Privacy Policy

1 Introduction

Prime Anchor Analytics ("PAA", "we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our website at primeanchoranalytics.com and our research subscription services.

2 Information We Collect

We collect the following categories of personal data:

• Account information — your name, email address, and phone number (used for WhatsApp research delivery).
• Payment information — billing is processed securely by Stripe or Tap Payments. PAA does not store card details on our systems.
• Usage data — pages visited, reports read, and login times, used to improve our platform and personalise your experience.
• Communications — enquiries submitted through our contact form and correspondence with our team.
• Newsletter subscription — your email address if you subscribe to our free weekly market overview.

3 How We Use Your Information

We use your personal data for the following purposes:

• To provide and manage your subscription access to the PAA research portal
• To deliver research reports, market briefings, and alerts based on your subscription tier
• To process payments and manage billing for your subscription
• To send you research content you have explicitly subscribed to
• To respond to your enquiries and provide customer support
• To improve our website and services based on usage patterns
• To comply with our legal obligations under applicable law

We do NOT sell your personal data to third parties. We do NOT share your data with advertisers.

4 Data Storage and Security

• Subscriber data is stored securely on Supabase (cloud database infrastructure) hosted in the Asia Pacific region.
• All data transmission between your browser and our servers is encrypted using SSL/TLS.
• Access to subscriber data is restricted to authorised PAA staff only. We operate role-based access controls to limit data exposure.
• We retain your personal data for the duration of your subscription plus 2 years for legal compliance purposes. After this period, data is permanently deleted upon request.

5 Your Rights Under Qatar's PDPPL

Under Qatar's Personal Data Privacy Protection Law (PDPPL) — enforced by the National Cybersecurity Agency (NCSA) / National Data Privacy Office — you have the following rights:

• Access — request a copy of the personal data we hold about you, including how it is processed and who it has been shared with.
• Correction — request that we correct inaccurate, incomplete, or outdated personal data.
• Erasure — request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent on which processing was based. We may retain certain data to comply with legal or regulatory obligations.
• Objection — object to the processing of your personal data in circumstances where processing is based on our legitimate interests.
• Withdrawal of consent — withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing before withdrawal.

How to exercise your rights:

• In-app: Subscribers can submit requests directly via Account Settings → Privacy & Your Data and track the status of each request.
• By email: Non-subscribers may write to privacy@primeanchoranalytics.com

We will acknowledge all valid requests promptly and respond within 30 days. Complex requests may require verification of your identity before we can act.

Data retention: We retain subscriber data for the duration of the subscription and for up to 7 years thereafter to comply with financial record-keeping obligations. Research correspondence and enquiry data is retained for 3 years. You may request deletion of data that falls outside these retention obligations.

Regulator: If you believe we have not handled your data correctly, you may lodge a complaint with the National Cybersecurity Agency (NCSA) — Qatar's designated data protection authority.

6 Cookies

Our website uses essential cookies only — these are required for maintaining your login session and remembering your account preferences. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies that would share your data with outside parties.

You can disable cookies in your browser settings, though this may affect the functionality of your subscriber account.

7 Third-Party Services

We use the following trusted third-party service providers to operate our business. Each provider maintains their own privacy policy and complies with applicable data protection legislation:

• Stripe / Tap Payments — secure payment processing
• Supabase — secure cloud database and authentication
• Beehiiv — newsletter delivery and subscriber management
• Netlify — website hosting and content delivery

We do not authorise these providers to use your data for any purpose other than providing their services to us.

8 Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

9 Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. We will notify subscribers of any material changes by email. Continued use of our services after changes are published constitutes acceptance of the updated policy.

The date at the top of this page indicates when this policy was last revised.

10 Contact Us

For any privacy-related questions, data requests, or concerns:

Subscribers can also submit and track data requests in-app: Account Settings → Privacy & Your Data.