EQAA — Economy & Trade ("we", "us") respects your privacy and is committed to protecting your personal data. This policy explains what data we collect, how we use it, with whom we share it, and your rights regarding it.
This policy is based on the Saudi Personal Data Protection Law (PDPL) issued by Royal Decree No. M/19 dated 9/2/1443H, and its executive regulations issued by SDAIA.
1. Data We Collect
1.1 Data You Provide Directly
- Identity data: name, surname, job title, company name.
- Contact data: email, mobile, mailing address.
- Project data: details of the service you request, business goals, budget.
- Payment data: billing information (we never store card numbers — handled by certified payment gateways).
- Communication content: messages, emails, calls between you and us.
1.2 Data Collected Automatically
- Technical data: IP address, browser type, operating system, device type.
- Usage data: pages visited, time spent, click paths.
- Cookies: see Cookies Policy.
2. How We Use Your Data
We use your data for the following legitimate purposes:
- Delivering services you've requested and executing contracts with you.
- Communicating with you about your projects and inquiries.
- Sending invoices and processing payments.
- Improving our services and user experience.
- Sending marketing materials (with your prior consent — opt-out anytime).
- Complying with legal and regulatory requirements.
- Protecting our and your rights from fraud or unlawful use.
3. Lawful Bases for Processing
We process your data based on:
- Your explicit consent: for marketing communications and non-essential cookies.
- Contract execution: for fulfilling our obligations toward you.
- Legal obligation: for tax invoices and ZATCA requirements.
- Legitimate interest: for improving services and protecting rights.
4. Sharing Your Data
We do not sell your personal data. We may share it with:
- Service providers: hosting, payment gateways, analytics tools (under strict confidentiality agreements).
- Government authorities: when legally required (court orders, tax inquiries...).
- Business partners: when integrated services are required (with your consent).
All third parties are committed to protecting your data and using it only for specified purposes.
5. International Data Transfer
We strive to keep your data within the Kingdom of Saudi Arabia. When transfer abroad is required (e.g., cloud services), we ensure that the destination country offers an adequate level of protection or that contractual safeguards under PDPL are in place.
6. Data Retention Period
- Active client data: throughout the relationship and for 5 years after end (for legal and tax reasons).
- Marketing data: until you withdraw consent or 2 years from last interaction.
- Anonymous analytics data: may be retained indefinitely for trend analysis.
7. Data Security
We adopt strict technical and organizational measures to protect your data:
- End-to-end encryption (HTTPS/TLS).
- Strict access control with multi-factor authentication.
- Encrypted periodic backups.
- Continuous monitoring for unauthorized access attempts.
- Comprehensive employee training on confidentiality and data protection.
8. Your Rights Under PDPL
You have the following rights:
- Right to know: what data we hold about you.
- Right to access: request a copy of your personal data.
- Right to rectify: correct inaccurate or incomplete data.
- Right to delete: request data deletion (subject to legal requirements).
- Right to object: stop processing for marketing purposes.
- Right to withdraw consent: at any time, without retroactive effect.
- Right to data portability: receive your data in machine-readable format.
To exercise any of your rights, contact us at Support@eqaa.it.com. We will respond within 30 days maximum.
9. Children
Our services are not intended for individuals under 18. We do not knowingly collect data from minors. If you believe a minor has provided data to us, please contact us immediately to delete it.
10. Cookies
We use cookies and similar technologies to improve user experience. For complete details, please see our Cookies Policy.
11. Changes to This Policy
We may update this policy from time to time. We will publish the updated version on this page with the "last updated" date refreshed. Significant changes will be communicated via email when possible.
12. Filing a Complaint
If you believe your data rights have been violated, you can:
- Contact us first — we will work to resolve the issue.
- File a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).
13. Contact
For any questions or to exercise your rights:
