Privacy Policy
Last updated 10 August 2026.
1. Who we are
This site is operated by Technology Investment Company (شركة استثمار التقنية) (“Almajles”, “we”, “us”), commercial registration 1010336999, at 8646 King Abdulaziz Road, Al Ghadir, Riyadh, Saudi Arabia.
For anything in this policy, contact info@almajles.com or +966 92 001 2387.
We are the data controller for personal data collected through almajles.com. This policy explains what we collect, why, who receives it, and the rights you have under the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations.
2. What we collect
Information you give us. Our contact form collects your name, company, email address, telephone number and the message you write. Our meeting-booking form collects your name, email address, telephone number, any notes you add, and the time slot you select. Both forms record which language you were using and which page you submitted from. You choose what to put in the free-text fields — please do not include sensitive personal data there.
Information collected automatically. When you use the site we receive your IP address, browser and device type, pages viewed, and how you arrived. Two specific mechanisms are worth naming:
- To limit form abuse we count recent submissions against a one-way SHA-256 hash of your IP address, held for 10 minutes and then deleted. The hash cannot be reversed to your address.
- When a submission is rejected as suspected spam, we write a log entry containing your IP address and browser identifier so we can investigate abuse.
Session analytics. We use Microsoft Clarity, which records how you interact with pages — mouse movement, scrolling, clicks and page transitions — to produce heatmaps and session replays. Clarity masks text input by default, but you should assume your on-page behaviour is recorded.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis under PDPL |
|---|---|
| Replying to your enquiry and arranging meetings | Performance of a contract, or steps taken at your request before entering one |
| Sending you the meeting invitation and joining link | Same as above |
| Preventing spam and abuse of our forms | Our legitimate interests in keeping the service available |
| Measuring how the site is used and improving it | Your consent, where consent is required |
| Measuring advertising effectiveness | Your consent, where consent is required |
| Meeting legal, regulatory or accounting obligations | Compliance with a legal obligation |
We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects for you.
4. Who receives your data
Please read this section carefully — it names organisations other than Almajles.
- Invento. Enquiries and booking notifications submitted through this site are delivered to the business inbox bd@invento.sa, operated by Invento, which handles commercial enquiries on our behalf. Your submission is readable by that team.
- Experia Network. Outbound email from this site is relayed through mail infrastructure at experia.network, which processes the message in transit.
- Microsoft. Meeting bookings are created in Microsoft Bookings and generate a Microsoft Teams meeting. Microsoft receives your name, email address, telephone number, notes and appointment time, and emails you a confirmation. Microsoft Clarity receives the session analytics described above.
- Google. Google Analytics 4 and Google Ads receive usage and conversion data, and set cookies described in section 8.
- Hostinger. Our hosting provider stores the site and its server logs.
We also disclose personal data where we are legally required to, for example to a competent authority acting within its powers.
5. Transfers outside Saudi Arabia
Google and Microsoft process data on infrastructure outside the Kingdom. What leaves the Kingdom is limited to what section 4 describes: usage and conversion data to Google, and your booking details and session analytics to Microsoft. We do not transfer the content of your enquiry outside the Kingdom for any purpose of our own.
We rely on the transfer conditions permitted by the PDPL and the Regulation on Personal Data Transfer outside the Kingdom. The transfer is necessary to provide the service you asked for and to operate and measure the site, and it is covered by the data-protection commitments in our providers’ standard terms. We do not transfer personal data where doing so would prejudice national security or the Kingdom’s vital interests.
6. How long we keep it
| Data | Retention |
|---|---|
| Enquiries and booking correspondence | 12 months from our last contact with you |
| Meeting records in Microsoft Bookings | 12 months from the appointment |
| Spam-prevention IP hashes | 10 minutes, then deleted |
| Rejected-submission logs | Written to our hosting provider’s PHP error log and retained under its log-rotation policy; any such file inside the website directory is removed at the next deployment |
| Analytics data | Google Analytics: user-level event data retained for 14 months, after which only aggregated reports remain. Microsoft Clarity: retained under Microsoft’s published retention schedule for Clarity projects. [CONFIRM GA4 ADMIN → DATA SETTINGS → DATA RETENTION IS SET TO 14 MONTHS.] |
When a retention period ends we delete the data or irreversibly anonymise it.
7. Your rights
Under the PDPL you have the right to:
- be informed about how and why we process your personal data;
- access your personal data and obtain a copy of it;
- request correction of data that is inaccurate, incomplete or out of date;
- request destruction of your personal data where it is no longer needed for the purpose it was collected for;
- withdraw consent at any time, where our processing relies on consent.
To exercise any of these, email info@almajles.com. We will respond within the period set by the PDPL and its Implementing Regulations. We may ask you to verify your identity first.
If you believe we have not handled your data properly, you may complain to the Saudi Data & Artificial Intelligence Authority (SDAIA).
8. Cookies and similar technologies
| Cookie / technology | Set by | Purpose |
|---|---|---|
_ga, _ga_* |
Google Analytics 4 | Distinguishes visitors and sessions to measure site usage |
_gcl_au, _gcl_aw |
Google Ads | Attributes a booking or enquiry to the advertisement you clicked |
_clck, _clsk |
Microsoft Clarity | Links your page views into a session for heatmaps and replay |
Analytics and advertising scripts are not loaded when the page first opens. They load only after you interact with the page, or after a short delay, or immediately if you arrived from one of our advertisements. You can block or delete cookies in your browser; the site will continue to work.
9. Security
Form submissions are transmitted over HTTPS. Access to the business inbox is restricted to staff who need it. Mail credentials are stored outside the public web directory on the server. No system is perfectly secure, and we cannot guarantee absolute security; if a breach affects your personal data we will notify you and SDAIA as the PDPL requires.
10. Children
The site is intended for business users and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.
11. Changes
We may update this policy. The “last updated” date at the top shows when it last changed. Material changes will be announced on this page.
12. Contact
Technology Investment Company (شركة استثمار التقنية) — 8646 King Abdulaziz Road, Al Ghadir, Riyadh, Saudi Arabia Email info@almajles.com · Telephone +966 92 001 2387