1. Introduction
Tashyeed & Osos Strategic Solutions is committed to protecting the privacy of individuals using our website or services. This policy explains how we collect, use, store, share, and protect your personal data in line with the Saudi PDPL and its implementing regulations.
2. Data We Collect
2.1 Information you provide directly
- Identification data: Full name, organization name.
- Contact data: Email, mobile number.
- Service data: Request details, selected package, messages to us.
2.2 Information collected automatically
- Technical data: IP address, browser type, operating system, device type.
- Usage data: Pages visited, time spent, traffic source.
- Cookies: See the Cookies Policy.
3. Purposes of Data Collection
We use your data only for the following purposes:
- Service execution: Responding to your inquiries, providing the selected package, issuing invoices.
- Communication: Order confirmations, replies, service notifications.
- Improvement: Developing our services and analyzing site performance.
- Legal compliance: Compliance with Saudi regulations and tax requirements.
- Direct marketing: Only after your explicit consent, which you may withdraw at any time.
4. Legal Basis for Processing
- Consent: When you voluntarily provide your data via forms.
- Contract performance: To deliver the services you subscribed to.
- Legitimate interest: To improve our services and prevent fraud.
- Regulatory obligation: Tax invoices and accounting records.
5. Data Sharing with Third Parties
We do not sell your data. We may share limited data with strict controls:
- Technical service providers: Website hosting, email services, accounting systems — under confidentiality agreements.
- Professional advisors: Accountants and lawyers when needed, under confidentiality.
- Government entities: Upon official legal request or by court order.
Every third party receiving your data adheres to protection standards no less than ours.
6. Cross-Border Data Transfer
Some technical services (e.g., email hosting) may be hosted outside the Kingdom. In such cases we ensure:
- The host adheres to internationally recognized data protection standards.
- Data transfer agreements with those entities are in place.
- Compliance with Saudi Data and AI Authority (SDAIA) requirements.
7. Data Retention Period
- Active client data: Throughout the subscription + 5 years after service end (for tax and legal obligations).
- Non-converted inquiry data: 1 year from last contact date.
- Analytical records: 24 months maximum.
- Data is securely destroyed after the retention period.
8. Your Rights Under PDPL
Saudi regulations grant you the following rights:
- Right to be informed: Know how your data is processed.
- Right to access: Request a copy of your data held by us.
- Right to correction: Correct inaccurate data.
- Right to deletion: Request data deletion (subject to legal obligations).
- Right to restrict processing: Request to stop processing specific data.
- Right to withdraw consent: At any time, without affecting prior processing.
- Right to complain: File a complaint with SDAIA.
To exercise any of these rights, contact us at info@t-osos.com. We respond within 30 days.
9. Security Measures
We apply technical and organizational measures to protect your data, including:
- Encrypting communication between your browser and our servers (HTTPS / TLS).
- Strictly limiting employee access (least privilege).
- Periodic encrypted backups.
- Continuous infrastructure security monitoring.
- Team training on data protection standards.
10. Data Breach
In case of any data breach affecting your rights, we commit to:
- Notify SDAIA within 72 hours.
- Notify affected users directly if the breach poses serious risk.
- Take all necessary actions to minimize damage and prevent recurrence.
11. Children (Under 18)
Our services target organizations and commercial entities, not individuals under 18 years. We do not intentionally collect data from minors. If a minor's data reaches us inadvertently, please notify us immediately and we will delete it.
12. Updates to This Policy
We may update this policy from time to time to align with regulatory or operational changes. We will notify you of any material changes via the website or email. The last updated date appears at the top of the page.
13. Privacy Contact
For any privacy-related inquiry or to exercise your rights:
