Privacy Policy

This Privacy Policy explains how Momentum One W.L.L. ("Momentum One", "we", "us", or "our") collects, uses, stores, and protects personal data when you access or use the Momentum One platform, software, applications, websites, and related services (collectively, the "Services").

It applies to personal data processed in connection with customer accounts, authorised users, website visitors, prospective customers, and other individuals whose information is provided to or through the Services.

This Privacy Policy applies where Momentum One acts as a controller for information relating to our own commercial relationships, website usage, communications, and account administration.

Where Momentum One processes personal data on behalf of a customer through the core product, we generally act as a processor or service provider and handle that data in accordance with our customer agreements and documented instructions.

We may collect identification and contact details such as names, email addresses, phone numbers, company names, job titles, and account credentials.

We may collect service usage information such as login events, browser or device details, IP addresses, session activity, audit logs, support interactions, and configuration data required to operate the platform.

We may also collect commercial and billing information such as subscription status, invoices, payment references, and transaction metadata needed to administer the commercial relationship.

We collect information directly when you fill in forms, request a walkthrough, create an account, communicate with us, or use the Services.

We collect information automatically through normal use of the platform, including logs, analytics, and security events generated by browsers, devices, and infrastructure providers.

We may also receive information from customers, payment providers, integration partners, or service providers where necessary to deliver or support the Services.

We use personal data to provide, maintain, secure, and improve the Services; to authenticate users; to support account administration; to process payments and invoices; and to communicate about product usage, updates, and support matters.

We may also use personal data to analyse platform performance, prevent misuse, investigate incidents, comply with legal obligations, and respond to lawful requests.

Where permitted by law, we may use contact details to communicate about relevant product updates, service information, or commercial follow-up related to Momentum One.

Where applicable law requires a legal basis for processing, we rely on one or more of the following: performance of a contract, legitimate interests in operating and improving the Services, compliance with legal obligations, and consent where specifically required.

Our legitimate interests include securing the platform, administering customer relationships, understanding product performance, and preventing fraud or abuse.

Customers are responsible for determining what personal data they submit to the Services and for ensuring they have an appropriate lawful basis for doing so.

When we process customer data on behalf of customers, we do so to provide the Services, maintain system integrity, support the customer, and carry out instructions consistent with the customer agreement.

We may share personal data with trusted service providers and subprocessors that help us host the platform, process payments, provide customer support, deliver communications, monitor infrastructure, or maintain security.

We may also disclose personal data where necessary to comply with applicable law, enforce our agreements, protect rights and safety, or respond to lawful governmental or regulatory requests.

We do not sell personal data in the ordinary meaning of that term.

Our service providers may include infrastructure hosting providers, email providers, analytics providers, payment processors, customer support tools, and other operational vendors required to run the Services.

We require these providers to handle personal data under appropriate confidentiality, security, and contractual restrictions consistent with the role they perform.

Personal data may be stored or processed in countries outside the jurisdiction in which it was collected. Where this happens, we take reasonable steps to ensure appropriate safeguards are in place and that transfers are made in accordance with applicable law.

We retain personal data for as long as necessary to provide the Services, fulfil commercial and legal obligations, resolve disputes, enforce agreements, maintain security records, and support legitimate operational needs.

Retention periods may vary depending on the type of data, the context in which it was collected, customer instructions, and applicable regulatory requirements.

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, disclosure, alteration, or destruction. These measures may include access controls, audit logging, encryption in transit, infrastructure security, and vendor controls.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We may use cookies, local storage, and similar technologies to support authentication, product functionality, user preferences, analytics, and basic site performance.

On momentumone.io, we use Google Analytics 4 only after you accept analytics. It helps us understand page visits and clicks on demo, calendar, WhatsApp and email links. A calendar click records interest in booking a demo; it does not confirm a completed booking. Google processes analytics data, including browser and device information, and uses analytics cookies. Advertising features are disabled in our website integration.

You can accept or reject analytics and change your choice using Analytics preferences in the website footer. We save this choice in your browser's local storage. Rejecting analytics prevents the Google tag from loading. Withdrawing consent stops further analytics collection and removes the website's Google Analytics cookies; it does not delete data already collected. Our own analytics events omit URL query strings, fragments, contact destinations and message text.

You can usually control cookies through your browser settings, although disabling some technologies may affect how the Services function.

Depending on applicable law, you may have rights to access, correct, delete, restrict, object to, or request portability of certain personal data. You may also have the right to withdraw consent where processing depends on consent.

Where Momentum One processes data on behalf of a customer, requests relating to that data should generally be directed to the relevant customer first.

If you receive marketing communications from us, you can opt out at any time using the unsubscribe method provided or by contacting us directly. Administrative and service-related communications may still be sent where necessary for the operation of the Services or the commercial relationship.

The Services are not directed to children, and we do not knowingly collect personal data directly from children through our own website or commercial flows. If you believe personal data relating to a child has been provided to us improperly, contact us so we can review and take appropriate action.

The Services may contain links to third-party websites, services, or integrations. We are not responsible for the privacy practices of those third parties, and their handling of personal data is governed by their own policies and terms.

We may update this Privacy Policy from time to time to reflect operational, legal, product, or regulatory changes. Material updates will be communicated where reasonably appropriate.

The date at the top of this page indicates the latest revision.

Questions, requests, or concerns about this Privacy Policy or our privacy practices can be sent to hello@momentumone.io