Privacy Policy

Effective Date: 19/07/2026

Last Updated: 19/07/2026

Introduction

We, Protech IT Solutions One Person Company LLC, a limited liability company registered under commercial registration number 7053937624, with our registered corporate office at Airport Road, King Khalid International Airport, Riyadh 13447, Kingdom of Saudi Arabia, along with our corporate affiliates (collectively referred to as “us”, “we”, or “our”), respect the privacy of our users. We are fully committed to safeguarding the personal data collected through www.protechksa.online, its affiliate web interfaces, and all associated mobile applications (collectively defined as the “Platforms”).

This Privacy Policy (the “Privacy Policy”) establishes the legal framework regarding how we collect, process, utilize, store, and disclose your personal data in connection with your access to the Platforms or your utilization of any services provided by us, including newsletters and integrated social media functionalities (collectively, the “Services”).

Please read this Privacy Policy carefully to understand our institutional practices regarding your information. By accessing the Platforms or using our Services, you acknowledge and agree to the collection and processing of your personal data in accordance with this Privacy Policy. References to “user”, “you”, or “your” apply to you as an individual or a legally recognized entity, as applicable.

Third-Party Hyperlinks Notice: The Platforms may contain links to external third-party websites, plug-ins, and software applications. Interacting with those links or enabling those connections may allow third parties to gather or share data about you. We do not control these third-party environments and assume no responsibility or liability for their independent privacy practices. We strongly encourage you to review the privacy policy of every external website you visit.

  1. Children’s Data Protection Framework

The Platforms and Services are strictly intended for individuals who have attained the legal age of majority under the applicable laws of their respective jurisdictions. We do not knowingly solicit, collect, or process data from minors. Because we cannot technically prevent a minor from fraudulently misrepresenting their age to gain platform access, parents or legal guardians who suspect we have inadvertently collected information regarding a minor are requested to contact us immediately at sales@protechksa.com.co.

  1. Categories of Personal Data We Collect

To provide, maintain, and continually optimize our Platforms and Services, we collect and process “Personal Data”—defined as any information that directly or indirectly identifies you as an individual. It excludes fully anonymized data where all identifying markers have been permanently removed.

We collect, utilize, store, and transfer the following categories of Personal Data:

  • Identity Data: Legal first name, maiden name, last name, username or unique identifier, gender, title, nationality, and date of birth.
  • Contact Data: Physical delivery address, billing address, email address, and telephone/mobile numbers.
  • Transaction Data: Details concerning payments executed to and from your account, preferred modes of payment, and itemized logs of products or services purchased from us.
  • Technical Data: Internet Protocol (IP) address, authenticated login parameters, browser type and version, operating system, mobile application version, time zone configurations, device location, device type, IDFA (Identifier for Advertisers for iOS users), and broad internet usage analytics gathered via cookies, tracking pixels, and web beacons.
  • Profile Data: Security credentials (usernames and passwords), specified interests, customer preferences, feedback, localized language settings, and formal survey responses.
  • Purchase and Operations Data: Historical order logs, promotional redemption details, fulfillment statuses, and page-view metrics gathered via operational service providers.
  • Browser Interaction Data: Analytics regarding how you navigate, click, and interact with our web assets, product listings, and digital infrastructure.
  • Marketing and Communications Data: Explicit preferences indicating your desire to receive promotional materials from us or approved third parties, along with preferred communication channel settings.

2.1 Aggregated Data

We also gather, compile, and share statistical or demographic benchmarks known as “Aggregated Data”. While derived from your Personal Data, Aggregated Data is legally stripped of all individual identifiers and does not reveal your identity. For instance, we may aggregate user browser logs to calculate the exact percentage of users accessing a specific feature on the Site.

