires, we will securely delete or anonymize your personal data unless:

• Legal obligations require us to retain it
• You consent to extended retention
• Legitimate business interests justify retention

7. YOUR RIGHTS AND CHOICES

7.1 Under Bahrain Law

You have the right to:

• Access your personal data and obtain copies
• Correct inaccurate or incomplete information
• Request deletion of your data (with limitations)
• Object to certain processing activities
• Data portability (receive data in machine-readable format)
• Withdraw consent at any time
• Lodge a complaint with relevant authorities

7.2 Under GDPR (EU/UK Residents)

If you are in the European Union or United Kingdom, you have additional rights:

• Right to Access
• Right to Rectification
• Right to Erasure (“Right to be Forgotten”)
• Right to Restrict Processing
• Right to Data Portability
• Right to Object
• Right to Lodge a Complaint with your Data Protection Authority

7.3 Under CCPA (California Residents)

If you are a California resident, you have the right to:

• Know what personal data is collected, used, and shared
• Delete personal data (with exceptions)
• Opt-out of the sale of personal data
• Opt-out of targeted advertising
• Non-discrimination for exercising CCPA rights

7.4 Marketing Communications

You can opt-out of marketing communications at any time by:

• Clicking “Unsubscribe” in our emails
• Replying “STOP” to SMS/WhatsApp messages
• Contacting us directly (see Section 11)
• Updating your preferences in your account

7.5 Cookie Control

You can manage cookie settings through:

• Your browser settings (block or delete cookies)
• Cookie consent banner on our Website
• Browser extensions for cookie management
• “Do Not Track” signals (if supported)

7.6 Data Access Requests

To exercise any of your rights, contact us with:

• Your full name and email address
• Description of your request
• Proof of identity (for security purposes)

We will respond to valid requests within:

• Bahrain: 30 days
• GDPR: 30 days (may extend 60 days for complex requests)
• CCPA: 45 days

8. DATA SECURITY

8.1 Security Measures

We implement comprehensive security measures to protect your personal data:

Technical Controls

• SSL/TLS Encryption: All data transmitted over HTTPS (secure protocol)
• Data Encryption: Sensitive data encrypted at rest using industry-standard algorithms
• Firewalls: Multi-layered firewall protection
• Regular Security Audits: Through AIOS (All-In-One Security)
• Intrusion Detection: Active monitoring for unauthorized access attempts
• Malware Scanning: Regular malware and vulnerability scanning
• DDoS Protection: Protection against distributed denial-of-service attacks
• Database Security: Limited access and authentication requirements

Administrative Controls

• Access Control: Only authorized personnel access personal data
• Authentication: Strong password policies and two-factor authentication
• Training: Staff trained on data protection and privacy
• Background Checks: Security screening for employees with data access
• Confidentiality Agreements: Non-disclosure agreements in place

Physical Controls

• Secure Facilities: Limited access to servers and data storage
• Data Center Security: Professional hosting with security certifications
• Backup Systems: Regular encrypted backups
• Disaster Recovery: Business continuity plans in place

8.2 Third-Party Security

Payment processing is handled by PCI DSS compliant processors. We never store complete credit card information on our servers.

8.3 Data Breach Notification

In the event of a data breach that compromises your personal information:

• We will notify affected individuals without undue delay
• We will report to relevant authorities as required by law
• We will provide information about the breach and protective steps
• We will comply with Bahrain, GDPR, and CCPA breach notification requirements

8.4 Limitations

While we implement robust security measures, no system is completely secure. We cannot guarantee absolute security. Use strong passwords and protect your login credentials.

9. CHILDREN’S PRIVACY

9.1 Age Restrictions

Our Website and services are not directed to individuals under 13 years of age. We do not knowingly collect personal data from children.

9.2 Parental Consent

If you are under 18 (or the legal age of majority in your jurisdiction), parental or guardian consent is required to use our services.

