The short version
We collect only what we need to do the work and run your account. We do not sell your data, we do not share it for advertising, and we do not send you marketing you did not ask for.
This policy explains what we collect, why, how long we keep it, and what you can ask us to do with it. It applies to thrubits.com and to the Thrubits platforms listed in our terms.
Who is responsible
Thrubits, Saida (Sidon), Lebanon, is responsible for the data described here. For any privacy question or request, write to info@thrubits.com and we will respond within 30 days.
What we collect
We do not knowingly collect data from anyone under 16, and we do not collect sensitive categories of personal data.
Why we process it
- To deliver what you asked for — the work, the account, the platform.
- To communicate — replying to enquiries, sending project updates and service notices.
- To invoice and keep records — as required for accounting.
- To keep services secure — detecting abuse and diagnosing faults.
- To improve what we build — using aggregate, non-identifying usage patterns.
Newsletter and marketing
We send email only to people who subscribed. Every email carries a working unsubscribe link and we act on it immediately. We do not buy mailing lists, and we do not pass your address to anyone else.
Service messages — an invoice, a security notice, a change to your account — are not marketing and are sent regardless of subscription status.
Who we share it with
We share data only with suppliers who help us run the service, and only what they need:
- Hosting and infrastructure providers who store the data.
- Payment processors — including Stripe and Whish on our platforms — who handle transactions. We never see or store full card numbers.
- Email delivery services for account and newsletter mail.
- Authorities, where the law requires it.
We do not sell personal data. We do not share it with advertising networks or data brokers.
Cookies
We use a small number of cookies and similar storage:
- Essential — to keep you signed in and remember your language choice. These cannot be switched off without breaking the site.
- Analytics — to count visits and understand which pages are used. Aggregated, not used to identify you.
You can clear or block cookies in your browser settings, though some features will stop working if you block the essential ones.
How long we keep it
- Enquiries that do not become projects — up to 24 months.
- Client and project records — for the life of the relationship, then as long as accounting law requires.
- Uploaded files behind live QR codes — for as long as the code is in use, because deleting them would break printed material.
- Newsletter subscriptions — until you unsubscribe.
- Server logs — normally 12 months.
Security
Data is transmitted over encrypted connections. Passwords are hashed and cannot be recovered by us or anyone else. Access to client data is limited to team members who need it.
No system is perfectly secure. If a breach affects your data, we will tell you what happened, what it affects and what we are doing about it — promptly and without spin.
Your rights
You can ask us at any time to:
- Tell you what data we hold about you.
- Correct anything inaccurate.
- Delete your data, where we are not legally required to keep it.
- Send you a copy in a portable format.
- Stop using your data for a particular purpose.
Email info@thrubits.com. We may ask you to confirm your identity first — that protection is for your benefit.
Deleting an account may stop QR codes linked to it from resolving. If you have printed material in circulation, tell us and we will find a way to keep it working.
International transfers
Our servers and some suppliers are located outside Lebanon. Where data is transferred abroad, we use providers offering appropriate safeguards and contractual protections.
Changes to this policy
When this policy changes, the date at the top of the page changes with it. For significant changes we will notify active clients and subscribers by email rather than expecting you to notice.