Login العربية

Legal

Privacy Policy

Last updated: January 2025

This Privacy Policy describes how New Version ("Company," "we," "us," or "our") collects, uses, stores, and protects your personal data in compliance with the Personal Data Protection Law (PDPL) issued by the Kingdom of Saudi Arabia and supervised by the Saudi Data and AI Authority (SDAIA).

1. Data Controller Information

2. Personal Data We Collect

We may collect the following types of personal data:

2.1 Account Data

  • Full name
  • Email address
  • Phone number
  • Company name and job title
  • Commercial registration number (if applicable)

2.2 Payment Data

  • Bank account details for payment processing
  • VAT registration number
  • Billing address

2.3 Technical Data

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent
  • Referring website

2.4 Communication Data

  • Inquiries and messages sent through contact forms
  • Support tickets and correspondence
  • Feedback and survey responses

3. Purposes of Processing

We process your personal data for the following purposes:

  • Providing and delivering our services
  • Communicating with you regarding inquiries, projects, and support
  • Processing payments and maintaining financial records
  • Sending service updates and promotional communications (with your consent)
  • Improving our website and services
  • Complying with legal and regulatory obligations
  • Ensuring security and preventing fraud
  • Conducting analytics and research (in aggregated, anonymized form)

4. Legal Basis for Processing

In accordance with the PDPL, we process your personal data based on:

  • Your Consent: When you voluntarily provide your data or opt-in to communications
  • Contractual Necessity: To fulfill our obligations under service agreements
  • Legal Obligation: To comply with applicable laws and regulations
  • Legitimate Interest: To improve our services and ensure security, where such interest does not override your rights

5. Data Disclosure

We may disclose your personal data to:

  • Service providers and subprocessors who assist in delivering our services (subject to data processing agreements)
  • Government authorities and regulators when required by law
  • Professional advisors including lawyers, auditors, and accountants
  • Successor entities in the event of a merger or acquisition

We do not sell your personal data to third parties for marketing purposes.

6. Cross-Border Data Transfers

6.1. Your personal data may be transferred to and processed in countries outside the Kingdom of Saudi Arabia for the purposes of cloud hosting, analytics, and service delivery.

6.2. When transferring data outside the Kingdom, we ensure appropriate safeguards are in place in accordance with the Regulation on Personal Data Transfer Outside the Kingdom issued by SDAIA, including:

  • Standard contractual clauses
  • Adequate level of protection in the recipient country
  • Your explicit consent where required

7. Data Retention

7.1. We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws.

7.2. Specific retention periods:

  • Account Data: Duration of the business relationship plus 5 years
  • Payment Data: 5 years as required by Saudi tax and commercial laws
  • Technical Data: 12 months from collection
  • Communication Data: 3 years from last communication

7.3. After the retention period, data is securely destroyed using methods that prevent access or retrieval.

8. Data Security

We implement organizational, administrative, and technical measures to protect your personal data in accordance with Article 23 of the PDPL Implementing Regulations, including:

  • Encryption of data in transit and at rest
  • Access controls and authentication mechanisms
  • Regular security assessments and penetration testing
  • Employee training on data protection
  • Incident response and breach notification procedures

9. Your Rights

Under the PDPL, you have the following rights:

  • Right to Be Informed: To know how your personal data is collected, processed, stored, and to whom it is disclosed
  • Right of Access: To request a copy of your personal data in a clear, readable format
  • Right to Correction: To request correction, completion, or update of inaccurate personal data
  • Right to Deletion: To request deletion of personal data no longer necessary for its original purpose
  • Right to Withdraw Consent: To withdraw consent at any time without affecting processing based on other legal grounds
  • Right to Restrict Processing: To request restriction of processing in certain circumstances

To exercise these rights, contact our Data Protection Officer at [email protected]. We will respond within 30 days of receiving your request.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Cookies and Tracking Technologies

11.1. We use cookies and similar technologies to enhance your experience on our website.

11.2. Types of cookies used:

  • Essential Cookies: Required for basic website functionality
  • Analytics Cookies: Help us understand how visitors use our website (Google Analytics)
  • Marketing Cookies: Used to deliver relevant advertisements (Google Ads)

11.3. You can manage cookie preferences through your browser settings.

12. Complaints

12.1. If you have concerns about our data processing practices, please contact our Data Protection Officer first.

12.2. If you are not satisfied with our response, you may file a complaint with the Saudi Data and AI Authority (SDAIA):

13. Changes to This Policy

13.1. We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

13.2. For material changes, we will notify you via email or prominent notice on our website.

14. Contact Us

For any questions about this Privacy Policy or our data practices: