Privacy Policy

1. Introduction

Exotech ("we," "our," or "us") is committed to protecting your privacy and personal data in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and other applicable regulations issued by the Saudi Data & Artificial Intelligence Authority (SDAIA).

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

We may collect the following types of personal data:

• Contact Information: Name, email address, phone number, and company name when you submit inquiries through our contact forms.
• Technical Data: IP address, browser type, device information, and usage data collected automatically when you visit our website.
• Business Information: Company details and project requirements shared during consultations.

3. Legal Basis for Processing

In compliance with Saudi Arabia's PDPL, we process your personal data based on:

• Your explicit consent
• Performance of a contract or pre-contractual measures
• Compliance with legal obligations under Saudi law
• Legitimate business interests that do not override your rights

4. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your inquiries and provide requested services
• To communicate with you about our products, services, and updates
• To improve our website and service offerings
• To comply with legal and regulatory requirements in Saudi Arabia
• To protect our rights and prevent fraudulent activities

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service providers who assist in our business operations (under strict confidentiality agreements)
• Government authorities when required by Saudi law or regulations
• Professional advisors including lawyers and auditors

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Saudi laws and regulations. When data is no longer needed, it will be securely deleted or anonymized.

7. Your Rights Under PDPL

Under Saudi Arabia's Personal Data Protection Law, you have the right to:

• Access your personal data held by us
• Request correction of inaccurate data
• Request deletion of your personal data (subject to legal exceptions)
• Withdraw consent at any time
• Object to processing of your data
• Request data portability

To exercise these rights, please contact us at marketing@exotech.com.sa

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures comply with Saudi cybersecurity standards and best practices.

9. International Data Transfers

If we transfer your personal data outside the Kingdom of Saudi Arabia, we ensure appropriate safeguards are in place as required by PDPL and SDAIA regulations.

10. Contact Information

For questions about this Privacy Policy or to exercise your data protection rights, please contact us:

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.