Privacy & Cookies Policy
What this website collects, why, and what you can ask us to do about it.
Who This Policy Is From
This policy covers the website at noursolution.com and is issued by Nour Solutions, whose office is at Office No. 418, 3rd Floor, Khobar Mall, Al Khobar, Saudi Arabia.
For anything in this policy, including any request about your own data, write to info@noursolution.com.
What This Policy Covers
It covers this website only: the pages you read, the enquiry form, and the cookies the site sets in your browser.
It does not cover work carried out under a signed engagement. Data handled during a consultancy, compliance or technology engagement is governed by the agreement for that engagement, not by this page.
What We Collect
The site asks for personal data in one place: the enquiry form. Nothing else on the site collects information about you, and there is no account to create, no newsletter sign-up and no profile.
When you submit the form we receive:
- Your name, which the form requires.
- Your email address, which the form requires and which is the address we reply to.
- Your message, which the form requires.
- Your company name, your telephone number and the service you are asking about — each optional, and sent only if you fill it in.
- The language the form was in, so the reply goes out in the language you wrote in.
What Is Collected Automatically
Your IP address is read when you submit the enquiry form, and is used for one purpose: to limit how many submissions can come from one address in a ten-minute period, which is what stops the form being used to flood the mailbox.
It is held in the server's memory for at most ten minutes, is never written to a file or a database, and is discarded whenever the application restarts. It is not used to identify you, is not combined with anything else, and is not shared.
Our hosting provider keeps its own server logs, which is ordinary for any website and outside our control.
Why We Use It, and on What Basis
Enquiry details are used to read your enquiry, reply to it, and carry on the conversation it starts. We do not use them for marketing, and we do not add you to a mailing list.
Under Saudi Arabia's Personal Data Protection Law, we rely on your consent for analytics cookies, and on the legitimate interest of responding to someone who has asked us to get in touch for everything in the enquiry itself. Where a request is a step toward an engagement, the lawful basis is the performance of, or steps toward, a contract.
Where It Is Processed
The website and its mailbox are operated through a hosting provider whose infrastructure may be located outside Saudi Arabia. Where personal data is transferred outside the Kingdom, the Personal Data Protection Law requires that it keep a level of protection no lower than the Law provides.
How Long We Keep It
Enquiry emails are kept for as long as they are useful to the matter they concern, and are deleted when they no longer are.
The rate-limiting record described above lasts at most ten minutes. Cookies expire on the schedule in the table above.
If you would like your enquiry deleted sooner, write to info@noursolution.com and say so.
How It Is Protected
The site is served over HTTPS, so what you type into the form is encrypted in transit. The form is validated on the server as well as in the browser, and the submission endpoint is rate-limited.
No website can promise that data is completely secure, and we do not. What we can say is that enquiries are held in a business mailbox with access limited to the people who need it.
Your Rights
Under the Personal Data Protection Law you may ask us to:
- Tell you what personal data of yours we hold, and why.
- Give you a copy of it.
- Correct it, where it is wrong or incomplete.
- Delete it, where there is no longer a reason for us to hold it.
- Stop using it for a purpose you agreed to, by withdrawing that agreement.
Write to info@noursolution.com and we will respond. There is no charge for asking.
If you believe we have handled your personal data improperly, you may complain to the Saudi Data & Artificial Intelligence Authority (SDAIA), which supervises the Law.
Children
This is a website for businesses. It is not directed at children and we do not knowingly collect personal data from them.
Changes to This Policy
When this policy changes, the revised version is published here and the date at the top of the page is updated. The date is how you can tell whether what you read last time still stands.