This notice explains how TALANTA ADVISORY & MANAGEMENT CONSULTING W.L.L. (“TALANTA”, “we”, “us”) handles personal data when you visit talantadvisory.com, contact us, work with us, or use TALANTA ONE, our consulting operations workspace and client portal.
Who is responsible for your data
TALANTA determines how personal data is used for website enquiries, account administration, service security, support, product operation and our own business records. For customer workspace content, the customer organization may determine why information is entered and TALANTA may process it on that organization’s behalf. The applicable customer agreement may define those roles more specifically.
Information we collect
- Identity and contact information, including name, business email, telephone number, organization, job role and enquiry details.
- Account information, including authentication identifiers, role, invitations and workspace membership.
- Consulting and business records, including leads, proposals, assessments and responses, project plans, milestones, approvals, resource assignments, benefits, invoices, feedback and notes.
- Files and information uploaded to TALANTA ONE, the client portal or Knowledge Hub.
- Security and technical information, including sign-in events, audit actions, timestamps, browser or device information, diagnostic logs, upload scan status and CAPTCHA results.
- Messages, support requests and interface preferences.
We receive information from you, an inviting administrator, authorized workspace users, optional Google sign-in, customer records and service-generated security or operational events. Please do not provide sensitive personal data unless your organization has confirmed a lawful business need and the required safeguards.
How and why we use information
We use personal data to respond to enquiries; provide consulting services; establish and administer accounts; authenticate users; apply role- and project-based access; operate assessments, proposals, projects, reporting and document workflows; send service messages; support users; protect the service; investigate misuse; keep auditable records; meet legal obligations; and establish, exercise or defend legal claims. Depending on the context, processing may rely on a contract, requested pre-contract steps, consent, a legal obligation, or legitimate business interests that do not override individual rights.
Google sign-in data
If you choose “Continue with Google”, TALANTA ONE requests only the basic account information used for authentication: your Google account identifier, email address, name and profile picture when available. We use it to authenticate you, locate or create your TALANTA ONE account, display your identity and protect access. TALANTA ONE does not request access to Gmail, Google Drive, contacts, calendars or other Google Workspace content.
Supabase processes the Google sign-in exchange. We do not sell Google user data, use it for advertising, transfer it to data brokers, or use it to train general-purpose artificial-intelligence or machine-learning models. You can stop using Google sign-in or request account-data review by contacting us.
Service providers and international transfers
Information may be available to authorized users, the relevant customer organization, professional advisers where necessary, public authorities where lawfully required, and providers supporting TALANTA ONE. Current providers include Supabase for authentication, database and private file storage; Vercel for hosting; Cloudflare Turnstile for abuse prevention; Google for optional sign-in and email delivery; and GitHub Actions with ClamAV for scheduled malware scanning. Sanitized operational alerts may be sent through ntfy without client content or request data.
Our Supabase project is hosted in Frankfurt, Germany. Providers may process information in other countries. Where personal data is transferred outside Bahrain, TALANTA or the relevant customer will use an applicable lawful transfer route and required safeguards. We do not sell personal data or use workspace content for third-party advertising.
Security
Safeguards include authenticated access, role- and project-scoped permissions, row-level database controls, private file access, upload quarantine and malware scanning, audit logging, transport encryption and restricted privileged credentials. No online system can be guaranteed completely secure. Protect your credentials and report suspected unauthorized access promptly.
Retention and account closure
We keep identifiable information only while reasonably needed for its stated purpose and documented operational, contractual, accounting, security, legal or claims requirements. Disabling access does not automatically delete account or workspace records.
- Account and membership records are kept while access or the customer relationship is active, then reviewed for closure, security and legal needs.
- Consulting, project, assessment, proposal and uploaded records are kept for the engagement and relevant follow-up, contractual, claims or legal periods.
- Invoice, transaction and accounting records are retained as required by applicable law and while related claims may need resolution.
- Security and audit records are retained for the period reasonably needed to investigate events and demonstrate authorized activity, subject to provider lifecycles.
- Backups age out under restricted provider schedules and may not disappear immediately after a live-record deletion.
When identifiable information is no longer needed, we delete or de-identify it. Irreversibly anonymized statistics may be retained because they no longer identify an individual.
Your choices and rights
Subject to Bahrain law and applicable exceptions, you may request information about processing and access to personal data; correction, updating, blocking or deletion; object to certain processing; or withdraw consent for future processing where consent is the basis. Workspace users should first contact their organization’s administrator for information controlled by that organization. We may verify identity and retain records that law requires. You may also complain to Bahrain’s competent personal data protection authority.
Cookies and similar technologies
The public website uses technologies needed to deliver its pages. TALANTA ONE uses session technology for authentication and browser storage for theme preference. Cloudflare Turnstile and optional Google sign-in may use their own security or account technologies under their policies. We do not currently use advertising trackers or sell browsing activity.
Children
Our services are intended for business users and are not directed to children. Do not submit a child’s personal data unless the responsible organization has confirmed a lawful need and applied required safeguards.
Changes to this notice
We may update this notice when our services or legal requirements change. The current version and effective date will be published here. Material changes will be communicated through an appropriate channel where required.
Contact
TALANTA ADVISORY & MANAGEMENT CONSULTING W.L.L.
CR No. 19858301
Diplomatic Area, Block 317, Road 1701, Building 40, Diplomat, Kingdom of Bahrain
Email: Consult@talantadvisory.com