9.3 If We Discover Child Data

If we discover that a child has provided personal data without parental consent, we will immediately:

• Delete the information from our systems
• Notify the parent or guardian
• Comply with applicable child protection laws

10. INTERNATIONAL DATA TRANSFERS

10.1 Data Storage and Processing

Your personal data may be:

• Processed and stored within Bahrain
• Transferred to other jurisdictions for processing, backup, or analytics
• Stored on cloud servers located in various countries
• Accessed by staff in different locations

10.2 Compliance with International Standards

When transferring data internationally, we ensure:

• Standard Contractual Clauses (for GDPR compliance)
• Adequate safeguards and security measures
• Compliance with data protection regulations in receiving countries
• Explicit consent where required

10.3 Data Transfer Mechanism (GDPR)

For EU/UK residents, international transfers are authorized through:

• Standard Contractual Clauses
• Your explicit consent
• Adequacy decisions by relevant authorities

11. CONTACT US

If you have questions about this Privacy Policy, wish to exercise your rights, or need to lodge a complaint:

Bahrain Event Rentals
Email: contact@eventrentals.bh (create this email)
Phone: +973 3977 0471
WhatsApp: +973 3977 0471
Website: https://eventrentals.bh
Address: [Your Physical Address in Bahrain]
Business Name: Target Right Advertising & Rentals

11.1 Response Time

We will respond to all privacy inquiries within 5 business days and provide detailed responses within 14 business days.

11.2 Complaint Process

If you are not satisfied with our response, you can lodge a complaint with:

• Bahrain: [Central Bank of Bahrain / Information & eGovernment Authority]
• GDPR: Your country’s Data Protection Authority
• CCPA: California Attorney General’s Office

12. GOOGLE ANALYTICS & SEARCH CONSOLE DISCLOSURE

12.1 Google Analytics

We use Google Analytics to understand Website traffic and user behavior. Google Analytics:

• Places cookies on your device
• Collects data about your interactions with our Website
• Sends data to Google’s servers
• Uses this data for analytics, reporting, and advertising

12.2 Google Data Collection

Google uses data collected through:

• Analytics.js (Google Analytics tracking code)
• DoubleClick cookies (for advertising)
• Google Publisher Tags (for ad serving)

12.3 Your Control

You can:

• Opt-out using the Google Analytics Opt-out Browser Add-on
• Adjust Google Ad Settings at https://adssettings.google.com
• Disable cookies in your browser
• Enable “Do Not Track” signals

12.4 Google Search Console

We use Google Search Console to:

• Monitor Website performance in search results
• Identify and fix crawl errors
• Manage search appearance
• Understand search traffic patterns

13. CHANGES TO THIS PRIVACY POLICY

13.1 Updates

We may update this Privacy Policy periodically to:

• Reflect changes in our practices
• Comply with new legal requirements
• Improve clarity and transparency
• Address user feedback

13.2 Notification

When we make material changes:

• We will update the “Last Updated” date
• We will post a prominent notice on our Website
• We will send email notification for significant changes
• We may require your consent for major changes

13.3 Your Continued Use

Your continued use of our Website or services after updates constitutes acceptance of the updated Privacy Policy.

14. SUPPLEMENTARY INFORMATION FOR SPECIFIC REGIONS

14.1 Bahrain Residents

Under Bahrain law, you have the rights outlined in Section 7.1. We comply with all applicable Bahrain regulations, including those issued by the Central Bank of Bahrain and Information & eGovernment Authority.

14.2 GDPR Compliance (EU/UK)

We are committed to GDPR compliance and provide all rights outlined in Article 13-22 of the GDPR. Our Data Protection Officer is available for inquiries.

14.3 CCPA Compliance (California)

We comply with the California Consumer Privacy Act and provide all rights outlined in Section 7.3.

14.4 Other Jurisdictions

If you are in any other jurisdiction with data protection laws, we will comply with applicable requirements while maintaining our standard privacy protections.

15. FINAL NOTICE

This Privacy Policy is designed to be transparent and protect your personal information. By using our Website and services, you acknowledge that you have read, understood, and agree to this Privacy Policy.

For any privacy concerns or violations, please contact us immediately at the addresses listed in Section 11.

© 2026 Bahrain Event Rentals. All Rights Reserved.