1Introduction
At the Digital Platform for Information Technology ("we"), we are committed to protecting the privacy of doccb.app visitors and our customers. This policy explains the kinds of personal data we collect, the purposes of processing it, how it is protected, and your rights regarding it, in compliance with the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 9/2/1443 AH, its amendments and implementing regulations in Saudi Arabia.
2The data we collect
- Contact and account data: name, organization name, email address, mobile number, and sign-in credentials when creating an account.
- Purchase and billing data: order details, invoice data (including the tax number for organizations), and transaction history. Note: payment-card data is processed by the licensed payment provider, and we do not store card numbers.
- Technical data: IP address, browser and device type, and the pages visited, via server logs and cookies.
- Support data: the information and attachments you provide when requesting support or making an inquiry.
3Purposes of processing and its legal basis
We process personal data for the following purposes, relying on the bases permitted by law (contract performance, consent, legitimate interest, or legal obligation):
- Fulfilling purchase orders, delivering licenses and products, and issuing tax invoices.
- Providing technical support and managing and validating licenses.
- Meeting legal obligations (such as tax and e-invoicing requirements).
- Improving the site, the products and the user experience.
- Marketing communications about our products and offers — with your consent, and with the option to unsubscribe at any time.
We follow the data-minimization principle: we collect only what is needed to fulfill the purpose of processing.
4Sharing and disclosure
We do not sell or trade your personal data. We may share it, narrowly, with:
- Payment providers licensed in Saudi Arabia, to complete payments.
- Hosting and infrastructure providers who process data on our behalf under contractual confidentiality and protection obligations.
- Government and judicial authorities where disclosure is legally required.
5Transfers outside Saudi Arabia
We strive to process and store data inside Saudi Arabia wherever possible. If technical necessity requires transferring or processing data outside the Kingdom, this is done only under the controls and requirements set by the Personal Data Protection Law and its regulations.
6Retention period
We retain personal data for as long as needed to fulfill the purpose it was collected for, or for the periods required by law (such as the statutory retention periods for records and invoices), after which it is securely destroyed or anonymized.
7Your rights as a data subject
The Personal Data Protection Law grants you the following rights:
- Right to be informed: to know the legal basis for collecting your data and its purpose.
- Right of access: to review the personal data we hold about you and obtain a copy of it.
- Right to correction: to request that your data be corrected, completed or updated.
- Right to destruction: to request that your data be destroyed when it is no longer needed, where this does not conflict with the law.
- Right to withdraw consent: to withdraw your consent to processing at any time, where processing has no other legal basis.
To exercise any of these rights, contact us using the details below, and we will respond within the statutory periods. You may also file a complaint with the authority responsible for personal data protection in Saudi Arabia if you believe our processing violates the law.
8Information security
We apply appropriate organizational and technical measures to protect data against unauthorized access, loss or leakage, including encrypted connections to the site (HTTPS), restricting data access to those who need it for their work, and regular backups. If a breach affecting your data occurs, we will report and notify as the law and its regulations require.
9Cookies
The site uses cookies that are necessary for it to work, and optional ones for analytics and improving the experience. You can set your browser to refuse or delete cookies, noting that this may affect some site features.
10Minors' privacy
Our services are aimed at adults and at organizations with legal standing, and we do not knowingly collect data from anyone under eighteen. If we learn that a minor's data was collected without their guardian's consent, we will destroy it.
11External links
The site may contain links to external sites (such as payment gateways). This policy does not apply to those sites, and we advise reviewing their own privacy policies.
12Policy updates
We may update this policy from time to time; updates are published on this page with the date of the last update. We recommend reviewing it periodically.
13Contact
For any inquiry or request related to privacy and data protection:
- Email: info@mnsah.com
- Phone / WhatsApp: 0550227727
- Address: Riyadh, Saudi Arabia
This policy is read together with the Terms of Use and the Exchange & Refund Policy published on the site.
Digital Platform for Information Technology — Riyadh, Saudi Arabia.