Privacy policy

This policy explains how TechRoad (Establishment The Technical Road) collects, uses, stores and protects your personal data when you visit this website or contact us, in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia and its implementing regulations.

Who we are

The data controller is Establishment The Technical Road, 6401 King Fahad Branch Road, Al Olaya District, Riyadh 12211, Kingdom of Saudi Arabia. Commercial Registration 7008895216. VAT number 300456008900003. For any privacy question, email info@techroad.sa.

What we collect

• What you give us directly: name, email address, phone number, organisation, the service and budget you select, and the content of your message when you use the contact form.
• Job applications: name, contact details, LinkedIn URL, covering note and any CV file you upload.
• Newsletter: your email address only, and only where you have explicitly subscribed.
• Assistant conversations: we store the full transcript along with the language, the page you started from and your IP address. If you give an email address or phone number during a conversation we extract and keep it so we can follow up.
• Technical data: IP address, browser type and visit timestamps, collected for security, rate limiting and abuse prevention.

Cookies and measurement

We use strictly necessary cookies to remember your language and theme, to protect forms against cross-site request forgery, and to keep an admin session signed in. The assistant also keeps its transcript in your browser's sessionStorage so the conversation survives moving between pages; it is cleared when you close the browser.

We additionally use Google Analytics 4 to measure how many people visit and how the site is used. These are analytics cookies, not strictly necessary ones, and they are set by Google. You can opt out using Google's official opt-out add-on or through your browser settings.

Why we use it, and on what basis

• Answering your enquiry and preparing proposals: performance of a contract, or steps taken at your request before entering one.
• Assessing job applications: your consent and pre-contractual steps.
• Newsletter: your explicit consent, which you may withdraw at any time.
• Site security and abuse prevention: a legitimate interest that does not override your rights.
• Measurement and analytics: a legitimate interest in understanding and improving how the site performs.

Who we share it with

We do not sell or trade personal data. We share it only with providers who process it on our behalf:

• Hostinger — website, database and email hosting.
• OpenAI — powers the website assistant. The text of your message is sent to their servers to generate a reply. Please do not send confidential or sensitive information through the assistant.
• Google — visit measurement through Google Analytics.

We may also disclose data where a law or a court order requires it.

Transfers outside the Kingdom

The website and its database are held with our hosting provider. Assistant conversations and measurement data are processed on servers outside the Kingdom, and those transfers are made in accordance with the Personal Data Protection Law's requirements for transfers abroad. On client projects we design for in-Kingdom data residency wherever the contract or the regulator requires it.

How long we keep it

• Contact enquiries: up to 24 months.
• Job applications and CVs: up to 12 months, unless you agree to longer.
• Assistant conversations: up to 12 months.
• Newsletter subscribers: until you unsubscribe.

After that, data is deleted or anonymised.

Your rights

Under the Personal Data Protection Law you have the right to be informed how your data is processed, to access it and obtain a copy, to request that it be corrected, completed or updated, to request its destruction, and to withdraw consent at any time. To exercise any of these, email info@techroad.sa and we will respond within the statutory period. You also have the right to complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).

Security

We use encrypted connections (HTTPS), cross-site request forgery protection on every form, rate limiting, and hashed password storage. No method of transmission over the internet is completely secure.

Children's privacy

This site is aimed at organisations. We do not knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy when our services or providers change. The date at the top of this page shows when it was last revised.