Privacy Policy

1. Introduction

Addonsurance, a member of Al Qayem Integrated Solutions ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are based in the Kingdom of Saudi Arabia and comply with the Saudi Personal Data Protection Law (PDPL) as well as international data protection standards including GDPR for our European clients.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Contact Information: Name, email address, phone number, company name
• Communication Data: Information contained in messages you send to us through our website forms or email
• Project Information: Details about your project requirements and technical specifications

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information, including:

• Log Data: IP address, browser type, operating system, pages visited, time spent on pages
• Device Information: Device type, screen resolution, browser language
• Cookies: Small data files stored on your device (see Section 6 for more details)

2.3 Client Project Data

In the course of providing consulting services, we may access data within your organization's systems (such as Atlassian, Microsoft 365, or Oracle platforms). This data:

• Remains your property at all times
• Is accessed only as necessary to perform contracted services
• Is subject to confidentiality obligations in our service agreements
• Is not stored on our systems unless explicitly agreed in writing
• Is not shared with third parties except as required to deliver services

3. How We Use Your Information

We process your information based on the following legal bases:

• Contract Performance: To respond to your inquiries, provide consulting services, and communicate about projects
• Legitimate Interest: To analyze website usage, improve our services, send relevant industry insights, and protect against fraud and security risks
• Legal Obligation: To comply with applicable laws, regulations, and legal processes
• Consent: For marketing communications (which you can opt out of at any time)

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

• Service Providers: With third-party vendors who assist us in operating our website and providing services (e.g., email delivery, analytics)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to share your information

4.1 Specific Service Providers

We currently use the following third-party services:

• Formspree: Contact form processing (United States)
• Hosting Provider: Website hosting and SSL certificates

We ensure all service providers maintain appropriate data protection standards through contractual agreements.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure data storage with access controls
• Regular security assessments and updates
• Employee training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

Types of cookies we use:

• Essential Cookies: Required for basic website functionality (e.g., dark mode preference)
• Analytics Cookies: Help us understand how visitors interact with our website
• Performance Cookies: Improve website performance and user experience

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Opt-Out: Unsubscribe from marketing communications
• Data Portability: Request transfer of your data to another service provider
• Object: Object to certain processing of your information

To exercise these rights, please contact us at hello@addonsurance.com.

7.1 Additional Rights for EEA/UK Residents

If you are located in the European Economic Area or United Kingdom, you have additional rights under GDPR:

• Right to Lodge a Complaint: You may file a complaint with your local supervisory authority if you believe we have violated your data protection rights
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to Restriction: Request restriction of processing in certain circumstances

We will respond to data subject requests within 30 days of receipt.

8. Data Retention

We retain personal information according to the following schedule:

• Contact Form Submissions: 2 years from last contact
• Client Project Records: 7 years from project completion (for legal and tax purposes)
• Website Analytics: 26 months
• Marketing Preferences: Until you opt out

When retention periods expire, we securely delete or anonymize the data. We may retain certain information longer if required by law or for legitimate business purposes.

9. International Data Transfers

We are based in the Kingdom of Saudi Arabia. Your information may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Compliance with Saudi Personal Data Protection Law (PDPL) requirements for cross-border transfers
• Standard Contractual Clauses approved by the European Commission for EU data subjects
• Data processing agreements with all service providers
• Compliance with applicable data protection frameworks in destination countries

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

12. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours where required by law
• Notify affected individuals without undue delay if the breach poses a high risk
• Document all breaches and remediation actions taken

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: hello@addonsurance.com
Website: www.addonsurance.com