Privacy Policy

We collect only the data necessary to provide hosting and server services:

• Account data: Name, email, mobile number, national address.
• Billing data: Payment method, invoice and payment history (we do not store card numbers — processed via certified payment gateway).
• Technical data: IP address, login logs, service usage data for security and support.
• Communication data: Support ticket content and correspondence.

We process your data for the following purposes:

• Creating and managing your account and activating services (contract execution).
• Issuing invoices and collecting payments (contractual and regulatory obligation).
• Providing technical support and communication.
• Protecting our systems and our clients' systems from breaches and fraud (legitimate interest).
• Complying with regulatory requirements in the Kingdom.

Your data storage location depends on the service you choose:

• 🇸🇦 Saudi Servers: Hosted and processed entirely inside Saudi Arabia in the Riyadh region, on Oracle Cloud Infrastructure classified CST Class C and compliant with National Cybersecurity Authority Essential Controls (NCA ECC).

• 🌍 Shared Hosting, Cloud, and Private Servers: Hosted in certified global data centers within the European Union (Germany and Finland), compliant with ISO 27001 and European GDPR standards, with full encryption in transit and at rest.

• Account and billing data (your name, email, payment history) is primarily stored in our system inside KSA.

By subscribing to external services, you explicitly consent to the transfer of your website/application data outside the Kingdom under the protection guarantees mentioned.

When you choose services hosted outside the Kingdom (Shared Hosting, Cloud, and Private Servers), your website or application data is transferred to data centers in the European Union (Germany, Finland) under the following protection guarantees:

• Certified data centers with ISO 27001 and SOC 2 Type II standards.
• Infrastructure providers commitment to European GDPR and local laws.
• Full encryption in transit (TLS 1.3) and at rest (AES-256).
• No data sharing with any foreign government except by official court order.
• Your right to choose hosting inside KSA via Saudi Servers at any time.

By subscribing to these services, you acknowledge and consent to data transfer outside the Kingdom per PDPL Article (29).

We do not sell your personal data. We may share it only with:

• Infrastructure provider (Oracle Cloud — inside KSA) to operate the service.
• Certified payment gateway to process payments.
• Government and regulatory authorities when required by law.

All parties are bound to protect your data at a level not less than this policy.

You have the right at any time to:

• Access your data and know how it is processed.
• Correct inaccurate data or update it.
• Delete your data when no longer needed (subject to legal obligations).
• Withdraw consent for consent-based processing.
• File a complaint with the Saudi Data & AI Authority (SDAIA).

To exercise any right, contact us at: [email protected]

We apply technical and organizational measures to protect your data:

• Encryption in transit and at rest (TLS 1.3 + AES-256).
• Firewalls and Intrusion Detection/Prevention Systems (IDS/IPS).
• Role-Based Access Control.
• 24/7 continuous security monitoring.
• Daily encrypted backups on separate server inside KSA.

In the event of any breach that may affect your personal data, we commit to notifying SDAIA within 72 hours of becoming aware, and to notify you in cases required by law.

We retain your data throughout your subscription period, and for the legally required duration after service termination (e.g., financial records must be kept for 10 years), then we delete it or anonymize it.

When you use the server to host a website or application collecting third-party data, you are the Data Controller of that data and responsible for its PDPL compliance. We act only as Data Processor for the infrastructure.

Our site uses only essential cookies to operate the site properly (such as login sessions and language preferences). We do not use advertising or third-party tracking cookies without your consent.

For privacy inquiries or to exercise your rights:

• Email: [email protected]
• Phone: 0595874094
• Commercial Registration: 1010951195
• Address: Riyadh, Saudi Arabia

We may update this policy from time to time, and publish the updated version on our website with the last updated date. For material changes, we will notify you via your registered email 30 days before activation.