Privacy Policy

Compliant with Kingdom of Saudi Arabia regulations and Communications and Information Technology Commission (CITC)

Last Updated: February 2026

Introduction

Welcome to Smart Start Deals. We are committed to protecting your privacy and personal data in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia issued by Royal Decree No. (M/19) dated 9/2/1443H, and the regulations of the Communications and Information Technology Commission (CITC).

This policy explains how we collect, use, protect, and share your personal information when you use our platform.

Data We Collect

Personal Information

  • Full name and identity information
  • Email address
  • Mobile phone number
  • Physical address
  • Commercial registration information (for businesses)
  • Financial information for transactions

Technical Data

  • IP address and device information
  • Browser type and operating system
  • Cookie data
  • Activity and usage logs

Legal Basis for Processing

In accordance with the Saudi Personal Data Protection Law, we process your data based on:

  • Your explicit consent
  • Performance of a contract with you
  • Compliance with legal obligations
  • Legitimate interests (while respecting your rights)

How We Use Your Data

  • Providing platform services and managing your account
  • Processing transactions and payments
  • Communicating with you about our services
  • Improving user experience and platform development
  • Compliance with regulatory requirements
  • Fraud prevention and platform security

Your Rights Under PDPL

Right to Access

Request a copy of your personal data

Right to Rectification

Correct inaccurate data

Right to Erasure

Request deletion of your data in certain circumstances

Right to Object

Object to processing of your data

Data Security

We implement advanced technical and organizational security measures to protect your data, including:

  • Data encryption in transit and at rest (SSL/TLS)
  • Access control and identity management
  • Continuous security monitoring
  • Regular data backups
  • Compliance with international information security standards

Data Retention Period

We retain your personal data for as long as necessary for the purposes specified in this policy, or as required by legal and regulatory requirements in the Kingdom of Saudi Arabia. When data is no longer needed, it will be securely deleted or anonymized.

Contact Information

For any inquiries about this privacy policy or to exercise your rights, please contact us:

+966 11 XXX XXXX
Riyadh, Kingdom of Saudi Arabia

Regulatory Authority

You have the right to file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) if you believe that the processing of your personal data violates the Personal Data Protection Law.

Website: sdaia.gov.sa

Policy Updates

We may update this policy from time to time. You will be notified of any material changes via email or a notice on the platform.