Privacy Policy
This policy explains how we collect, process, and protect personal data in accordance with applicable requirements in the Kingdom of Saudi Arabia and industry best practices.
Note: If certain data is required to provide a service (e.g., account access, invoices), we may not be able to deliver that service without the necessary information.
Scope & definitions
This policy applies to all our digital and non-digital services. Personal data means any information relating to an identified or identifiable individual, including names, contact details, and device identifiers.
We adhere to the Saudi Personal Data Protection Law (PDPL) and follow principles of necessity, proportionality, transparency, and security.
Data we collect
Data you provide
- Name and contact details (phone, email).
- Order, contract, and after-sales information.
- Documents required for compliance when necessary.
Data collected automatically
- Device/browser identifiers and IP address.
- Cookies, local storage, and usage metrics.
- Performance and error logs to improve services.
Special categories (if applicable)
We do not collect sensitive categories unless required by law or with explicit consent, with additional safeguards.
Purposes & legal basis
| Purpose | Example | Legal basis |
|---|---|---|
| Providing services and fulfilling contracts | Managing bookings, tracking projects | Contract performance / service request |
| Customer support | Responding to inquiries, handling feedback | Legitimate interest / consent where required |
| Improvements and analytics | Measuring usage and user experience | Legitimate interest with minimization |
| Compliance | Records, invoicing, fraud prevention | Legal obligation |
| Marketing with explicit permission | Newsletters, promotions | Consent (withdrawable) |
International transfer
Some data may be transferred outside the Kingdom where our servers or providers are located, using appropriate safeguards and compliant transfer agreements.
Security
We apply technical and organizational controls such as encryption, access control, logging, and data minimization. However, no electronic transmission method is 100% secure.
Retention
We retain personal data only for as long as necessary for the purposes described above or as required by law, then delete it securely or de-identify it.
Your rights
- Access and obtain a copy of your data.
- Request correction or update.
- Request deletion where legally permitted.
- Object to or restrict processing in certain cases.
- Withdraw consent without retroactive effect.
- Lodge a complaint with the competent authority.
These buttons are illustrative. Connect them to your actual forms/workflows or support email.
Third-party links & services
Our website may contain links or embedded components from third parties subject to their own policies. Please review their policies before using their services.
Policy updates
We may update this policy to reflect regulatory or operational changes. Any updates will be published here with an effective date.
Contact & Data Protection Officer (DPO)
To ask questions or exercise your rights, contact us at: [email protected] or by phone: +966 50 000 0000.
DPO (if applicable): [email protected]
Mailing address: Example Street, Riyadh, Kingdom of Saudi Arabia.