Privacy Policy

1. Information we collect

We collect personal data in the following ways:

• Information you provide directly — such as your name, email address, phone number, company name, and the contents of any message, form, or request you send us.
• Information collected automatically — such as your IP address, browser type, device information, pages visited, and a language-preference cookie used to remember whether you view the site in Arabic or English.
• Information from messaging platforms — when you contact a business through a WhatsApp or other messaging channel that we operate, we process your phone number, WhatsApp profile name, and message content in order to deliver, route, and respond to that conversation.
• Information from our clients — where we build or operate services for a business, that business may share end-user data with us so that we can perform the agreed services.

2. How we use personal data

We use personal data to:

• Provide, operate, maintain, and improve our websites, software, and messaging services.
• Send and receive messages, notifications, and support communications, including through the WhatsApp Business Platform.
• Respond to enquiries, requests, and support tickets.
• Protect the security and integrity of our services and prevent fraud, abuse, and spam.
• Comply with legal, regulatory, and contractual obligations.

3. WhatsApp Business Platform and Meta products

As a technology provider working with the WhatsApp Business Platform, we help businesses communicate with their customers through WhatsApp. When we process messages and related data on this platform, we do so as a service provider to the business you are communicating with, and in accordance with the WhatsApp Business Terms, the Meta Platform Terms, and the WhatsApp Business Messaging Policy.

We only process WhatsApp data for the purpose of delivering the messaging services requested by the business and permitted by Meta. We do not sell WhatsApp data, and we do not use the content of WhatsApp messages for advertising. Message content is transmitted through Meta's infrastructure and is subject to WhatsApp's own encryption and privacy protections.

4. Legal basis for processing

Under the PDPL, we process personal data on one or more of the following bases: your consent; the performance of a contract to which you are a party; compliance with a legal obligation; or our legitimate interests, provided these do not override your rights and interests. Where processing relies on consent, you may withdraw that consent at any time.

5. How we share personal data

We do not sell your personal data. We share it only as needed and with appropriate safeguards, including with:

• Service providers and infrastructure partners (such as hosting, cloud, and communications providers) who process data on our behalf under contract.
• Meta Platforms and its affiliates, where necessary to operate the WhatsApp Business Platform and other Meta messaging products.
• Our business clients, where we act as their processor and the data belongs to their end users.
• Competent authorities, regulators, or courts where required by law or to protect our legal rights.

6. International data transfers

Some of our service providers, including Meta, may process data outside the Kingdom of Saudi Arabia. Where personal data is transferred outside the Kingdom, we take steps to ensure the transfer complies with the PDPL and its Implementing Regulations and that an appropriate level of protection is maintained.

7. Data retention

We keep personal data only for as long as necessary to fulfil the purposes described in this Policy, to provide our services, and to comply with legal, accounting, or reporting obligations. When data is no longer needed, we securely delete or anonymise it. Where we process data on behalf of a client, retention is governed by our agreement with that client.

8. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These include encryption in transit, access controls, and secure infrastructure. No method of transmission or storage is completely secure, but we work continuously to protect the data in our care and to respond promptly to any incident.

9. Your rights

Subject to the PDPL, you have the right to:

• Be informed about how your personal data is collected and used.
• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, where there is no lawful reason to retain it.
• Withdraw consent where processing is based on consent.
• Object to or restrict certain processing.

To exercise any of these rights, contact us using the details below. We will respond within the periods required by law. You also have the right to lodge a complaint with the Saudi Data & AI Authority (SDAIA).

10. Cookies

Our website uses a small number of cookies that are strictly necessary for the site to function, including a cookie that remembers your language preference (Arabic or English). We do not use advertising or third-party tracking cookies. You can clear or block cookies through your browser settings, though some features may not work as intended.

11. Children's privacy

Our services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal requirements. We will post the updated version on this page and revise the "Last updated" date above. We encourage you to review this page periodically.

13. Contact us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at info@techcorners.sa. Tech Corners LLC is located in Jeddah, Kingdom of Saudi Arabia.