MAJAL Privacy Policy

MAJAL ("we," "us," "MAJAL") is a Saudi business technology partner operating at majalsa.com. For any question about this policy or your personal data, contact us at contact@majalsa.com.

• Contact and enquiry data you submit through our website (name, email address, business name, project details, budget range, service of interest).
• Account data for clients we work with under a signed agreement (billing details, invoices, project records).
• Basic technical data via cookieless analytics (page views; no tracking cookies, no cross-site identifiers).

To respond to your enquiry, provide quotes, deliver contracted services, issue tax-compliant invoices, and meet our legal and accounting obligations.

Your consent when you submit the contact form; contractual necessity once you become a client; legal obligation for tax and invoicing records.

Data is stored in a secured, access-controlled database. Only MAJAL's authorized administrator can access it. Transactional emails (quote confirmations, invoices) are sent through Resend.

• Supabase (database hosting)
• Vercel (application hosting)
• Resend (transactional email delivery)
• Anthropic (Claude API — used for MAJAL's internal business tooling, not to process visitor-submitted personal data for any purpose beyond what's described here)

We do not sell personal data, and we do not share it with third parties beyond what's needed to operate the services above.

Some of the providers above process or store data outside the Kingdom of Saudi Arabia as part of their standard infrastructure. We select providers that maintain appropriate data protection safeguards.

Enquiry data is kept for 12 months if no engagement follows. Client records are retained for the duration of our relationship plus any period required by Saudi tax and commercial law.

Under the Personal Data Protection Law, you have the right to access, correct, delete, or transfer your personal data, object to or restrict its processing, and withdraw consent at any time. To exercise these rights, contact contact@majalsa.com — we will respond within 30 days.

We apply access controls, encrypted connections, and authenticated access to protect your data.

In the event of a data breach affecting your personal data, we will notify the Saudi Data and Artificial Intelligence Authority (SDAIA) within 72 hours and inform affected individuals where required by law.

Our services are not directed at, and we do not knowingly collect data from, individuals under 18.

We may update this policy as our practices evolve. The date above reflects the most recent revision.

contact@majalsa.com