Privacy policy

What the centre's platform collects, why, for how long, who sees it, and the rights of the people it concerns.

What We Collect

Account data: name, email address, telephone number and legal capacity (party, representative, arbitrator).

Case data: the requests, memoranda, documents and correspondence uploaded by the parties or issued by the arbitral tribunal in the course of the proceedings.

Verification data: documents evidencing identity or authorisation where required for the acceptance of a case or the accreditation of an arbitrator.

Usage records: login times and the operations carried out on a case, for the purposes of the procedural audit log.

Site visit log: whenever a page of the platform is opened, the Centre's server records the Internet address (IP) and the approximate location inferred from it (country and city), the device type, browser and operating system, the browser language, the referring page, the pages opened and the time spent on them, and a random identifier stored in your browser to recognise a returning visitor. Link parameters and secret tokens are not recorded, this data is not sent to any external party, and no third-party tracking files are used; its purpose is the security of the platform and the measurement of its use, and only the platform's administration has access to it.

Why We Collect It

Administering the arbitration or mediation proceedings: service of notices, exchange of memoranda, scheduling of hearings and issuance of decisions.

Fulfilling the Centre's obligations under the Palestinian Arbitration Law No. (3) of 2000 and the Centre's Regulations.

Invoicing and collecting the fees prescribed in the Centre's schedule of fees.

We do not use your data for marketing, and we neither sell nor rent it to any party.

Confidentiality: The Rule of Arbitration, Not Its Exception

Proceedings before the Centre are confidential by their nature: the case file is accessible only to its parties, its tribunal and the Centre's authorised staff, each to the extent of their recorded permissions.

Draft decisions are not visible to the parties before they are issued, and a party's memoranda are not visible to the opposing party before they are filed on the record.

The visibility classification of documents (all parties, tribunal only, private) is enforced on the server, not in the user interface.

How We Protect Data

Connection to the platform and authentication on it are governed by signed session tokens, and passwords are stored hashed and never in plain text.

Every operation on a case is recorded in an audit log that cannot be deleted from the user interface.

Backups are encrypted once the operational encryption key is enabled, and are subject to a defined retention policy.

Limited external processors: email is sent through a transactional email provider, text messages through an SMS gateway, and payments through licensed payment gateways (we do not store card details on our servers).

Retention Period

The case file is a legal record: it is retained after the case is closed for the periods required by law and by the Centre's regulations, for the purposes of enforcement, challenge and oversight.

Account data is kept for as long as the account exists; you may request the closure of your account, subject to the retention of whatever records of cases to which you were a party the law requires to be kept.

The site visit log is retained for one year and then deleted automatically.

Your Rights

To access the personal data we hold about you and to request the correction of any inaccuracy in it.

To request a copy of the documents of the cases to which you are a party, in accordance with the access rules in the Centre's Regulations.

To object to any processing not required for the administration of the proceedings; such objections are decided in accordance with the Regulations.