Privacy
Policy.

RESA ("RESA", "we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have in relation to your data.

This policy applies to our website, client portal, and all communications between RESA and current or prospective clients. If you are a resident of the European Economic Area, you have specific rights under GDPR, detailed in Section 7.

Information you provide: Name, email address, company name, phone number, and project details when you submit an inquiry, sign a contract, or communicate with us.

Usage data: IP address, browser type, pages visited, and time spent on our website, collected via server logs and analytics tools.

Project data: Files, credentials, specifications, and other materials shared with us in the course of delivering services. This data is treated with the highest confidentiality and retained only as long as necessary.

Communication data: Email correspondence, meeting notes, and messages sent through our contact forms or client portal.

We use collected data to: deliver and improve our services; respond to inquiries; send project updates, invoices, and important communications; comply with legal obligations; analyse website performance to improve user experience; and personalise communications based on your project type and industry.

We do not sell, rent, or broker your personal data to third parties under any circumstances. We do not use your data for advertising or behavioural profiling.

We share your data only with:

Subcontractors who are bound by equivalent confidentiality obligations under a signed NDA and data processing agreement.

Cloud infrastructure providers (AWS, GCP, Vercel, Linear, Notion) that operate under GDPR-compliant Data Processing Agreements.

Regulatory authorities when required by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted.

Our website uses strictly necessary cookies for session management and user preference storage (such as your chosen theme). We do not use tracking, advertising, or third-party analytics cookies.

You can control cookie behaviour in your browser settings at any time. Disabling cookies will not impair core website functionality. We do not use cookie consent banners because we only set necessary cookies.

We retain client contact and contract data for seven (7) years after project completion to comply with financial record-keeping obligations under Portuguese law and applicable EU regulations.

Project files, source code, and credentials are deleted within 90 days of project close unless a longer retention period is required by law or explicitly agreed in the Statement of Work.

Marketing communication preferences and inquiry data are retained for 24 months from last contact unless you request deletion earlier.

Depending on your jurisdiction, you may have the right to:

Access — request a copy of personal data we hold about you.
Rectification — correct inaccurate or incomplete data.
Erasure — request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
Restriction — ask us to limit how we process your data.
Portability — receive your data in a structured, machine-readable format.
Objection — object to certain types of processing, including direct marketing.

EEA residents may also lodge a complaint with their national data protection authority. To exercise any of these rights, contact hello@resa.inc. We will respond within 30 days.

For privacy-related questions, data access requests, or complaints about how we handle your personal information, contact our Data Protection team:

Email: hello@resa.inc
Post: RESA · Egypt