Privacy Policy
A clear, honest explanation of the personal data we handle and your rights under Saudi Arabia's Personal Data Protection Law.
Last updated: August 2026
1. Introduction
WebCraft SA (“we”, “us”) respects your privacy. This Privacy Policy explains what personal data we collect when you use our website and services, why we collect it, how we protect it, and the rights you have under the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL).
2. Data We Collect
We collect only what we need to serve you:
- Contact details you share with us (name, phone/WhatsApp number, email, business name) when you message us or request a quotation.
- Project information you provide for your website (texts, images, prices, business details).
- Basic technical data such as pages visited, device type and approximate region, collected via privacy-friendly analytics to keep the site working well.
- Payment references (order numbers); we do not store your card or banking details — payments are handled by licensed payment providers.
3. How We Use Your Data
We use your data to prepare quotations, deliver and support your website, respond on WhatsApp, improve our templates and services, and meet our legal obligations. We do not sell your personal data to anyone, and we do not use it for advertising other businesses to you.
4. Legal Basis (PDPL)
We process your personal data on the bases of performing our contract with you, your consent where we ask for it, and our legitimate interest in operating and improving our services, in accordance with the PDPL and its implementing regulations.
5. Sharing and Processors
We share data only with providers necessary to deliver the Services — for example hosting providers, domain registrars, payment providers and messaging platforms — each bound by confidentiality. We may disclose data to government authorities where the law requires it.
6. Cookies
Our website uses a small number of cookies for essential functions and privacy-friendly measurement. See our Cookie Policy for details and how to control them.
7. Data Retention
We keep project and contact data for as long as your website is active with us and for up to 5 years afterwards for accounting and legal purposes, then delete or anonymise it. You can ask us to delete it earlier, subject to records we must keep by law.
8. Security
We apply appropriate technical and organisational measures — encrypted connections, access controls and careful vendor selection — to protect your data. No method of transmission over the internet is absolutely secure, but we work to keep risks low.
9. Your Rights
Under the PDPL you have the right to access your personal data, obtain a copy of it, request correction or deletion, request restriction of processing, and withdraw consent where processing is based on consent. To exercise any right, contact us on WhatsApp at +966 53 291 7178 and we will respond within the period prescribed by law.
10. Children
Our services are intended for businesses and adults. We do not knowingly collect personal data from children.
11. Transfers Outside the Kingdom
Some technical providers (such as hosting) may process data outside the Kingdom of Saudi Arabia. Where that happens, we rely on providers that meet appropriate protection standards and on the transfer rules of the PDPL.
12. Changes and Contact
We may update this Policy; the date above shows the latest revision. For any privacy question or request, contact us via the contact page or WhatsApp at +966 53 291 7178.