Last updated: 25 June 2026
This Privacy Policy explains how Aqlaan ("HRMSTONE", "we") processes personal data through our website and platform. It is provided as general information and is not legal advice; your contract and Data Processing Agreement govern the processing of your organisation's data.
1. Data we process
Through the website we process limited data you provide — such as your name, work email and message when you contact us or request a demo — and standard technical data needed to operate and secure the site.
Within the platform, we process employee and HR data on behalf of our customers strictly as their processor, under their instructions and the Data Processing Agreement.
2. How we use it
We use website data to respond to enquiries, provide demos, and operate, secure and improve the site. We do not sell personal data.
Platform data is processed only to provide the contracted service to the customer that controls it.
3. Controller and processor roles
For website and marketing data, Aqlaan acts as the controller. For data held inside a customer's workspace, the customer is the controller and Aqlaan is the processor, acting on documented instructions.
4. Storage, residency and security
Customer data can be region-pinned for residency, isolated per tenant, and — on sovereign and on-premise deployments — encrypted under customer-managed keys you control.
We apply layered technical and organisational measures, including encryption, least-privilege access and an immutable audit trail.
5. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may object to or restrict certain processing. For data held within a customer's workspace, please direct requests to that customer as the controller.
6. Contact
For privacy questions or to exercise your rights, contact [email protected].