How we handle your data.

1. Data we collect

We collect only the data you actively provide, plus minimal technical data needed to run the site safely. When you submit the contact form, we collect: • Full name • Mobile number • Email address • Company name (optional) • Country (optional) • Service of interest (optional) • Your message (optional) When you use the AI chat assistant, we process: • The messages you type into the chat, so the assistant can reply. For security and abuse prevention, our servers also process technical signals such as your IP address (which we store only in a hashed, non-reversible form for spam control), your browser's user-agent, and a timestamp. We do not run advertising or analytics trackers, and we do not build marketing profiles about you. We do not knowingly collect sensitive personal data as defined by the PDPL; please do not include such information in your message.

2. Why we use your data

We use the personal data you submit only to: • Respond to your enquiry or request • Schedule a discovery call when you ask for one • Send you the information or proposal you requested • Operate and improve the AI chat assistant and the website • Protect the site against spam, fraud, and abuse We do not sell your personal data, and we do not use it for purposes unrelated to the ones above without first obtaining your consent.

3. Legal basis for processing

Under the PDPL, we rely on the following legal bases: • Your consent — given when you choose to submit the contact form or chat with the assistant. • Our legitimate interests — including responding to your enquiry, securing the website, and preventing spam and abuse, where this does not override your rights. • Compliance with a legal obligation — where Saudi law requires us to keep or disclose certain data. Where processing is based on consent, you may withdraw it at any time (see Section 8).

4. Service providers we use

We do not sell, rent, or trade your personal data. To operate this website, we rely on a small number of trusted service providers who process data strictly on our behalf: • Resend — delivers the contact-form submission to our business inbox by email. It receives the details you entered in the form. • Cloudflare Turnstile — protects our forms from automated spam. It analyses anonymised signals to tell humans from bots and does not use your form data for advertising or profiling. • Anthropic (Claude) — powers the AI chat assistant. The messages you type in the chat are sent to Anthropic's API to generate a reply. We may also share data where required by Saudi law, a court order, or a request from a competent authority. We do not allow these providers to use your data for their own independent marketing purposes.

5. International data transfer

Some of the service providers above (Resend, Cloudflare, and Anthropic) operate infrastructure outside the Kingdom of Saudi Arabia. This means that when you submit the contact form or use the AI chat assistant, the relevant data may be transmitted to and processed on servers located abroad. We limit these transfers to what is necessary to deliver your message and run the chat assistant, and we rely on providers that apply recognised security and data-protection safeguards. By submitting the form or using the chat, you acknowledge this cross-border processing. If you would prefer not to have your data processed outside the Kingdom, you can contact us directly by email or phone instead of using these features. This Privacy Policy covers the public marketing website only. Data handling for any Digi Emp product or service you later engage us to deliver is governed by the separate agreement for that engagement.

6. How long we keep your data

We keep your personal data only for as long as we need it for the purpose it was collected, or as required by Saudi law. • Contact-form enquiries: kept for up to 24 months from our last contact with you, unless an active relationship requires longer. • Server and security logs (including hashed IPs): kept for a short period for security monitoring, then deleted. • AI chat messages: processed to generate a reply and are not stored by us as a permanent record on this website. Anthropic's handling of API data is governed by its own terms. You may ask us to delete your data sooner at any time (see Section 8).

7. How we protect your data

We apply appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or loss, including: • Encrypted transmission over HTTPS/TLS • Storing IP addresses only in hashed form for spam control • Limiting access to submitted data to authorised personnel • Rate limiting, honeypot fields, and CAPTCHA to block automated abuse No method of transmission over the internet is completely secure. If a personal-data breach occurs that is likely to affect your rights, we will notify you and the competent authority as required by the PDPL.

8. Cookies, anti-spam, and CAPTCHA

This website uses only one cookie: NEXT_LOCALE, which simply remembers whether you are viewing the site in Arabic or English. It is not used for tracking, advertising, or analytics. To keep our forms free of automated spam, we use Cloudflare Turnstile. Turnstile works without advertising cookies or tracking pixels; it analyses anonymised signals to distinguish humans from bots and does not use your data for advertising or profiling. For more detail, see Cloudflare's Privacy Policy at cloudflare.com/privacypolicy.

9. Your rights under the PDPL

Under the Kingdom's Personal Data Protection Law, you have the right to: • Be informed about how and why we process your personal data • Access the personal data we hold about you and obtain a copy • Correct data that is inaccurate or incomplete • Request deletion of your data, subject to any legal retention obligations • Withdraw your consent at any time, where our processing is based on consent • Object to processing that is causing you harm To exercise any of these rights, email us at the address below. We will respond within the period required by the PDPL. You also have the right to lodge a complaint with the competent supervisory authority in the Kingdom of Saudi Arabia.

10. Children's data

This website is intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Contact for data requests

For any privacy question, data access or deletion request, or complaint, please email us at:

Business@DigiEmp.Ai

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page shows when it was last revised. If you continue to use this website after an update, that constitutes acceptance of the revised policy.