Privacy Policy

Version 1.0, draft for legal review. Last updated: date of publication.

This Privacy Policy explains how Smart Eye Security collects, uses, stores, shares and destroys personal data through this website, and the rights you have over that data. It follows the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 9/2/1443H, as amended by Royal Decree No. (M/148) dated 5/9/1444H, and its Implementing Regulation (together, the "Law").

The Arabic version of this policy is the authoritative version. This English version is provided for convenience.

1. Who we are and how to contact us

Smart Eye Security designs, supplies, installs and maintains security and low-current systems for organisations in the Kingdom of Saudi Arabia, including surveillance cameras, access control, fire alarm, networking and smart building systems.

Legal name: Smart Eye Security Company
Unified National Number (Commercial Registration): 7050725212
Address: Babadr Plaza Building, Office No. 27, Setten Road, Jeddah, Kingdom of Saudi Arabia
Privacy requests and questions: info@smarteyesecurity.sa
Other enquiries: the details on our Contact page

For the personal data described in this policy, Smart Eye Security is the controller: the party that decides why and how the data is processed. If a Data Protection Officer is appointed, add their name and contact details here.

2. Who this policy covers

This policy covers:

visitors to this website;
people who send us a request or a quote request through the website;
Smart Eye Security staff who sign in to the website's management dashboard, for the sign-in and security data described in section 3.

It does not cover personal data we process when delivering projects for our clients, such as systems we install or maintain on their premises. That processing is governed by our contracts with those clients.

The website is intended for business enquiries from adults. We do not knowingly collect personal data from children.

3. The personal data we collect

Data you give us through the quote form

Required: your full name, your email address, and a message describing your request.
Optional: your organisation, your mobile number, the service you are interested in, and an attached file (PDF, JPG or PNG, up to 4 MB), such as a floor plan.
Your consent: the wording you agreed to, with the date and time you agreed.

Please do not include copies of identity documents, or sensitive personal data such as health information, in your message or attachment.

Data collected automatically

Form protection: your IP address and the email address you entered, kept for 24 hours to stop the form being misused, for example through repeated automated submissions.
Server logs: technical data our hosting provider records to keep the website secure and available, such as IP address, browser type, the page requested and the time. Confirm what the hosting provider logs and for how long.
Cookies and similar technologies: described in our Cookie Policy. We do not use analytics or advertising cookies at present.

Smart Eye Security staff

For staff who sign in to the dashboard: name, email address, role, two-factor authentication data, and a record of actions taken in the dashboard, kept for security.

4. Why we use your data, and our legal basis

To answer your request and prepare a quotation: your consent, given by ticking the box on the form. Legal review: confirm whether legitimate interest should be relied on as well, with a written assessment.
To confirm by email that we received your request, and to contact you about it: your consent.
To protect the form and the website from misuse, spam and attacks: our legitimate interest in keeping our network and information secure.
To keep records the law requires, and to establish or defend legal claims: compliance with our legal obligations, and our legitimate interests.
To secure the dashboard and keep a record of staff actions: our legitimate interest.

We use your data only for these purposes. We will not use it for marketing unless you have separately agreed to that. We do not sell personal data, and we do not make decisions about you based solely on automated processing.

The required fields are needed to receive and answer your request. If you prefer not to provide them, you can call or email us instead, using the details on our Contact page.

5. How we store and protect your data

Requests and attachments are stored in the website's database and private file storage. Only authorised Smart Eye Security staff can see them, after signing in with two-factor authentication.
Attachments are kept in private storage and are never publicly accessible.
Data travels over encrypted connections (HTTPS). Access depends on each staff member's role, and actions in the dashboard are logged.
Our service providers are bound by confidentiality and data protection obligations.

6. Who we share your data with

Authorised Smart Eye Security staff who handle your request, such as our sales and maintenance teams.
Service providers acting on our instructions (processors), who host the website and database, store files and send emails for us: names of the hosting, database and storage, and email providers.
Public authorities, where the law requires us to disclose data.

We do not sell or rent your personal data.

7. Transfers outside the Kingdom

Some of our service providers process or store data outside the Kingdom of Saudi Arabia, in: countries or regions to be confirmed. Where this happens, we transfer only the data that is needed, in line with the Law and the Regulation on Personal Data Transfer outside the Kingdom, with appropriate safeguards such as the standard contractual clauses issued by SDAIA and a transfer risk assessment.

Legal review: confirm the transfer route for hosting outside the Kingdom, or move the database and file storage to a region inside the Kingdom.

8. How long we keep your data, and how we destroy it

Requests, attachments and consent records: 3 years from receipt, then deleted automatically, attachment included.
Form protection record (IP address and email address): 24 hours.
Server logs: the hosting provider's retention period.
Staff dashboard records: for as long as the staff member has access, and period afterwards for security.

We keep data longer only where a law requires a set retention period or the data relates to a legal claim, or once it has been made anonymous. When the retention period ends, the data is permanently deleted from our database and storage, and from backups within backup retention period.

9. Your rights

Under the Law you have the right to:

be informed about how and why your personal data is processed, as set out in this policy;
access the personal data we hold about you;
obtain a copy of it in a clear, readable and commonly used format;
ask us to correct, complete or update it;
ask us to destroy personal data we no longer need;
withdraw your consent at any time, as easily as you gave it. Withdrawing does not affect processing that took place before, or processing based on another legal basis;
complain to the competent authority, and claim compensation for harm under the Law.

To use any of these rights, email info@smarteyesecurity.sa, or contact us using the details on our Contact page. We will verify your identity before acting on the request, and reply within 30 days. If a request needs unexpected or unusual additional effort, we may extend this once by up to 30 days, and we will tell you in advance, with the reason. We do not charge for handling requests. Legal review: confirm.

10. Complaints

If you have a concern about how we handle your personal data, please contact us first at info@smarteyesecurity.sa. We will reply within number days.

If you are not satisfied with our answer, you can complain to the Saudi Data & AI Authority (SDAIA), the competent authority under the Law, through the National Data Governance Platform at dgp.sdaia.gov.sa.

11. Cookies

How this website uses cookies and similar technologies, and how to change your choices, is explained in our Cookie Policy.

12. Links to other websites

This website links to other websites, such as Google Maps for our branch locations. Those websites have their own privacy policies, and we are not responsible for how they handle personal data.

13. Changes to this policy

We review this policy regularly and update it when our practices or the law change. The date at the top shows when it was last updated, and every version is recorded below. If a change significantly affects how we use personal data you have already given us, we will tell you before it takes effect.

14. Version history

Version 1.0, date of publication: first version.

This policy should be read together with our Terms & Conditions and our Cookie Policy.