Privacy Policy
How OPTIMUM Roo collects, uses and protects personal data on www.optimumroo.com, in line with the Saudi Personal Data Protection Law (PDPL). Effective date: [EFFECTIVE DATE].
Draft for legal review. Not legal advice. Remove this notice after review.
1. Who we are
OPTIMUM Roo ("OPTIMUM", "we", "us") is the controller of personal data collected through this website. Commercial Registration (C.R.): 7052680043. Short national address: RERF3107, Kingdom of Saudi Arabia. Contact: [email protected].
2. The data we collect
- Demo and contact requests: name, company, work email, mobile or WhatsApp number, country and your message, when you submit our form or contact us by email or WhatsApp.
- Analytics data (only with your consent): pages visited, approximate location derived from a shortened IP address, device and browser type, and how you arrived at the site.
- Marketing measurement data (only with your consent): whether a visit came from, or led to an action after, one of our LinkedIn campaigns.
- Technical data needed to deliver the site securely, processed by our hosting provider, such as IP address and request logs.
We do not ask for sensitive data and ask you not to send it to us.
3. Why we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your demo or contact request and arranging the demo | Your consent, given on the form or by contacting us |
| Understanding how the site is used, to improve it (Google Analytics) | Your consent through the cookie banner |
| Measuring our LinkedIn campaigns (LinkedIn Insight Tag) | Your consent through the cookie banner |
| Keeping the site secure and working | Our legitimate interest and legal obligations |
We do not sell personal data and do not use it for automated decisions that affect you.
4. Who we share it with
We share personal data only with service providers that process it for us under contract:
- Website hosting: [HOSTING_PROVIDER]
- Form delivery: Web3Forms, which forwards form submissions to our email
- Email: [EMAIL_PROVIDER]
- Analytics: Google LLC (Google Analytics 4), only with your consent
- Marketing measurement: LinkedIn, only with your consent
We may also disclose data where required by Saudi law or a competent authority.
5. Transfers outside the Kingdom
Some providers above may process data outside Saudi Arabia. Where this happens, we transfer only the data needed for the purpose and rely on the safeguards permitted under the PDPL and its regulations on transferring personal data outside the Kingdom. [TO CONFIRM WITH LEGAL COUNSEL]
6. How long we keep it
- Demo and contact requests: [RETENTION PERIOD, e.g. 24 months] after our last contact, unless you become a customer.
- Analytics data: as set in Google Analytics, [e.g. 14 months].
- Your cookie choice: 12 months.
When data is no longer needed, we delete it or make it anonymous.
7. Your rights
Under the PDPL you have the right to:
- be informed about how your data is processed;
- access your data and obtain a copy;
- ask us to correct or complete it;
- ask us to destroy it when it is no longer needed;
- withdraw your consent at any time, without affecting processing done before withdrawal.
To use these rights, email [email protected]. We will reply within the period set by the PDPL regulations [e.g. 30 days]. You can change your cookie choices at any time through "Cookie settings" at the bottom of every page.
If you are not satisfied with our reply, you may complain to the Saudi Data & AI Authority (SDAIA), the competent authority under the PDPL.
8. Security
We protect personal data with appropriate technical and organisational measures, including encrypted connections (HTTPS), access limited to staff who need it, and contracts with our service providers.
9. Children
This website is intended for businesses. It is not directed at children, and we do not knowingly collect their data.
10. Changes to this policy
We may update this policy. The effective date above shows the latest version; material changes will be highlighted on this page.