Privacy Policy

1. Introduction

We are an IT services provider based in the Kingdom of Saudi Arabia (“KSA”), offering Custom Software Development, AI Services, DevOps Services, Staff Augmentation, and implementing third-party applications (the “Services”).

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website www.datumdigisolutions.com and/or use our Services, in accordance with the Saudi Personal Data Protection Law (PDPL) and applicable regulations.

By using our Site or Services, you acknowledge that you have read and understood this Privacy Policy.

2. Definitions

For purposes of this Privacy Policy:

• Personal Data means any data that would lead to identifying a person specifically, or that makes it possible to identify a person directly or indirectly, as defined in the PDPL.
• Data Subject means the natural person to whom the personal data relates.
• Controller means the entity that determines the purpose and manner of processing personal data.
• Processor means an entity that processes personal data on behalf of the Controller.

DatumDigi Solutions generally acts as a Controller for personal data collected through the Site and as a Controller or Processor for client projects, depending on the contractual arrangements.

3. Personal Data We Collect

We may collect the following types of personal data:

3.1 Data You Provide Directly

• Name
• Email address
• Phone number
• Company name and job title
• Country/City of residence
• Billing and invoicing details
• CVs or resumes (for recruitment or staff augmentation)
• Any other information you choose to provide via forms, emails, or other communication channels

3.2 Data Collected Automatically

When you use the Site, we may collect:

• IP address
• Browser type and version
• Device and operating system information
• Pages visited, time and date of visit, time spent on pages
• Referring and exit pages
• General geolocation (where permitted by your device/browser settings)

3.3 Cookies and Similar Technologies

We may use cookies and similar technologies to enable core Site functionality, remember your preferences, analyze Site traffic and usage, and improve user experience. You can manage cookies through your browser settings, but disabling certain cookies may affect Site functionality.

4. Legal Basis and Purposes for Processing

In line with the PDPL and applicable regulations, we process personal data only when we have a lawful basis and for specific, clear, and legitimate purposes.

We may process your personal data for the following purposes:

• To provide and manage the Site and Services
• To communicate with you
• To manage our business relationship
• For recruitment and staff augmentation
• For analytics and improvement
• For marketing (where permitted)
• To protect our rights and comply with legal obligations

Legal bases under PDPL may include your consent, performance of a contract, compliance with legal obligations, or legitimate interests that do not override your rights and freedoms.

5. How We Share Personal Data

We may share your personal data with:

• Service providers and vendors (hosting, IT support, analytics, payment processors, etc.)
• Business partners and third-party application providers (when you request their implementation)
• Clients (for staff augmentation and recruitment purposes)
• Professional advisors (lawyers, accountants, auditors)
• Government authorities and regulators (when required by law)
• Business transfers (merger, acquisition, etc.)

We do not sell personal data.

6. International Transfers of Personal Data

We primarily store and process data within the Kingdom of Saudi Arabia. When data is transferred outside KSA, we ensure compliance with PDPL requirements, including adequate protection level or appropriate safeguards.

7. Data Security

We implement appropriate technical and organizational measures to protect personal data. However, no method of transmission or storage is 100% secure.

8. Data Retention

We retain personal data only as long as necessary for the purposes collected or to meet legal obligations. When no longer needed, data is securely deleted or anonymized.

9. Your Rights as a Data Subject

Under the PDPL you may have the right to:

• Be informed
• Access your data
• Request correction
• Request destruction/deletion
• Withdraw consent
• Object to processing

To exercise your rights, please contact us using the details in Section 13.

10. AI Services and Data

For AI Services, we process data as agreed in contracts, apply anonymization where feasible, and do not use your proprietary data to train models for other clients unless explicitly agreed.

11. Children’s Privacy

Our Site and Services are not directed to children under 18. We do not knowingly collect data from children.

12. Third-Party Websites and Services

We are not responsible for the privacy practices of third-party websites linked from our Site.