How Onramp MENA handles personal information collected through this website.

Scope

This notice applies only to the website at onrampmena.com. It does not apply to any services Onramp MENA may provide following authorisation by the Central Bank of Bahrain.

What is collected by default

Before any consent, the only personal information processed is the data your web browser automatically transmits with every request: IP address, user agent string, referrer, and time of access. This is logged for security and operational integrity purposes only and retained for no longer than thirty days. No cookies are set and no analytics run at this stage.

Analytics, and your consent

Onramp MENA uses two third-party services, Google Analytics 4 and Microsoft Clarity, to understand how visitors find and use this site and to improve it. Neither loads unless you explicitly accept analytics on the consent banner shown on your first visit.

Until you make a choice, no analytics script is requested, no analytics cookie is set, and no data is sent to Google or Microsoft. Your choice is stored in your browser's local storage under the key onrampmena_analytics_consent. That key is not a tracking cookie. It exists only so you are not asked again on every page. If you decline, nothing loads and the matter ends there, with no loss of functionality.

If you accept, the following applies. Google Analytics 4 records aggregate usage: pages viewed, approximate traffic source, device and browser category, and broad geographic region. IP addresses are anonymised before storage and are not used to identify you personally. Microsoft Clarity additionally records pseudonymised session activity, including page interactions, scrolling, and click and movement patterns, and produces aggregated heatmaps and session replays. Form fields, and content marked sensitive, are masked by default. Both services set their own cookies only after you accept. Both are operated by providers outside Bahrain (Google LLC and Microsoft Corporation, United States), so accepting analytics involves a cross-border transfer of the data described above.

Onramp MENA does not use analytics for advertising, ad targeting, or profiling, and does not sell or rent any data to anyone. To withdraw consent at any time, clear this site's browsing data in your browser. The consent banner will then reappear on your next visit and you can decline.

What is not collected

The site collects no names, email addresses, payment information, biometric data, or precise location data. There are no contact forms or subscription mechanisms. Email correspondence sent to the inquiry address on the contact page is held confidentially and processed only for the purpose of the inquiry.

How the data is used

Server logs are reviewed only when investigating security incidents such as abuse, denial-of-service activity, or unauthorised access attempts. They are not used for marketing, profiling, or advertising, and are not sold or shared with third parties. Analytics data, where you have consented to it, is used only to understand site usage in aggregate and to improve the site.

Your rights under PDPL

The Kingdom of Bahrain's Personal Data Protection Law (Law No. 30 of 2018) confers rights including access to your data, rectification, erasure, and the right to lodge a complaint with the Personal Data Protection Authority. To exercise any of these rights, contact Onramp MENA at the inquiry address on the contact page.

Cross-border requests

Visitors from other jurisdictions, including the European Union and the United Kingdom (where the GDPR and UK GDPR apply), may have rights under their local data-protection laws. Onramp MENA will respond to lawful requests under any applicable framework.

Changes

This notice may be updated. The current version is dated below.

Last updated: 17 May 2026