Privacy policy

1. Who we are

Tawreed Gate for Business Services Company operates the site and the business accounts on it, and is responsible for the personal data collected through it. The company details and contact channels are at the top of this page.

2. What we collect

• Quote requests without an account: company name, your name, email, mobile number, city, the items and your notes.
• Business account applications: the company's Arabic and English names, Commercial Registration number, VAT number and national address, and the applicant's name, email and mobile number.
• Your account: name, email, mobile number, job title, language, notification settings, your password (stored as a one-way hash that no one can read) and two-step sign-in, if you turn it on.
• Your business with us: requests, quotations, orders, deliveries, invoices, delivery addresses and purchase order numbers.
• Security records: IP address and browser type when you sign in or send a form, and a log of important account actions.

We do not collect card or bank account details on the site, and we do not track your location.

3. Why we use it

• To receive, price and answer your quote requests (to provide the service you asked for).
• To open your company's account and check its commercial and tax details (contract and legal obligation).
• To fulfil and deliver orders and issue tax invoices (contract and legal obligation).
• To send service messages by email and SMS: requests, pricing, delivery, invoices and security (contract).
• To protect accounts and the site from fraud and misuse (legitimate interest).

We do not send marketing messages without your consent. You can turn off email notifications on your profile page.

4. Who we share it with

We do not sell your data. We share it only with:

• our business system (Odoo), where we manage customers, orders and invoices;
• service providers working for us: hosting and database (Vercel, Neon), email delivery (Resend), SMS delivery (the SMS service in Odoo), and a check of new passwords against known leaks (Have I Been Pwned, which receives only a short fragment of the password's hash);
• Anthropic, if you use our assistant Salem while its AI answers are switched on: the text of your questions is processed to produce the answer;
• government authorities, when the law requires it;
• the users of your company's account: company admins see their team's requests and details.

5. Where your data is kept

The site and its database are hosted in Frankfurt, Germany. We transfer data there in line with the Personal Data Protection Law and its regulation on transfers outside the Kingdom, with the safeguards described in section 9.

6. How long we keep it

• Quote requests without an account: 12 months.
• Log of messages sent: 90 days. In-account notifications: 180 days.
• Account data: while the account is open, then deleted or anonymised when it is closed and you ask us to.
• Invoices and accounting records: as long as Saudi law requires.
• Security and audit records: as long as needed to protect accounts and meet legal obligations.

7. Your rights

You have the right to know how your data is processed, to access it and get a copy, to have it corrected, to ask for it to be destroyed when it is no longer needed, and to withdraw consent where processing relies on it. You can change your name, mobile number and job title on your profile page; for anything else, email info@tawreedgate.com and we will reply within 30 days. You may also complain to the Saudi Data and AI Authority (SDAIA).

8. Cookies

We use essential cookies only: to keep you signed in and to protect our forms. Your browser also keeps your quote list and display preferences. We use no advertising or analytics cookies and share no browsing data with advertisers.

9. How we protect it

We use encrypted connections (HTTPS), store passwords as one-way hashes, refuse passwords shorter than 12 characters or found in known data leaks, offer two-step sign-in, and keep each company's data separate. A sign-in lasts 30 days on the same device, so sign out on shared devices. If you think your account was accessed by someone else, change your password and contact us at once.

10. Changes to this policy

We publish every change here with its date, and email account holders about material changes before they take effect.

11. Contact

To ask about your data or use your rights, email info@tawreedgate.com or call +966 50 777 5994.