Privacy Policy
How Madarly handles personal data in line with Saudi data protection principles.
Last updated: 8 April 2026
Madarly is committed to protecting your privacy. This policy explains how we collect, use, and disclose personal data when you visit our website or interact with us online, in line with common practice for Saudi digital services and the principles of Saudi Arabia’s Personal Data Protection Law (Royal Decree No. M/19, as amended) and related implementing regulations.
1. Who we are (controller)
For this website, the controller of your data is Madarly, a software studio providing web and mobile development services. For privacy enquiries: contact@madarly.com
2. Data we may collect
Identity and contact: name, email, phone (if provided), and information you submit in “start your project” or contact forms.
Technical data: approximate IP address, browser and device type, pages viewed, timestamps, and session identifiers where needed to run the site.
Message content: project description, budget, timeline, and anything else you choose to share.
3. Sources
Directly from you when you fill in forms or email us.
Automatically when you browse (server logs and technical data required for operations and security).
4. Purposes and legal bases
Respond to enquiries and project requests, provide quotes, and schedule calls.
Manage our relationship with you, including proportionate follow-up consistent with reasonable market expectations (and opt-out for marketing where applicable).
Improve site performance, user experience, and security (fraud prevention, abuse protection, backups).
Comply with legal obligations where required.
We typically rely on: steps prior to a contract (service request), consent where required, legitimate interests in running our business without overriding your rights, or legal obligation.
5. Sharing with third parties
Infrastructure, hosting, email, or CRM/scheduling providers — under agreements or terms that impose confidentiality and security duties.
Authorities when required by lawful order or applicable law.
We do not sell your personal data to third parties for their own marketing.
6. International transfers
If providers store data outside the Kingdom, we aim to use vendors that offer appropriate safeguards (e.g. contractual clauses or approved mechanisms) consistent with PDPL requirements as they apply to your situation.
7. Retention
We keep data only as long as needed for the purposes above and for any period required by law. Data may be deleted or anonymised when no longer needed, per our internal retention rules.
8. Security
We apply reasonable technical and organisational measures (encryption in transit where appropriate, access controls, security updates). No system is perfectly secure; we will notify you where the law requires if a serious breach affects your rights.
9. Your rights
Under the PDPL, depending on the case you may have rights to access, correct, delete, or restrict processing, object to certain processing, withdraw consent where processing is consent-based, and lodge a complaint with the competent authority in the Kingdom (e.g. SDAIA through official channels).
To exercise rights, email contact@madarly.com with your request. We may verify your identity before proceeding.
10. Cookies and similar technologies
We may use essential cookies for site operation (e.g. language preference or session) and, if enabled later, lightweight analytics. Non-essential cookies will be explained via a consent banner when added, consistent with common Saudi website practice.
11. External links
Our site may link to third parties; their policies differ from ours. Please read their privacy notices.
12. Children
Our services are aimed at businesses and adults. We do not knowingly collect data from children. If you believe a child has provided data, contact us to delete it.
13. Changes
We may update this policy for operational or legal reasons. The “Last updated” date will change. Continued use after updates means you accept the revised version where the law allows; material changes may be communicated additionally.
