How Rigid handles your data.

Rigid Technologies Ltd, One Innovation, IH-00-01-01-OF-01, Level 1, DIFC, Dubai, United Arab Emirates — the controller of the data described here. Contact: privacy@rigid.fi.

• Analytics (only after you accept the cookie banner): pages visited, clicks, browser and device type, IP address, session recordings with typed text masked. To understand how the site is used. Basis: your consent.
• Demo requests: work email (required), and your name, company and answers on the form if you give them. To reply and prepare a demo. Basis: our legitimate interest in answering your enquiry, and steps you ask us to take before a contract.
• Emails you send us: your name, email address and message. To reply. Basis: our legitimate interest in answering you.
• Security and error logs (on every visit): IP address, pages requested, browser details, time, and technical details of any error the site produces. To keep the site secure and working. Basis: our legitimate interest in security and reliability.

Without a work email we cannot answer a demo request; without your consent we run no analytics.

Analytics runs only after you accept the cookie banner.

• PostHog (EU servers), cookies beginning "ph_": analytics and masked session recordings; up to 1 year.
• Google Analytics 4, cookies beginning "_ga": aggregate traffic statistics; up to 2 years.
• Your choice: stored in your browser until you change it.

You can withdraw consent at any time via the Cookie settings link at the bottom of every page, or by deleting cookies in your browser.

Our staff who need it; suppliers that process data for us under data-processing contracts — hosting, security and error-monitoring providers, analytics providers, and email and messaging providers (the current list is available from privacy@rigid.fi); our professional advisers, auditors and insurers where needed; authorities where the law requires; and a successor to our business if it is sold or restructured.

We are in the United Arab Emirates. Our suppliers store data in the European Union and the United States. For the United States we rely on the EU-US Data Privacy Framework where the supplier is certified, and otherwise on the EU standard contractual clauses in the supplier's terms. Emails and demo requests are accessed by our staff in the UAE. Ask privacy@rigid.fi for a copy of the safeguard that applies.

• Google Analytics data: 2 months. PostHog events: up to 1 year; recordings: up to 30 days.
• Demo requests and emails: up to 3 years after our last contact, unless you become a customer contact.
• Record that consent was given: while we rely on it and up to 6 years after it ends.
• Security and error logs: the periods set in our security and error-monitoring tools.

We may keep data longer where a law, a regulator, a legal claim or a dispute requires it. Deleted data may remain in backups for a short period before it is overwritten.

We protect this data with appropriate security measures, including encryption and access controls.

You can ask us to show you your data, correct it, delete it, restrict or stop its use, hand it over in a portable format, and you can withdraw consent at any time. Email privacy@rigid.fi; we respond within the time the law allows, normally one month. We may ask you to verify your identity first, and some data we may have to keep by law. Please tell us if your details change.

Complaints: privacy@rigid.fi first, then the DIFC Commissioner of Data Protection or, if you are in the EU, your national data-protection authority.

We may update this notice at any time; the date at the top shows the current version, and material changes are posted on this page. This notice is information about how we handle data and does not form part of any contract.