Privacy Policy

For this website, the controller of your data is Madarly, a software studio providing web and mobile development services. For privacy enquiries: contact@madarly.com

Identity and contact: name, email, phone (if provided), and information you submit in “start your project” or contact forms.

Technical data: approximate IP address, browser and device type, pages viewed, timestamps, and session identifiers where needed to run the site.

Message content: project description, budget, timeline, and anything else you choose to share.

Directly from you when you fill in forms or email us.

Automatically when you browse (server logs and technical data required for operations and security).

Respond to enquiries and project requests, provide quotes, and schedule calls.

Manage our relationship with you, including proportionate follow-up consistent with reasonable market expectations (and opt-out for marketing where applicable).

Improve site performance, user experience, and security (fraud prevention, abuse protection, backups).

Comply with legal obligations where required.

We typically rely on: steps prior to a contract (service request), consent where required, legitimate interests in running our business without overriding your rights, or legal obligation.

Infrastructure, hosting, email, or CRM/scheduling providers — under agreements or terms that impose confidentiality and security duties.

Authorities when required by lawful order or applicable law.

We do not sell your personal data to third parties for their own marketing.

If providers store data outside the Kingdom, we aim to use vendors that offer appropriate safeguards (e.g. contractual clauses or approved mechanisms) consistent with PDPL requirements as they apply to your situation.

We keep data only as long as needed for the purposes above and for any period required by law. Data may be deleted or anonymised when no longer needed, per our internal retention rules.

We apply reasonable technical and organisational measures (encryption in transit where appropriate, access controls, security updates). No system is perfectly secure; we will notify you where the law requires if a serious breach affects your rights.

Under the PDPL, depending on the case you may have rights to access, correct, delete, or restrict processing, object to certain processing, withdraw consent where processing is consent-based, and lodge a complaint with the competent authority in the Kingdom (e.g. SDAIA through official channels).

To exercise rights, email contact@madarly.com with your request. We may verify your identity before proceeding.

We may use essential cookies for site operation (e.g. language preference or session) and, if enabled later, lightweight analytics. Non-essential cookies will be explained via a consent banner when added, consistent with common Saudi website practice.

Our site may link to third parties; their policies differ from ours. Please read their privacy notices.

Our services are aimed at businesses and adults. We do not knowingly collect data from children. If you believe a child has provided data, contact us to delete it.

We may update this policy for operational or legal reasons. The “Last updated” date will change. Continued use after updates means you accept the revised version where the law allows; material changes may be communicated additionally.