Privacy Policy – Estidama

Last Updated: July 2025

When you visit Estidama’s website or use any of our services, you entrust us with your personal information. We are committed to protecting your privacy and ensuring the confidentiality of your data. This policy explains how we collect, use, protect, and provide you with control over your personal data.

We collect personal information that you voluntarily provide when filling out forms or requesting services. This includes your full name, national ID or commercial registration number, email address, phone number, and information related to your service request, such as business type, licenses, or attached documents. We also automatically collect technical data during your visit, such as IP address, browser type, device information, and access time and date.

The data we collect is used to fulfill service requests, enhance user experience, verify identity, respond to inquiries, send administrative updates, and process official procedures with governmental entities. Some data is also used for security and technical purposes, such as detecting unauthorized activity or potential threats.

We process personal data based on clear legal grounds, including contract performance, legal obligations, legitimate interests, or your explicit consent. You may withdraw your consent to data use for marketing purposes at any time.

We retain your data only as long as necessary to fulfill the purpose for which it was collected, or as required by law. Once no longer needed, the data is securely deleted or anonymized to prevent unauthorized access.

Your data will not be shared with third parties without your consent, except with approved service providers who help us operate the website or deliver services, and with competent government authorities where legally required.

You have the right to request access to the data we hold about you, request corrections to inaccurate data, or request deletion when it is no longer needed. You may also object to unlawful use or request that your data be transferred to another party if a legal basis exists.

We implement appropriate organizational and technical security measures to protect your personal data from unauthorized access, alteration, loss, or destruction. This includes monitoring systems, encryption protocols, and restricted access policies for employees.

We do not transfer your data outside the Kingdom unless permitted by law and with sufficient protection guarantees in place, such as approved contracts or equivalent protection standards in the receiving country.

This policy may be updated from time to time. By continuing to use the website or services, you agree to the updated version. We recommend reviewing it periodically.

For any questions regarding this privacy policy or to exercise your legal rights, please contact us at:
privacy@estidama.sa
or via the official phone number listed on our website.