Privacy Policy.

1. Who we are.

Orbita for Information Technology Company ("Orbita Tech", "we", "us") is the data controller for personal data described in this policy.

• Commercial Registration: 1010962845
• Address: Building 6468, Al Olaya Street, Al Olaya District, Secondary No. 3857, Riyadh 12211, Kingdom of Saudi Arabia
• Email: [email protected]
• Website: www.orbitatechs.com

We process personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

2. Scope.

This policy covers personal data we collect from customers, prospective customers, suppliers and their representatives through our website, email, phone, our business systems, and WhatsApp Business messaging.

3. Personal data we collect.

• Identity and contact data: name, job title, company name, mobile number, email address and business address.
• Commercial data: quotations, orders, invoices, payments, account balances and delivery details.
• Communication data: the content of WhatsApp messages, emails and other correspondence you exchange with us, including attachments, and message delivery and read status.
• Technical data: basic data generated when you open links we send, such as invoice or payment pages.

We do not intentionally collect sensitive personal data.

4. How we use your data.

• To prepare quotations, process orders and deliver products and services.
• To send invoices, payment receipts, account statements and payment reminders.
• To answer your enquiries and provide customer support.
• To meet our legal, tax and accounting obligations.
• To protect our legal rights and prevent fraud.

We send marketing messages only where permitted by law, and you may opt out at any time.

5. Legal basis.

We process personal data to perform a contract with you or take steps before entering into one, to comply with legal obligations, to pursue our legitimate business interests where these do not override your rights, and with your consent where consent is required.

6. WhatsApp communications.

We use the WhatsApp Business Platform, provided by Meta Platforms, to send transactional messages such as invoices, receipts and payment reminders, and to receive your replies. Messages are processed by Meta as a service provider, subject to WhatsApp's own terms and privacy policy. Messages and their status are stored in our business management system (Odoo).

To stop receiving WhatsApp messages from us, reply STOP to any message or contact us at [email protected].

7. Sharing your data.

We do not sell personal data. We share it only with:

• Service providers that host or operate our systems, including Odoo (business management system) and Meta (WhatsApp Business Platform).
• Banks and payment providers, to process payments.
• Delivery and logistics providers, to fulfil orders.
• Government authorities, regulators and courts, where required by law.
• Professional advisers such as auditors and lawyers, under confidentiality obligations.

8. Transfers outside the Kingdom.

Some service providers, including Meta and Odoo, may process data on servers located outside the Kingdom of Saudi Arabia. Such transfers are made in accordance with the PDPL and its regulations on transferring personal data outside the Kingdom, with appropriate safeguards.

9. Data retention.

We keep personal data only as long as needed for the purposes above. Invoices, accounting and tax records are kept for the periods required by applicable Saudi laws. Communication data is kept as long as needed to serve you and resolve any dispute, then deleted or anonymised.

10. Security.

We apply reasonable technical and organisational measures to protect personal data, including access controls limited to authorised staff, encrypted connections and secure hosting.

11. Your rights.

Under the PDPL you have the right to:

• Be informed about how your personal data is collected and used.
• Access your personal data and obtain a copy of it.
• Request correction of inaccurate or incomplete data.
• Request destruction of data no longer needed, subject to our legal retention obligations.
• Withdraw your consent where processing is based on consent.

To exercise any right, email [email protected]. We will respond within the period set by the PDPL. You may also lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).

12. Data deletion requests.

To request deletion of your data, including data received through WhatsApp, email [email protected] with the subject "Data Deletion Request" and the mobile number or email you used with us. We will confirm completion, except for records we must keep by law.

13. Changes to this policy.

We may update this policy from time to time. The current version is always available on this page.

14. Contact us.

For any privacy question, contact Orbita Tech at [email protected] or at the address above.