logo
About
Team
Services
Automation ConsultingManaged AutomationImplementation ServicesAI & Data IntelligenceTraining & Capability BuildingIntegration & Development
EnterpriseSectorsContact

Pullstream Privacy Policy

Last Updated: November 2025

Pullstream (“we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information of our customers, partners, and website visitors.

This Privacy Policy explains what personal data we collect, how we use it, and the rights you have under applicable data protection laws in the United Kingdom (UK), United Arab Emirates (UAE), and Kingdom of Saudi Arabia (KSA).

1. Who We Are

Pullstream is a technology company that provides automation and AI-driven solutions to help organizations streamline operations, improve efficiency, and scale growth.

Legal Entity: Pullstream Ltd
Email: Devin@pullstream.com

When we decide how and why personal data is processed, we act as a data controller. When we process data on behalf of our clients (for example, automation workflows and platform operations), we act as a data processor and follow the client’s lawful instructions.

2. The Data We Collect

We collect only the data necessary to deliver our services and maintain high security and user experience standards.

A. Information You Provide

  • Name, company, email, phone number, or job title when contacting us or booking a consultation

  • Billing and payment details for service transactions

  • Credentials or identifiers when accessing the Pullstream platform

  • Communication records such as support messages or meeting notes

B. Information Collected Automatically

  • IP address, browser type, device, and approximate location

  • Site usage data such as pages visited and time spent

  • Cookies and tracking technologies for analytics and preferences (see our Cookies Policy)

C. Client and Workflow Data

When customers use Pullstream’s automation tools, we may process business data, workflow metadata, or integration details strictly for service delivery and maintenance purposes.

3. How We Use Your Data

We process personal data to:

  • Deliver, support, and improve our automation and AI services

  • Manage accounts, billing, and customer relationships

  • Respond to enquiries and provide customer support

  • Send service updates, security notices, and relevant communications

  • Conduct research and development to enhance platform performance

  • Comply with legal and regulatory obligations

  • Detect and prevent security threats, fraud, or misuse

We never sell or rent personal data to third parties.

4. Legal Basis for Processing

Depending on your region and relationship with us, we process your data under one or more of the following legal bases:

  • Consent – when you have agreed to communications or marketing

  • Contract – to deliver or maintain services you request

  • Legal Obligation – to meet record-keeping or regulatory duties

  • Legitimate Interests – to improve operations and ensure security

5. Marketing and Communication Preferences

We may send updates about new features, product news, or relevant content if you’ve opted in.

You can withdraw consent or unsubscribe at any time by:

We will always honour your communication preferences.

6. Data Transfers and Localisation

Pullstream operates internationally with infrastructure in the UK, UAE, and Saudi Arabia. Personal data may be transferred between these locations or to trusted service providers outside your region.

We ensure all cross-border data transfers comply with applicable laws, including:

  • UK/EU Standard Contractual Clauses (SCCs)

  • UAE PDPL cross-border transfer mechanisms

  • Saudi PDPL localisation and transfer approval requirements

Where Saudi PDPL applies, we may store and process personal data within the Kingdom unless a permitted transfer mechanism is approved.

All transfers undergo risk assessments and contractual safeguards to ensure equivalent levels of protection.

7. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting obligations.

When data is no longer needed, it will be securely deleted, anonymized, or archived according to retention schedules.

8. Your Rights

Under UK GDPR and Data Protection Act 2018

You have the right to:

  • Access and obtain a copy of your data

  • Correct inaccurate or incomplete data

  • Request deletion (“right to be forgotten”)

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time

Under UAE PDPL

You have the right to:

  • Access, correct, erase, and port your personal data

  • Restrict or withdraw consent for specific processing activities

Under Saudi PDPL

You have the right to:

  • Be informed of data processing purposes

  • Access and correct your personal data

  • Request deletion when no longer necessary

  • File a complaint with the Saudi Data & AI Authority (SDAIA)

To exercise any of these rights, contact devin@pullstream.com. We will verify your identity before processing and aim to respond within 30 days.

9. Data Breach Notification

If a personal data breach occurs that may affect your rights or freedoms, Pullstream will:

  • Notify affected individuals and relevant regulators (ICO, UAE Data Office, SDAIA) without undue delay, as required by law

  • Take immediate steps to contain and mitigate the impact

  • Review systems and processes to prevent future breaches

10. Cookies and Tracking

We use cookies and similar technologies to:

  • Ensure website functionality

  • Personalize user experiences

  • Analyze website performance

You can control cookies through your browser settings or opt out of analytics cookies at any time. For full details, see our Cookies Policy.

11. Security Measures

We use robust security protocols to protect data against unauthorized access or loss, including:

  • TLS/SSL encryption

  • Secure data centers and restricted access

  • Multi-factor authentication for staff systems

  • Regular security audits and vulnerability testing

12. Third-Party Processors and Disclosures

We work with selected partners to provide infrastructure, analytics, and payment services. These providers process personal data only under our instructions and with strict confidentiality agreements.

We may disclose data when required by law, court order, or government authority, provided it complies with due process.

13. Data Subject Access and Complaints

If you have any concerns about how we handle your personal information, please contact devin@pullstream.com first.

If you remain dissatisfied, you can contact:

  • UK: Information Commissioner’s Office (ICO)

  • UAE: UAE Data Office

  • Saudi Arabia: Saudi Data & AI Authority (SDAIA)

14. Children’s Data

Our services are intended for professional and business users. We do not knowingly collect personal data from anyone under 16 years old.

15. Contact Us

For questions, requests, or complaints related to data protection, please contact:

Pullstream Data Protection Office
Email: Devin@pullstream.com

Copyright © 2025 Pullstream. All Rights Reserved.