Privacy Policy

011. Legal basis

We comply with the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 9/2/1443H and its amendments and Implementing Regulations, and with the controls and guidance issued by the competent data protection authority in the Kingdom.

022. Data we collect

• Contact data you voluntarily provide through our forms: name, organisation name, mobile number, email address, budget range and required service.
• The content of your message and the description of your project or challenge.
• Project data you share with us during execution (financial statements, contracts, operating data) — after signing a non-disclosure agreement where required.
• Limited technical data collected automatically: browser and device type, pages visited and visit duration, used for performance improvement and security.

033. Basis and purpose of processing

• Performing a contract or taking pre-contractual steps at your request (answering your enquiry, preparing a proposal, delivering the service).
• Your explicit consent when submitting a form or subscribing to our communications.
• Legitimate interest in improving our services and the security and performance of our site.
• Compliance with a legal requirement or an instruction from a competent authority.

044. Data sharing

We do not sell, rent or trade your data in any form.

We may share a minimum of data with service providers acting on our behalf (hosting, email, analytics) under contractual confidentiality obligations and only to the extent necessary.

We may disclose data where legally required by a competent judicial or regulatory authority in the Kingdom.

055. Transfer outside the Kingdom

As a rule your data is processed inside the Kingdom. Where an operational necessity requires a service provider outside the Kingdom, this occurs within the cases and controls permitted by the Personal Data Protection Law and its Regulations, with appropriate safeguards in place.

066. Retention period

We retain contact data for no more than twenty-four months from the last interaction, unless a legal or accounting obligation requires a longer period.

Project data is retained for the statutory period required for accounting records, then securely destroyed or returned to you upon written request.

077. Your rights

To exercise any of these rights, contact us at the email address shown on the contact page. We respond within a maximum of thirty days.

• Right to be informed: to know the legal basis and purpose of collecting your data.
• Right of access: to request a copy of your personal data held by us.
• Right to rectification: to request correction of inaccurate data or completion of incomplete data.
• Right to destruction: to request deletion of your data once the purpose of collection has ended and no legal impediment exists.
• Right to withdraw consent: at any time, without retroactive effect on prior processing.
• Right to complain: to lodge a complaint with the competent personal data protection authority in the Kingdom if you believe a violation has occurred.

088. Data security

Despite these measures, absolute security cannot be guaranteed for any transmission over the internet. We commit to notifying you and the competent authority of any material breach as required by law.

• Encrypted connection to the site over HTTPS.
• Access to data restricted within the team on a need-to-know basis.
• Signed confidentiality agreements with team members and service providers.
• Periodic backups, recovery procedures and security review of the site.

099. Children's privacy

Our services are directed to organisations and business owners. We do not knowingly collect data from anyone under eighteen. If we become aware of such data, it is deleted immediately.

1010. Updates

We may update this policy to reflect regulatory or operational changes. The published version applies from its publication date, with the last updated date shown at the top of the page.