  1. Methods of Data Collection

We utilize three primary methodologies to obtain your Personal Data:

  1. Direct Interaction

You provide your Personal Data directly to us when you perform the following actions on the Platforms:

  • Creating or registering a user account (including social media single sign-on integrations).
  • Submitting orders, selecting payment methods, and requesting refunds.
  • Enrolling in contests, sweepstakes, or promotional campaigns.
  • Publishing customer reviews, testimonials, or platform feedback.
  • Filing support requests, technical inquiries, or fraud reporting tickets.
  • Engaging in correspondence with us via telephone, email, or chat functions.
  1. Indirect Third-Party Sources

We receive Personal Data about you from third parties, including:

  • Friends or family members who purchase items on your behalf or designate you as a shipment recipient.
  • Logistics, distribution, and fulfillment partners.
  • Authorized payment processors and merchant gateways.
  • Marketing agencies and social media platforms (e.g., Facebook, Google) with which you interact.

Third-Party Consent Warranty: If you share Personal Data belonging to a third-party individual (e.g., a friend, relative, or colleague) for shipping or referral purposes, you warrant that you have obtained explicit legal consent from that individual to share their data with us under the terms of this Privacy Policy.

  1. Automated Technologies

As you navigate our Services, we automatically collect Technical Data via server log files and cookies. Log information captures items such as your IP address, browser details, entry/exit pages, and date/time stamps.

We utilize cookies to remember your platform preferences, track user behavior patterns, monitor online traffic routes, and deliver targeted advertising. You may configure your web browser settings to reject cookies or prompt you before accepting them. However, please note that disabling cookies may significantly degrade Platform functionality. If you do not consent to our use of cookies, you must immediately cease using the Platforms. For comprehensive information, please refer to our dedicated Cookies Notice.

  1. Purposes for Data Processing

We collect and process your Personal Data for the following operational, legal, and commercial purposes:

  • To deliver the information, products, or core Services you formally request.
  • To supply tailored location-based services, customized search queries, and personalized content.
  • To discharge our contractual obligations arising from transactions executed on the Platforms.
  • To refine, diagnose, and upgrade our operational Services and interface responsiveness.
  • To manage seasonal or occasion-based rewards, such as specialized offers on your birthday.
  • To notify you regarding administrative modifications to our Platforms, terms, or Services.
  • To supervise incentive programs, sweepstakes, and promotional prize draws.
  • To comply with cross-border shipping regulations, verify merchant identities, and adhere to local banking and tax laws.
  • To proactively monitor, detect, and mitigate fraud, cyber threats, and systemic abuse.
  1. Legal Bases for Data Processing

We process your Personal Data under the following validated legal frameworks:

  • Performance of a Contract: Processing is mandatory to execute our terms of service, fulfill your orders, or take pre-contractual steps at your request. Failure to provide data for these purposes prevents us from fulfilling our transaction obligations.
  • Legal Compliance: Processing is necessary to satisfy statutory obligations, judicial orders, and local or international regulatory frameworks.
  • Legitimate Interests: Processing aligns with our legitimate business functions, provided your fundamental privacy rights do not override those interests. This includes enhancing data security, conducting system diagnostics, and optimizing platform performance.
  • Consent (Marketing Communications): We process your data to dispatch promotional materials across various channels (email, push alerts, WhatsApp, SMS, or in-app cards) only where you have provided clear consent.

Opt-Out Rights: You can revoke your marketing consent at any time by selecting the “UNSUBSCRIBE” link embedded in our emails or by contacting our data privacy office at sales@protechksa.com.co.

