Privacy Policy

• Legal name: Technology KSA – Pure Pixel
• Trading name: Technology KSA
• Commercial registration number: 4030463877
• Address: King Abdulaziz Road, Sumou Tower, Jeddah, Saudi Arabia
• Website: TechnologyKSA.com
• Official email: [email protected]
• Privacy and data protection email: [email protected]
• Phone: +966 56 081 1238

Where Technology KSA – Pure Pixel determines the purposes and means of processing personal data, it acts as the data controller under the Personal Data Protection Law and the related laws and regulations of the Kingdom of Saudi Arabia.

This policy applies to personal data collected or processed through TechnologyKSA.com and the company’s services and digital platforms, including:

• Contact and enquiry forms.
• Quotation requests.
• Requests for technical services and consulting.
• User accounts, where available.
• Newsletter and update subscriptions.
• Communication by email or telephone.
• The company’s official digital channels.
• Website analytics and performance measurement tools.
• Customer service and CRM systems.
• Technical and software services provided by the company where Technology KSA is the controller.

On some projects Technology KSA acts as a data processor on behalf of a client rather than as a controller. In those cases data is processed in accordance with the client’s instructions, the agreement concluded with them, and the applicable regulatory requirements.

The data processed varies according to how you use the site and the service requested, and may include:

Where an electronic payment provider is used, payment data may be processed directly by that provider. We do not request or retain full bank card details except where this is necessary, permitted by law, and secured in line with the applicable requirements.

We apply the principle of data minimisation, and therefore seek to collect and process only data that is appropriate, directly related to the specified purpose, and limited to what is necessary to achieve it.

We may obtain personal data in the following ways:

Technology KSA may process personal data for the following purposes:

• Responding to enquiries and contact requests.
• Preparing quotations and technical and commercial proposals.
• Delivering the agreed services and projects.
• Managing client relationships.
• Providing technical support and after-sales services.
• Managing accounts and digital services.
• Operating the site and improving its performance.
• Improving the user experience.
• Measuring the performance of pages, content and services.
• Detecting and resolving technical errors and issues.
• Protecting the site, systems and users.
• Preventing fraud, misuse and cyber attacks.
• Managing records, contracts and invoices.
• Performing contractual obligations.
• Complying with legal and regulatory requirements.
• Sending updates and marketing communications where permitted.
• Developing and improving our services and digital products.
• Analysing service performance and taking decisions to improve it.
• Managing information security and responding to incidents.

We will not use personal data for a new purpose incompatible with the purpose for which it was collected, except where permitted under the applicable laws.

Depending on the nature of each operation, Technology KSA relies on the appropriate legal basis, which may include:

• The consent of the data subject, where consent is required.
• Performance of a contract to which the data subject is a party.
• Taking steps at the data subject’s request prior to entering into a contract.
• Compliance with a legal or regulatory obligation.
• A legitimate interest, where permitted by law and after assessing the impact of the processing on the rights and interests of the data subject.
• Any other basis permitted by the laws and regulations in force in the Kingdom of Saudi Arabia.

Where processing is based on consent, the data subject may withdraw that consent in accordance with the law, without affecting the lawfulness of processing carried out before the withdrawal.

TechnologyKSA.com uses, or may use, cookies and similar technologies to operate and secure the site, improve the user experience and measure performance.

The types of cookies the site may use include:

You can manage non-essential cookies through the consent management tool available on the site where implemented, and through your browser settings.

Technology KSA does not sell users’ personal data.

The minimum necessary data may be shared with other parties where this is necessary to deliver services, or permitted or required by law. Those parties may include:

• Hosting and cloud computing providers.
• Email service providers.
• Telecommunications providers.
• Website analytics providers.
• CRM system providers.
• Technical service providers.
• Cyber security service providers.
• Backup service providers.
• Payment and invoicing providers.
• Legal, financial and technical advisers, where necessary.
• Competent governmental, regulatory and judicial authorities, where disclosure is required by law.

Where a service provider processes data on our behalf, we seek to apply appropriate contractual and organisational controls to ensure the data is protected and used only for authorised purposes.

Some of the technical or cloud services used to operate Technology KSA services rely on geographically distributed infrastructure, which may in some cases require personal data to be transferred or processed outside the Kingdom of Saudi Arabia.

Where personal data is transferred outside the Kingdom, Technology KSA complies with the requirements of the Personal Data Protection Law and the regulations governing transfers of personal data abroad, and applies the safeguards, assessments and regulatory requirements appropriate to the nature of the transfer and the recipient.

Technology KSA does not retain personal data for longer than is necessary to achieve the purposes for which it was collected, taking into account regulatory, contractual and organisational requirements.

Retention periods are determined by a number of factors, including:

• The nature of the data.
• The purpose of its collection.
• The duration of the contractual relationship with the client.
• The need to provide support or deliver the service.
• Security and fraud prevention requirements.
• Accounting and financial obligations.
• Periods imposed by law and by the competent authorities.
• The legal need to establish or defend rights.

