PRIVACY POLICY
TatweerIT – Technology Solutions Provider
Effective Date: March 2025
Introduction
TatweerIT ("we," "our," or "us") is a Saudi-based technology company headquartered at 2560 Jarir – Al Malaz District, Unit No. 4, Riyadh 12831, Kingdom of Saudi Arabia. We provide integrated services including Managed IT Support, Professional IT Services, and Custom Software Development.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit tatweerit.com, contact us, or engage with our services. By using our website or services, you agree to the practices described in this policy.
We are committed to protecting your privacy in full compliance with the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL) and applicable international standards.
Information We Collect
We collect information you provide directly to us and data gathered automatically through your use of our website and services.
Information You Provide
- Name, job title, and company name when contacting us.
- Email address and phone number for communication purposes.
- Project requirements, technical details, and business information shared during consultations.
- Information submitted through our contact form or during service inquiries.
Information Collected Automatically
- IP address, browser type, and device information.
- Pages visited, time spent on site, and navigation patterns.
- Referring URLs and search terms used to find our site.
- Cookie data and similar tracking technologies.
How We Use Your Data
We use the information we collect for the following purposes:
- Responding to inquiries and providing IT consulting or project support.
- Delivering contracted services including Managed IT, Software Development, and Professional Services.
- Managing client relationships and project communications.
- Improving website performance, functionality, and user experience.
- Sending relevant service updates, proposals, and technical documentation.
- Complying with legal obligations under Saudi law and applicable regulations.
- Protecting the security and integrity of our systems and client data.
We process your data only when we have a legitimate purpose — such as delivering a service you requested, fulfilling a contract, or meeting a legal obligation. We do not sell your personal data to third parties.
Data Security
With over 10 years of experience in IT infrastructure and security, we apply enterprise-grade measures to protect your information:
- Encrypted data transmission using industry-standard protocols (TLS/SSL).
- Restricted access controls—only authorized personnel can access client data.
- Regular security audits and vulnerability assessments.
- Disaster Recovery and Business Continuity protocols to ensure data availability.
- NOC (Network Operations Center) monitoring for continuous infrastructure protection.
- Identity and Access Management (IAM) practices aligned with Microsoft infrastructure standards.
While we implement robust security measures, no system is completely immune to risks. We encourage you to use strong, unique passwords when accessing any TatweerIT client portals or platforms.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by applicable law.
- Client project data is retained for the duration of engagement and up to 5 years afterward for contractual and legal compliance purposes.
- Contact inquiries and communication records are retained for up to 2 years.
- Website analytics data is retained in aggregated, anonymized form.
- Financial and billing records are retained in accordance with Saudi regulatory requirements.
When data is no longer required, it is securely deleted or anonymized in a manner that prevents reconstruction or identification.
Your Rights
As a user or client, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Ask us to correct inaccurate or incomplete information
- Deletion: Request erasure of your data where no legal obligation requires us to retain it
- Objection: Object to the processing of your data for direct marketing purposes
- Portability: Request your data in a structured, commonly used, machine-readable format
- Withdrawal of Consent: Withdraw previously given consent at any time without affecting prior lawful processing
To exercise these rights, please contact us at info@tatweerit.com. We will respond within 30 days as required under applicable data protection regulations.
Policy Updates
We may update this Privacy Policy periodically to reflect changes in our services, technology, or legal requirements. The effective date at the top of this document will be updated accordingly.
For significant changes, we will notify existing clients via email or through our client portals. Continued use of our website or services after an update constitutes your acceptance of the revised policy.