Privacy Policy

1. Introduction

This policy explains how Resensio Company (commercial registration 7055551753, VAT number 100261192405818, As-Saif District, Dammam, Saudi Arabia), "Resensio", "we", "us", collects, uses, shares and protects personal data when you visit our website, send a consulting request, buy a report or contact us. It is written under the laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law and its regulations. Please read it before you use the website. This policy is written in English and Arabic. If the two versions differ, the English version prevails.

2. Legal basis for processing

We process personal data only where there is a lawful reason: (a) your consent, for example when you send a request form; (b) to carry out a contract with you or take steps you ask for before one, for example delivering a report you bought or preparing a proposal; (c) to meet a legal duty, for example tax and invoicing rules; and (d) our legitimate interest in running and protecting the website, where this does not override your rights.

3. Personal data we collect

• Consulting request form: your name, company, work email, phone number (optional), the service you chose and your message.
• Report purchase: your name, email, company name (optional), country, and, if you want it on the invoice, your VAT number and billing address; the report you bought, the amount, the date and the payment status. Your card details are entered on the payment provider's page and never reach us.
• Contacting us by email: your email address and what you write.
• Admin staff: the sign-in details of authorised Resensio staff.

We do not collect more than we need for these purposes.

4. Technical information

When you use the website, our servers record technical information needed to run and protect it, such as the date and time of a request, the page requested and error messages. To limit spam and abuse, we keep a scrambled form of your network address with a counter for a short time; we cannot read your address from it. We use no advertising tools and no analytics tools.

5. How we use the information

We use personal data to: read and answer your request and send you a written proposal; take your order, deliver your report and send your invoice and order emails; keep the records the law requires; protect the website from spam and misuse; and answer your questions and requests about your data. We do not send marketing emails because you used a form or bought a report, and we do not call you.

6. Cookies and tracking

The website uses only the cookies it needs: one that remembers your language choice, one that remembers your light or dark display choice, and, for authorised staff, a sign-in cookie. We use no advertising, tracking or analytics cookies, and no third-party tracking tools. The request form and the checkout set no extra cookies.

7. How we protect your information

The website uses an encrypted connection (HTTPS). Admin access needs a second verification step. Report files are stored privately and are delivered only through a secure link. Backups are encrypted. Our servers are in Frankfurt, Germany (DigitalOcean), outside the Kingdom. Encrypted backups are kept with GitHub in the United States, also outside the Kingdom. We limit access to authorised staff who need it.

8. Data breach notification

If a breach of personal data is likely to harm you, we will take steps to contain it and will tell you and the competent authority within the time the law requires, saying what happened and what you can do.

9. Sharing personal data

We do not sell your data. We share it only with service providers who process it for us, and only what each needs: DigitalOcean (hosting, database and report file storage, Frankfurt, Germany); Cloudflare (network protection and delivery of the website, which handles visitors' network addresses, United States); GitHub (encrypted backups, United States); Lettermint (sending emails); PayTabs (taking payments); and Zoho (accounting and electronic invoices, which are reported to the Zakat, Tax and Customs Authority as the law requires). We may also share data with a competent authority or court where a law requires it. We share it with no one else.

10. Data retention

We keep data only as long as needed for the purpose it was collected. A new consulting request is kept until we handle it; an answered or archived request is deleted automatically 12 months after its status last changed. Order and invoice records are kept as long as Saudi tax and accounting law require. Spam-protection records are kept for a short time and then deleted. Deleted data can remain in encrypted backups for up to 14 days.

11. Children's privacy

Our services are for businesses and for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you think a child has sent us data, write to us and we will delete it.

12. Your rights

You may ask to know what personal data we hold about you and why; get a copy; correct it; have it deleted; and withdraw your consent at any time. Withdrawing consent does not affect what we did before. We may need to confirm your identity first, and we may keep data that the law requires us to keep. To use a right, write to [email protected]. We will answer within the time the law allows. You may also complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).

13. Third-party sites

Our website may link to other websites. We do not control them and are not responsible for their privacy practices. Please read their policies.

14. Changes to this policy

We may update this policy. We will post the new version on this page with its date. If a change is important, we will say so on the website.

15. Consent

By sending a form, placing an order or otherwise using the website, you confirm that you have read this policy and, where the law requires consent, you give it. You can withdraw it as described in section 12.

16. Contact us

Privacy questions and requests: [email protected]. Resensio Company, As-Saif District, Dammam, Saudi Arabia.