Privacy Policy

Effective Date: 1 Jan 2026
Last Updated: 1 Jan 2026

Introduction

TURN8 (“we,” “our,” or “us“) is committed to protecting the privacy and security of information collected through our website, platforms, and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (TURN8.co) or engage with our services.

By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

Contact Information: Name, email address, phone number, company name, job title when you:

Submit contact forms or inquiries.
Register for events or newsletters.
Apply to our accelerator programs.
Engage with our services.

Professional Information: Details about your organization, role, business challenges, and innovation objectives when participating in discovery calls or engagement processes.

Application Data: Business plans, pitch decks, financial information, and team details when applying to accelerator programs or seeking investment.

1.2 Information Collected Automatically

Usage Data: IP address, browser type, device information, pages visited, time spent on pages, referral sources, and navigation patterns through cookies and similar technologies.

Communication Records: Correspondence via email, calls, or messaging platforms when you interact with TURN8 team members.

1.3 Information from Third Parties

Professional Networks: Publicly available information from LinkedIn, company websites, and professional databases to research potential partnerships or investment opportunities.

Corporate Partners: Information shared by corporate clients about ventures, portfolios, or innovation programs we manage on their behalf.

2. How We Use Your Information

2.1 To Provide Services

Respond to inquiries and provide requested information.
Evaluate accelerator applications or investment opportunities.
Deliver contracted services (venture building, CVC management, AI deployment).
Communicate about programs, events, and opportunities.
Process payments and manage client relationships.

2.2 To Improve Our Offerings

Analyze website usage and optimize user experience.
Conduct market research and competitive analysis.
Develop new services and refine existing programs.
Generate aggregated, anonymized insights about innovation trends.

2.3 To Communicate

Send newsletters, articles, and educational content (with your consent).
Provide updates about our services and programs.
Notify you of events, webinars, or opportunities relevant to your interests.

2.4 For Legal and Security Purposes

Comply with legal obligations and regulatory requirements.
Protect against fraud, unauthorized access, or security threats.
Enforce our Terms of Service and other agreements.
Respond to legal requests from authorities.

3. How We Share Your Information

3.1 With Service Providers

We engage trusted third-party providers for:

Website hosting and cloud infrastructure (AWS, Azure).
Email communication platforms (Mailchimp, SendGrid, or similar).
Analytics tools (Google Analytics or similar).
CRM and project management systems.

These providers access your data only to perform services on our behalf and are contractually obligated to protect it.

3.2 With Corporate Partners

When managing CVC programs or innovation initiatives for corporate clients, we share relevant startup or venture information only as necessary to deliver services and only with appropriate confidentiality protections in place.

3.3 With Your Consent

We may share information with other parties when you explicitly authorize us to do so, such as:

Introducing startups to potential investors or corporate partners.
Sharing accelerator participant information with mentors or judges.
Publishing case studies or testimonials (always with prior written approval).

3.4 For Legal Reasons

We may disclose information if required by law, a court order, or a regulatory authority, or to protect the rights, property, or safety of TURN8, our clients, or others.

3.5 Business Transfers

In the event of a merger, acquisition, or asset sale, user information may be transferred to the acquiring entity, subject to notification and continued privacy protections.

4. Data Security

4.1 Security Measures

We implement industry-standard security practices to protect your information:

Encryption of data in transit (SSL/TLS) and at rest.
Access controls and authentication mechanisms.
Regular security assessments and vulnerability testing.
Secure cloud infrastructure with redundancy and backup systems.

4.2 Confidential Information

Corporate strategic information, investment data, and venture details are protected under separate Non-Disclosure Agreements (NDAs) with enhanced security protocols.

4.3 Data Retention

We retain personal information only as long as necessary for:

Providing services and fulfilling contractual obligations.
Complying with legal, accounting, or regulatory requirements.
Resolving disputes and enforcing agreements.

After the retention period, we securely delete or anonymize information.

5. Your Rights and Choices

5.1 Access and Correction

You have the right to:

Request access to the personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your information (subject to legal retention requirements).

5.2 Marketing Communications

You may opt out of marketing emails by:

Clicking unsubscribe in any marketing email.
Contacting us directly at privacy@TURN8.co.

Note: Opting out of marketing does not affect transactional communications related to services you’ve requested.

5.3 Cookie Preferences

You can manage cookie preferences through your browser settings. However, disabling cookies may limit the website’s functionality.

6. International Data Transfers

TURN8 operates primarily in the GCC region. If you are located outside this region and provide information to us, your data may be transferred to and processed in Saudi Arabia, the UAE, or other GCC countries, where data protection laws may differ from those in your jurisdiction.

For international transfers, we implement appropriate safeguards such as:

Standard contractual clauses.
Data processing agreements with service providers.
Compliance with applicable data protection regulations.

7. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly.

8. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. We will notify you of material changes by:

Posting a prominent notice on our website.
Sending an email to registered users.
Updating the “Last Updated” date at the top of this policy.

Your continued use of our services after changes indicates acceptance of the updated Privacy Policy.

10. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

TURN8

Email: privacy@TURN8.co.

Address: Insert Riyadh office address.

Phone: Insert phone number.

For data protection inquiries specifically, please mark your communication “Attention: Data Privacy.”

11. Regional-Specific Provisions

For Saudi Arabia Users

Our data practices comply with Saudi Arabian data protection regulations and guidelines issued by relevant authorities. Data may be stored within the Kingdom for regulated industries or government engagements.

For UAE Users

We comply with the UAE Federal Law on Data Protection and applicable emirate-level regulations.

For EU/UK Users

If you are located in the European Union or the United Kingdom, additional rights may apply under GDPR/UK GDPR, including:

Right to data portability.
Right to restrict processing.
Right to object to processing.
Right to lodge a complaint with a supervisory authority.