Legal
How we handle personal data, under Bahrain’s Personal Data Protection Law.
Fintech AI Advisory (فينتيك لاستشارات الذكاء الاصطناعي) is a sole establishment registered in the Kingdom of Bahrain.
| Field of activity | Artificial intelligence and technology advisory services — advisory, technology review, applied delivery, workforce design, keynotes and training. |
|---|---|
| Commercial Registration | 112018-1 |
| Contact for privacy matters | hello@fintechaiadvisory.com |
| Data Controller | Ahmed Saleh Albalooshi, proprietor |
We are the Data Controller for the personal data described below. We are an advisory business and are not a licensed financial institution.
We deliberately collect very little. There is no account system, no newsletter, no web form, no payment processing, and no advertising or analytics trackers on this site.
Dalil is an AI assistant available on our pages. To keep it available to everyone and prevent abuse, each visitor may ask a limited number of questions per day. To count those questions without identifying you:
We treat this scrambled value as personal data and apply the full protections of this notice to it, even though it cannot be used to identify you by name.
We also keep a single running total of how many of these records have ever been created, so we can see how many people have tried Dalil overall. This total is just a number and cannot be traced back to any individual record.
Your conversation itself is not stored on our servers. It exists only in your own browser tab for that session and is discarded when you close it or clear the chat.
To produce an answer, the text of your question is sent to Anthropic PBC (United States), the provider of the AI model behind Dalil. Anthropic processes it only to return a reply, acts solely on our instructions, and under its commercial terms does not use it to train its models. We do not sell personal data and we do not share it for anyone else’s marketing.
Separately from the daily counter above, your browser is given a random code, generated for you and carrying no information about you — it is not derived from your IP address or anything else. We keep this code, and a simple count of how many separate days you have visited, for up to 180 days from your last visit.
This lets us recognise a returning visitor reliably — including if your IP address changes, which an address-based count cannot do — without ever knowing who you are. After several visits, it lets Dalil offer a direct conversation with us instead of continuing to ask an assistant. That is an offer, not an obligation, and you can ignore it. This code is never linked to your name, unless you separately choose to give us your details — see section 2.4 below.
One further thing is remembered by your browser, on your device, and is never sent to us:
Because this lives only on your device, we cannot see it and cannot use it to identify you. Clearing your browser data removes it entirely.
At some point we may offer a way to leave your name, email, or company details — for example, if you ask for a direct conversation instead of continuing with Dalil. This is always your choice, clearly separate from ordinary use of the assistant, and covered by its own request for consent when it is introduced. The same commitment applies to it as to everything else in this notice: we do not sell it, and we do not share it for anyone else’s marketing.
Dalil is a general enquiry assistant about our services. Please do not type personal details (such as a personal ID/CPR number), confidential business information, or any sensitive personal data as defined under the Personal Data Protection Law into the chat. We do not ask for it, we do not want it, and we do not process it. If you need to discuss something confidential, contact us directly by email.
Our website is hosted by Cloudflare, which keeps standard technical records of requests to the site as part of delivering and securing it. These are ordinary infrastructure logs, not something we compile, analyse, or use to profile visitors.
Both providers named in this notice are located in the United States, a jurisdiction listed on the record of countries providing adequate protection under Ministerial Order 42 of 2022. Sending data to them therefore does not require prior authorisation from the Authority. Each acts only on our instructions and is bound by confidentiality and security obligations.
If you contact us at hello@fintechaiadvisory.com, we hold that correspondence in order to reply to you and, where it leads to work, to manage that engagement.
No. You can read every page of this website without giving us anything. Using Dalil is entirely optional; if you choose not to, nothing on the site is withheld from you. Emailing us is your choice. If you do use Dalil, the question count described in section 2.1 is necessary for the assistant to work fairly — without it we cannot offer it at all.
There is no cookie wall on this site. We do not block access to any content in exchange for consent to tracking.
Two separate things happen here, and each rests on a different basis.
What we process on our servers — the scrambled visitor code, the returning-visitor recognition code described in section 2.2, and the text of your question — rests on our legitimate interest in preventing abuse of a free service, recognising returning visitors, and keeping the service available to genuine visitors, as permitted by Article 4(5) of the Personal Data Protection Law. This is not based on consent, so there is no consent for you to withdraw here — but you retain every right set out in section 6 below.
You may reasonably ask why we still ask you to accept anything, if none of this rests on your consent. The acceptance step exists so that you can read this notice and choose not to proceed before any of the above begins — it is a courtesy we have chosen to build in, not a request for your agreement to it. We would be permitted to run the abuse-prevention counter and the returning-visitor code under legitimate interest even without asking first; we ask anyway, as a matter of transparency and choice.
What is stored on your own device only — the item described in section 2.3 — rests on your consent, which is why Dalil asks you to accept before it will chat with you. If you decline, nothing is stored and the rest of this website remains fully available to you. You may withdraw at any time by clearing your browser data for this site, which erases it completely.
If you ever choose to give us your details, as described in section 2.4, that will rest on your consent at the time, given separately and explicitly — not on this notice in advance.
| Dalil question count | 24 hours from your last question, then automatically deleted |
|---|---|
| Returning-visitor recognition code | 180 days from your last visit, then automatically deleted |
| Dalil conversation text | Not stored by us. Held in your browser only, for that session |
| Email correspondence | For as long as needed to answer you, or for the life of the engagement and any period we are required to keep records |
| Hosting records | Per our hosting provider’s standard retention |
Under the Personal Data Protection Law you have the right to:
To exercise any of these, email hello@fintechaiadvisory.com with “Data request” in the subject line, and enough detail for us to identify the data concerned. We do not charge for this.
| Requests to see your data | We respond within 10 working days |
|---|---|
| Objections | We respond within 10 working days |
Please note an honest practical limit: because the Dalil record is a scrambled value with no link to your identity, we usually have no way to find a record belonging to a particular person, and it is deleted within 24 hours in any case. This is a deliberate privacy protection, not an evasion — we hold less about you than we would need in order to look you up.
If you believe your personal data has been exposed, misused, or handled improperly — by us or through this website — please tell us.
Email hello@fintechaiadvisory.com with “Data breach” in the subject line.
We will acknowledge you promptly, investigate, and where the law requires it, notify the Authority within 72 hours of becoming aware.
Your right to raise the matter with the Personal Data Protection Authority instead is set out in section 6 above. For more on the Personal Data Protection Law and the rights it gives you, see the Authority’s own website: pdp.gov.bh.
We do not seek or knowingly process sensitive personal data as defined in the Law. We do not make automated decisions that produce legal effects about you. Dalil answers questions about our services; it does not assess, score, or decide anything concerning you.
Dalil provides general information about our services only. It is not professional, legal, financial or technical advice, and it must not be relied on as a substitute for a proper engagement. Nothing it says forms a contract, an offer capable of acceptance, a quotation, or any commitment on our part — an engagement with us begins only through a signed written agreement.
It is an automated system and can be incomplete or mistaken. Where anything matters to a decision you are making, confirm it with us directly. Using Dalil is entirely optional and free; every page of this website is fully available whether you use it or not, and you may decline the terms or stop at any time.
If we change how we handle personal data, we will update this notice and its version and date. Material changes will also be notified to the Authority as required.
This notice is published in Arabic and English. In the event of any discrepancy, the Arabic version prevails. View the Arabic version.