  1. Information Sharing and Disclosure

We do not engage in the business of selling your Personal Data to third parties. We share user data strictly with the entities defined below, all of whom are contractually mandated to enforce data protection measures at least as protective as those detailed in this Privacy Policy:

  • Corporate Affiliates and Service Providers: We share information with our subsidiary entities and trusted third-party contractors who perform operational support functions. These include logistics providers, payment infrastructure vendors, data hosting entities, and marketing service providers. These businesses are legally restricted from utilizing your data for any auxiliary purpose.
  • Business Transfers: In the event of an institutional merger, corporate acquisition, asset sale, or restructuring, customer databases are routinely transferred as a business asset. Such data remains bound by the pre-existing promises outlined in this Privacy Policy unless you are notified otherwise.
  • Legal Protections and Law Enforcement: We disclose Personal Data when compelled by law, judicial mandate, or government authority, or when such disclosure is strictly necessary to enforce our Terms of Sale, protect the safety and property of our users, or prevent financial fraud and mitigate credit risks.
  1. Data Retention and International Transfers

The Personal Data we collect may be transferred to, stored at, and processed by specialized staff operating either within or outside your country of residence who work for us or an authorized service vendor.

We retain your Personal Data only for the duration necessary to satisfy the specific purposes outlined in Section 4, or as required to meet legal, tax, accounting, and statutory reporting mandates. To establish the appropriate retention lifespan, we evaluate the volume, nature, sensitivity, and potential risk of unauthorized exposure regarding the data. Where appropriate or legally mandated, we permanently anonymize data sets for statistical analysis, rendering the information entirely non-identifiable.

  1. Technical and Organizational Security Measures

We design our technology architecture with user privacy and security as a core requirement. We implement robust, industry-standard administrative, physical, and technical safeguards to secure your data from unauthorized access, modification, exposure, or destruction.

  • We utilize Secure Sockets Layer (SSL) and transport-layer encryption technologies during data transit.
  • We maintain managed firewalls and network-level host protections.
  • Access to data is strictly limited via the principle of least privilege to authorized personnel who require access to perform their operational duties.
  • We strictly adhere to the Payment Card Industry Data Security Standard (PCI DSS) for all financial card processing.

While we take rigorous measures to secure our systems, no internet transmission method is completely secure. You are responsible for protecting your account credentials, maintaining password confidentiality, and ensuring you sign out securely when accessing the Platforms from shared electronic devices.

  1. Data Subject Rights

Depending on your jurisdiction and the local laws applicable to you (such as the KSA Personal Data Protection Law), you possess specific legal data subject rights:

  • Right to be Informed: The right to clear, transparent explanations regarding how we harvest, store, and utilize your personal data.
  • Right of Access: The right to inspect and review a comprehensive log of the data we hold regarding your profile, including recent orders, identities, and payment configurations.
  • Right to Data Portability: The right to request a copy of your Personal Data in a structured, commonly used, and machine-readable electronic format, where technically feasible.
  • Right to Destruction/Erasure: The right to demand the permanent deletion or erasure of your Personal Data from our active servers, subject to certain regulatory or legal retention constraints that may override the request.
  • Right to Correction/Rectification: The right to immediately amend, update, or correct inaccurate or incomplete Personal Data associated with your account.
  • Right to Object/Withdraw Consent: The right to oppose data processing based on legitimate interests, and the absolute right to revoke processing consent for direct marketing purposes at any time.

To exercise any of the statutory rights listed above, please submit a formal request to our privacy team at sales@protechksa.com.co. We will respond to all legitimate requests within the timelines mandated by applicable local law. No administrative fee will be charged for executing these standard rights requests.

  1. Amendments to this Privacy Policy

As our business framework, service offerings, and regional laws evolve, this Privacy Policy will be revised accordingly. Any changes will be published directly to this page, and the revised version will become legally effective immediately upon its posting or on the designated effective date. We may issue periodic reminders of our terms via email, but it remains your sole obligation to review this Privacy Policy frequently. Your continued interaction with the Platforms following updates constitutes binding acceptance of the modified Privacy Policy.

  1. Contact and Inquiries

For questions, clarifications, complaints, or to exercise your data privacy rights, please contact us at:

Protech IT Solutions One Person Company LLC

Email: sales@protechksa.com.co

Address: Airport Road, King Khalid International Airport, Riyadh, 13447, Kingdom of Saudi Arabia.