Privacy Policy

1. Who We Are

TAWAJOH TECH, Riyadh, Saudi Arabia, is the Controller of the personal data described in this Privacy Policy.

Privacy contact: info@tawajohtech.com.sa

2. Scope

This policy applies to personal data processed through the TAWAJOH TECH website, professional enquiries submitted through it, and related website communications.

3. Personal Data We Collect

When you submit a professional enquiry, the following data is required:

• Name
• Work Email
• Area of Interest
• Message

The following data is optional:

• Organization
• Role

In addition, limited technical and security data may be processed automatically as part of normal website operation, such as:

• IP or network information
• Request metadata
• Browser or device information where technically available
• Security and anti-abuse signals
• Information associated with strictly necessary security cookies

Not all of this data is permanently stored; some of it is processed transiently for security and reliable operation. TAWAJOH TECH does not request sensitive personal data through this website, and visitors are asked not to submit unnecessary sensitive or confidential information in an enquiry.

4. How We Collect Personal Data

Personal data is collected:

• Directly from you when you submit the website enquiry form
• Through subsequent professional correspondence with you
• Automatically, in limited cases, through normal website and security operation

5. Purposes and Legal Basis

6. How Enquiries Are Processed and Held

Enquiry submissions are processed server-side and transmitted securely into the corporate email environment of TAWAJOH TECH. No separate application database is currently used to store website enquiry submissions. Subsequent correspondence may be held within corporate email records.

7. Service Providers

TAWAJOH TECH may rely on service providers supporting:

• Website hosting and delivery
• Cybersecurity and traffic protection
• Corporate email and productivity
• Technical website operation

Such providers receive or access personal data only to the extent required for their role, and subject to appropriate contractual and organizational controls.

8. Processing Outside Saudi Arabia

Some technology and cloud providers may process or store limited personal data outside the Kingdom of Saudi Arabia. Any such processing or transfer is handled subject to applicable Saudi personal data protection requirements and appropriate safeguards.

9. Retention and Destruction

For professional enquiries that do not lead to a client relationship, TAWAJOH TECH generally retains the relevant correspondence for up to 12 months from the last relevant communication.

A longer period may apply where required or justified by:

• Applicable legal requirements
• Establishment or performance of a contractual relationship
• Exercise or defence of legal rights
• Legitimate record-keeping requirements

After the applicable retention period, personal data under the control of TAWAJOH TECH is securely deleted or otherwise destroyed (الإتلاف) in accordance with applicable requirements.

10. If Required Information Is Not Provided

If the required enquiry fields are not provided, TAWAJOH TECH may be unable to receive, assess or respond to the enquiry.

11. Security

TAWAJOH TECH applies appropriate technical and organizational safeguards based on the nature and risk of the processing concerned, including access controls, authentication, secure communications, least-privilege practices, and security monitoring or protection where applicable. No method of transmission or storage can be guaranteed to be entirely secure.

12. Cookies, Technical Data and Visitor Measurement

TAWAJOH TECH does not currently use visitor analytics, behavioural advertising, advertising pixels or session-recording tools on this website.

• The website and hosting environment may use strictly necessary technical mechanisms or cookies for security, traffic protection, fraud and abuse prevention, and reliable operation.
• TAWAJOH TECH does not sell visitor personal data.
• Professional enquiry content is not used to train AI models.
• TAWAJOH TECH does not currently use visitor analytics, behavioural analytics, advertising pixels or session-recording tools on this website. If non-essential analytics are introduced in the future, the Privacy Policy will be updated and the appropriate legal basis and safeguards will be assessed before activation.

13. Your Rights Under the Saudi PDPL

Subject to the Saudi Personal Data Protection Law and its applicable exceptions, a data subject (صاحب البيانات الشخصية) has:

• The right to be informed
• The right to access personal data
• The right to request a copy of personal data held by TAWAJOH TECH in a readable and clear format.
• The right to request correction, completion or updating
• The right to request destruction of personal data where applicable

Withdrawal of consent applies only where a specific processing activity actually relies on consent. The processing of professional enquiries described in this policy relies on legitimate interests, not on consent.

14. Exercising Your Rights

Requests may be sent to info@tawajohtech.com.sa.

TAWAJOH TECH may take appropriate steps to verify the identity of the requester. Requests to exercise rights will be handled without delay and within a period not exceeding 30 days. Where implementation requires unexpected or unusual additional effort, or where multiple requests are received from the same data subject, the period may be extended by up to an additional 30 days. The requester will be notified in advance of the extension and the reasons for it, in accordance with applicable requirements.

15. Complaints

You may contact TAWAJOH TECH at info@tawajohtech.com.sa regarding any privacy concern or complaint. This does not affect your right to submit a complaint to the Saudi Data & AI Authority (SDAIA), as the competent authority for complaints relating to the Personal Data Protection Law. Under the applicable regulations, a complaint may generally be submitted within 90 days from the date of the incident or from becoming aware of it, subject to the applicable procedures and exceptions.

16. Changes to This Policy

This policy may be updated to reflect legal or regulatory changes, changes in website functionality, or changes in processing practices. Material changes are reflected by updating the published policy and its effective date.

17. Effective Date

Last updated: September 2026