Privacy Policy
This policy explains how MAX CCS handles personal information across our website and platform.
Last updated: 6 July 2026
1. Who we are
MAX CCS ("MAX CCS", "we", "us" or "our") provides construction and contracting ERP software, powered by Zimpl, to businesses in Bahrain and across the GCC. This policy applies to our website and to the MAX CCS platform (together, the "Services"). Where we process personal information that our customers enter into the platform about their own staff, suppliers or clients, we do so as a processor on the customer's behalf, and the customer's own privacy notice governs that data.
2. Information we collect
- Information you provide. When you contact us, request a demo, apply to our partner programme or subscribe to updates, we collect details such as your name, company, work email, phone number, country and any message you send.
- Account and usage data. When you use the platform, we collect account details and records of how the Services are used (for example, sign-in activity and feature usage).
- Customer content. Data your organisation enters into MAX CCS — financial, procurement, project, vendor and HR records — is processed on your instructions to provide the Services.
- Technical data. We automatically collect standard technical information such as IP address, device and browser type, and pages visited, including through cookies (see our Cookie Policy).
3. How we use information
- To provide, operate, secure and maintain the Services;
- To respond to your enquiries and provide customer support;
- To process partner applications and manage our partner relationships;
- To improve and develop our Services;
- To send service and, where permitted, marketing communications (you can opt out at any time);
- To comply with legal obligations and enforce our agreements.
4. Legal bases
Where data protection law requires a legal basis, we rely on your consent, the performance of a contract with you, our legitimate interests in operating and improving our business, and compliance with legal obligations.
5. How we share information
We do not sell your personal information. We share it only with: service providers and sub-processors who help us run the Services (such as hosting and communications providers) under appropriate confidentiality and data-protection terms; professional advisers; authorities where required by law; and a successor entity in the event of a merger, acquisition or reorganisation.
6. International transfers
We aim to host data within the region where practical. Where information is transferred across borders, we take steps to ensure it remains protected in line with applicable law.
7. Retention
We keep personal information only for as long as needed for the purposes described in this policy, to comply with our legal obligations, resolve disputes and enforce our agreements. Customer content is retained in line with your subscription and our agreement with you.
8. Security
We apply organisational and technical safeguards designed to protect information, including tenant isolation, role-based access and backups. See our security page for more. No system is perfectly secure, and you are responsible for keeping your account credentials safe.
9. Your rights
Subject to applicable law, you may request access to, correction of, deletion of, or restriction of the processing of your personal information, and may object to certain processing or request portability. To exercise these rights, contact us. If you are covered by Bahrain's Personal Data Protection Law or another applicable regime, additional rights may apply.
10. Children
The Services are intended for businesses and are not directed to individuals under 18. We do not knowingly collect personal information from children.
11. Changes to this policy
We may update this policy from time to time. We will post the updated version here and revise the "last updated" date above.
12. Contact us
Questions about this policy or your personal information? Reach us via our contact page or at [email protected].