Privacy Policy

Last updated: 26 July 2026

1. General information

Timor Prime Solutions J2, operating under the name Timor Prime Solutions (“Timor Prime Solutions”, “we”, “us” or “our”), is committed to handling personal data responsibly and securely. This Privacy Policy explains how information is collected and used when you visit timorprimesolutions.com, submit an enquiry or interact with restricted administrative functions.

This Policy is designed to reflect applicable privacy and data-protection requirements, including the principles of lawfulness, purpose limitation, necessity, transparency, security and accountability. Where a law such as Brazil’s LGPD applies to a particular person or processing activity, we will respect the rights and obligations required by that law.

2. Scope

This Policy applies to the public Site, its contact form, public content pages and the restricted administration area. It does not govern independent websites or services operated by third parties linked from the Site.

3. Personal data we collect

3.1. Information provided through the contact form

When you contact us, we may collect:

name;
organisation;
country;
email address;
telephone or WhatsApp number, when provided;
organisation type;
area of interest;
main challenge and enquiry description;
preferred contact method;
selected Site language; and
any other information you voluntarily include in the message.

3.2. Technical and security data

When the Site is accessed or a form is submitted, our systems may record:

Internet Protocol address;
date and time of access or submission;
requested page and basic server request information;
browser, device and operating-system information made available through standard request headers;
security, authentication and error logs; and
administrative account activity, where applicable.

3.3. Administrative user data

Authorised administrators may have a name, email address, password hash, role, login history and audit records stored to secure and operate the restricted administration area. Passwords are not stored in readable form.

4. Sensitive and confidential information

The public contact form is not intended for passwords, financial credentials, classified documents, health records, beneficiary-level data or other sensitive or confidential information. Please use only a secure channel expressly agreed with us for such material.

5. Purposes of processing

We may use personal data to:

receive, review, organise and respond to enquiries;
understand institutional needs and assess potential assignments, partnerships or recruitment matters;
communicate about a request and arrange meetings or follow-up contact;
prepare a proposal or take steps requested before entering into a contract;
operate, maintain, secure and troubleshoot the Site;
prevent spam, fraud, abuse and unauthorised access;
maintain administrative accountability and audit trails;
comply with legal, regulatory, contractual or reporting obligations; and
improve Site structure, accessibility, content and service processes using proportionate operational information.

We do not use contact-form data to make solely automated decisions with legal or similarly significant effects.

6. Legal grounds

Depending on the context and applicable law, processing may be based on:

your consent or voluntary request;
steps taken at your request before a contract;
performance of a contract;
our legitimate interests in responding to enquiries, operating a secure institutional website and managing professional relationships;
compliance with a legal or regulatory obligation; or
the establishment, exercise or defence of legal claims.

Where consent is the applicable basis, it may be withdrawn, without affecting processing already lawfully carried out.

7. Sharing of personal data

We do not sell or rent personal data. Information may be shared only when reasonably necessary with:

authorised Timor Prime Solutions personnel and relevant experts involved in evaluating or responding to the matter;
hosting, infrastructure, security, maintenance, backup and email service providers acting under appropriate obligations;
professional advisers, auditors or insurers where necessary;
a client, consortium or project partner when you have requested or reasonably expect that involvement and appropriate safeguards apply; and
public authorities, regulators or courts when required by law or valid process.

We seek to limit access to the information needed for each purpose.

8. International processing and transfers

Timor Prime Solutions is rooted in Timor-Leste and works with an international expert network. Hosting providers, technical suppliers or authorised collaborators may operate in different countries. Where personal data is transferred across borders, we take reasonable steps to use appropriate contractual, organisational and technical safeguards required by applicable law.

9. Cookies, analytics and similar technologies

The Site may use essential technical storage, session cookies, local browser storage and a service worker for security, restricted administration, performance and static-asset updates.

The public Site also uses Google Analytics 4 to measure visits, page views, device and browser characteristics, approximate geographic region, traffic source and interaction patterns. The configured Google Analytics measurement ID is G-YKHMSN6ND3. Google Analytics may use cookies or similar identifiers and send measurement information to Google systems. We use aggregated metrics to understand Site performance and improve content, accessibility and navigation. Timor Prime Solutions does not use this configuration to sell personal data or for behavioural advertising. Where applicable law requires it, non-essential analytics will be subject to an appropriate consent mechanism. Users may also use browser controls or Google-provided opt-out tools.

10. Retention

We retain personal data only for as long as reasonably necessary for the relevant purpose, including responding to enquiries, managing a potential or active professional relationship, meeting legal or contractual requirements, resolving disputes and protecting security.

Enquiries that do not progress may be deleted or anonymised after an appropriate business and legal retention period. Security and technical logs are generally retained for shorter periods unless needed to investigate an incident. Data may be retained for longer where required by law, an agreement or a legal claim.

11. Security measures

We use proportionate technical and organisational measures, including access controls, password hashing, prepared database queries, request validation, anti-forgery protection, upload restrictions, rate limiting, security headers, logging, backups and restricted administrative permissions. No system is completely secure, and we cannot guarantee absolute security.

12. Your rights

Subject to the law applicable to you, you may have rights to:

confirm whether we process your data;
request access to and a copy of your data;
correct incomplete, inaccurate or outdated information;
request deletion, anonymisation, restriction or objection where legally available;
request portability where applicable;
withdraw consent;
obtain information about sharing and international transfers; and
complain to a competent data-protection authority.

We may need to verify identity and authority before responding. Some requests may be limited by legal obligations, confidentiality, third-party rights or the need to establish, exercise or defend legal claims.

13. Children and minors

The Site is intended for professional and institutional audiences and is not directed to children. We do not knowingly seek personal data from children through the public contact form. If you believe a child has submitted personal data improperly, contact us so that we can assess and take appropriate action.

14. Third-party links

Third-party sites have their own privacy practices. Timor Prime Solutions is not responsible for their processing, and you should review their notices before providing information.

15. Changes to this Policy

We may update this Policy to reflect changes in law, technology, providers or our operations. The revised date will be shown at the top. Material changes may also be highlighted on the Site when appropriate.

16. Contact and privacy requests

Questions, privacy requests or concerns may be submitted through the Contact page of timorprimesolutions.com. Please identify the request clearly and avoid sending additional sensitive information until a secure channel is agreed.

17. Career applications and curriculum files

When you submit the Careers form, we collect the professional information you provide, including your area of interest, professional profile link, introduction and required curriculum file. We use this information to assess potential employment, consulting, research and field opportunities, communicate with you and maintain a professional talent network. Curriculum files are available only to authorised administration users and are not published on the Site. Please avoid including unnecessary sensitive personal data in your curriculum.