Privacy Policy

Who we are

Ratiom Software Solutions is a Saudi-based provider of custom software, business automation, systems integration and server management services. We are the data controller for personal data collected through this website.

For any question about this policy or about how we process your personal data, contact us to learn more.

Data we collect

Data you give us: your name, email address and message content when you use the contact form, plus anything you choose to share by email, WhatsApp or phone.

Data collected automatically: aggregated, non-identifying usage data such as pages viewed, device type and approximate visit source, collected by our hosting platform's analytics.

We retain the IP address of contact-form submissions temporarily, for anti-spam protection only.

We do not collect sensitive personal data, and we never ask for payment card details through this website.

Legal basis

We process your data on the basis of your consent when you submit the contact form; to perform a contract or take steps at your request before entering one; to comply with a legal obligation; or for a legitimate interest that does not override your rights, such as protecting the site from abuse.

How we use data

To respond to your enquiries, prepare quotations and discuss scope.

To deliver, operate and support the services you engage us for.

To improve the content and performance of this site using aggregated data.

To meet legal and accounting requirements.

We do not use your data for targeted advertising, and we never sell, rent or trade it.

Cookies and analytics

This site uses no advertising or cross-site tracking cookies.

We use our hosting platform's privacy-friendly analytics (Vercel Analytics), which measures traffic without cookies and without building a persistent visitor profile.

We use no ad networks and no third-party tracking pixels.

Sharing and service providers

We do not share your personal data with third parties except with the service providers we need to run this site and reply to you, and only to the extent required for them to do their job.

Current providers: Vercel for hosting and analytics, and Resend for delivering contact-form messages to our inbox.

We may disclose data where required by applicable law or by an order from a competent authority in the Kingdom.

When delivering client projects, we handle client data as a processor acting on the client's documented instructions.

Retention

We keep contact-form messages and email correspondence for no more than 24 months from the last contact, unless the conversation becomes an engagement.

We keep project records and invoices for as long as Saudi accounting and tax rules require.

Contact-form IP addresses are deleted shortly after they have served their anti-spam purpose.

Transfers outside the Kingdom

Some of our operational services are hosted with global providers, which may mean certain data is processed outside Saudi Arabia.

We choose providers that maintain appropriate protection standards, and we limit transfers to the minimum needed to run the site and deliver messages.

On request, we can run client projects on hosting infrastructure located inside the Kingdom.

Your rights

Under the Personal Data Protection Law you have the right to be informed of how your data is collected and why.

You have the right to access the data we hold about you and to request a copy in a readable format.

You have the right to request that your data be corrected, completed or updated.

You have the right to request destruction of your data once it is no longer needed, and to withdraw consent at any time without affecting the lawfulness of processing carried out beforehand.

We respond to requests to exercise these rights within 30 days at most, and we may ask you to verify your identity first. To exercise any of them, contact us to learn more.

Data security

We use encryption in transit (TLS) across the whole site, and encryption at rest for the databases and backups we manage.

We apply least-privilege access, keep credentials separate per service, and monitor and patch systems on a schedule.

No technical measure can guarantee absolute security, but we commit to reviewing our practices and to reporting any incident affecting your data as required by law.

Children's privacy

Our services and this website are intended for businesses and adults. We do not knowingly collect data about anyone under eighteen. If you believe such data has reached us, tell us and we will delete it.

Changes to this policy

We may update this policy when our services or legal requirements change. The last-updated date appears at the top of this page, and the published text applies from the date it is posted.

Contact and complaints

For any question, request or complaint about your personal data, contact us to learn more.

If you are not satisfied with our response, you have the right to raise a complaint with the competent personal data protection authority in the Kingdom of Saudi Arabia.