PRIVACY POLICY

شركة تتمة (Tatimmah, “we”, “us”, or “our”) is a limited liability company with unified national number 7017179891. We operate this website and are the controller of the personal data described here. This policy covers our coming-soon website, contact form, and correspondence about your enquiry. It is based on Saudi Arabia’s Personal Data Protection Law (PDPL) and its implementing regulations.

Our national address is: Building 3573, Anas Ibn Malik Street, Al Narjis District, Riyadh 13323, Kingdom of Saudi Arabia. Secondary number: 8692. Short address: RANA3573.

For privacy enquiries or requests about your information, email [email protected] or call +966503858073. Please identify your message as a privacy request.

We collect the information you enter directly into our contact form: your name, email address, phone number, and message. Name and email are required so we can identify and reply to your enquiry. Phone and message are optional. Without the required details, the form cannot submit your request; you can contact us by phone instead.

We also receive information you choose to share during follow-up correspondence. Please do not include sensitive information, identification documents, payment details, or another person’s personal data in your message.

When you visit, our hosting and email providers may process technical information such as IP addresses, request times, browser information, and email delivery records to operate and protect their services.

We use your contact details and message to receive, review, and respond to your request, understand the services you are interested in, and follow up on that enquiry. The form asks for your consent for this processing before you submit. You can withdraw it by contacting us; this does not affect processing already carried out lawfully, but may prevent further handling of your enquiry.

Where applicable, we process information to meet legal obligations. Necessary service security and abuse prevention may rely on legitimate interests only where the PDPL permits this, with consideration for your rights and without processing sensitive data on that basis.

Submitting an enquiry does not subscribe you to marketing. We would request separate consent before sending promotional communications. We do not use this form for automated decisions or profiling.

Your form submission is sent through Postmark, our transactional email provider, to Tatimmah’s designated enquiry mailbox. This includes your name, email, and any phone number or message you provide. Our email and hosting providers process information to deliver and operate these services, and the Tatimmah team uses it to handle your request.

Disclosure to authorities or other recipients may also be necessary where required or permitted by applicable law. We do not sell the information you submit through this website.

Our use of Postmark involves processing your enquiry outside Saudi Arabia, including in the United States, where Postmark hosts its infrastructure. Email delivery and storage may therefore involve overseas service providers.

International transfers are subject to the PDPL and the Regulation on Personal Data Transfer Outside the Kingdom. They require an applicable transfer basis and safeguards, including assessments where required. Consent to handling an enquiry does not replace those requirements. Contact us for information about the arrangements that apply to your data.

Enquiries are handled electronically through email delivery systems and our enquiry mailbox. We retain information for as long as needed to handle your request and related correspondence, or to meet an applicable legal retention requirement or resolve an ongoing legal matter.

Once these purposes end, personal data must be deleted without undue delay or irreversibly anonymised. This includes addressing copies held by service providers and backups under their applicable deletion cycles. Postmark’s message retention is separate from retention in our mailbox; deleting a delivery record does not delete the email we received.

We are responsible for applying appropriate organisational and technical measures to protect personal information, limiting access to those who need it, and selecting service providers with suitable protections. No online transmission or storage system can be guaranteed completely secure. If a personal data breach occurs, we must notify the competent authority and affected individuals when the applicable legal conditions are met.

Subject to the PDPL’s conditions and exceptions, you may ask to be informed about processing, access your personal data, obtain a clear and readable copy, correct or complete inaccurate information, and request destruction of data that is no longer needed. You may also withdraw consent at any time.

Email your privacy request to [email protected] or call +966503858073. Explain which right you wish to exercise and provide enough information for us to locate your enquiry. We may request proportionate information to verify your identity before disclosing or changing records.

We handle rights requests without charge and without undue delay, within 30 days. Where legally permitted, we may extend this by up to another 30 days and notify you in advance of the reason. If a legal exception prevents fulfilling a request, we will explain the applicable reason.

This landing page does not include advertising pixels or analytics trackers, and the contact form does not use cookies to store your entries. Infrastructure providers may process technical request information as described above. If we introduce optional tracking, we will update this notice and obtain consent where required.

If you follow our Instagram link or another external link, that service’s own privacy policy applies to your activity there.

We may update this policy when the website, our processing practices, or legal requirements change. The date above identifies the current version. For a new purpose requiring consent, we will ask for that consent before processing your information for that purpose.