When the purpose of retention ends and no legal requirement obliges continued retention, data is deleted or destroyed securely so that it cannot be recovered, or anonymised where appropriate.

Technology KSA takes appropriate technical and organisational measures to protect personal data against loss, damage, alteration, disclosure, and unauthorised access or use.

Depending on the nature of the system and service, protective measures include:

• Access rights management.
• Applying the principle of least privilege.
• Protection of accounts and login credentials.
• Encryption of communications using HTTPS/TLS.
• Appropriate encryption of data where needed.
• Backups.
• Monitoring of systems and security logs.
• Keeping systems and software up to date.
• Vulnerability management.
• Protection against cyber attacks.
• Logging and monitoring of sensitive activity.
• Established security incident response procedures.
• Periodic review of permissions and security settings.

Despite these measures, no electronic means can be guaranteed secure with absolute certainty, and we therefore review and improve our protective measures continuously in line with the level of risk.

Data subjects have the rights granted to them by the Personal Data Protection Law and the related regulations, subject to the applicable statutory conditions and exceptions, the most important of which are:

To exercise any of your rights relating to your personal data, or to ask how it is used, contact Technology KSA at [email protected] or at [email protected].

Please describe the nature of your request and the details needed to identify it.

To protect your privacy, we may request appropriate information to verify the identity of the requester before disclosing data or carrying out certain requests.

Technology KSA handles requests relating to personal data in accordance with the procedures, timeframes and requirements set out in the laws and regulations in force in the Kingdom of Saudi Arabia.

Technology KSA may use contact data to send information about its services, updates or content where this is permitted by law.

Where marketing communications require prior consent, that consent is obtained before the data is used for this purpose.

You may unsubscribe from marketing communications at any time using the unsubscribe option in the message or by contacting us at [email protected].

Unsubscribing from marketing does not affect operational or contractual messages necessary to deliver an existing service.

Given the nature of the technical services Technology KSA provides, the company may use automation and artificial intelligence technologies in some of its operations or digital services to improve efficiency, the user experience and service delivery.

Where personal data is used within systems relying on artificial intelligence or automated processing, it is handled in accordance with data protection principles, the specified purposes of processing, and the relevant regulatory controls.

We seek not to use personal data to train third-party general artificial intelligence models without an appropriate legal basis and controls proportionate to the nature of the data and the purpose of its use.

Where automated processing has a material effect on a data subject, it is handled in accordance with the applicable legal and regulatory requirements.

Some of our clients host or process data through websites, applications, CRM or ERP systems, automation solutions or other systems that we develop or manage on their behalf.

In these cases Technology KSA may act as a data processor on behalf of the client, while the client is the data controller.

Such data is processed in accordance with the client’s instructions, the contract concluded with them and the applicable regulatory requirements, and is not used for independent, unauthorised purposes.

TechnologyKSA.com may contain links to, or integrations with, websites, applications or services operated by other parties.

Data you provide directly to those parties is subject to their own privacy policies, and Technology KSA does not control the privacy practices of independent external sites and services.

We recommend reviewing the privacy policy of any external service before providing personal data to it.

Technology KSA services are directed primarily at companies, organisations, entrepreneurs and professionals, and are not intentionally targeted at children.

If we become aware that a child’s personal data has been collected in a manner requiring parental consent or additional protective measures, we will take appropriate steps to address the situation in accordance with the applicable laws.

Technology KSA maintains procedures for responding to security incidents that may affect the confidentiality, integrity or availability of personal data.

On discovering an incident involving personal data, we assess its nature, scope and potential risks and take appropriate action to contain it and address its effects.

Where the reporting or notification conditions set out in the Personal Data Protection Law and its Implementing Regulations are met, we notify the competent authority and inform the affected data subjects within the timeframes and in the manner prescribed by the relevant laws and regulations.

We also maintain a record of personal data incidents and the actions taken in respect of them, to the extent required by law.

Technology KSA may update this Privacy Policy from time to time to reflect changes in our services, our systems, or the applicable legal and regulatory requirements.

The updated version is published on this page together with the date of the last update, and takes effect from the date of its publication.

Where a change is material and the law so requires, we take appropriate steps to notify data subjects or to obtain the required consents.

We recommend reviewing this page periodically for the latest version of the policy.

This Privacy Policy is governed by and construed in accordance with the laws in force in the Kingdom of Saudi Arabia, in particular the Personal Data Protection Law and its Implementing Regulations.

The competent judicial authorities of the Kingdom of Saudi Arabia have jurisdiction over any dispute arising out of or relating to this policy.

For any question, comment or complaint relating to this policy or to the processing of your personal data, contact us at:

• Privacy and data protection email: [email protected]
• Official email: [email protected]
• Phone: +966 56 081 1238
• Address: King Abdulaziz Road, Jeddah, Saudi Arabia

Data subjects also have the right to lodge a complaint with the authority competent to supervise the application of the Personal Data Protection Law in the Kingdom of Saudi Arabia if they consider that their data has been processed in breach of the law.