This policy explains how Crustim (“we”, “us”) collects, uses and protects personal data when you visit our website, contact us or use our services. We process personal data in line with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.
01Who we are
Crustim is a business automation, AI, software and digital growth agency based in Riyadh, Saudi Arabia. We are the controller of personal data collected through this website.
02Data we collect
We collect only what we need:
- Contact details you submit: name, company, email, phone number and your message.
- Service details: the service you are interested in and information you share during an audit or project.
- Technical data: IP address, browser type, device, pages visited and referral source, collected through cookies and analytics tools.
- Communication records: emails, WhatsApp messages and call notes related to your enquiry.
03How we use your data
We use personal data to:
- Respond to enquiries and deliver the free audit you request.
- Provide, manage and improve our services.
- Send service updates and, with your consent, marketing communications.
- Analyse website performance and improve user experience.
- Meet legal, accounting and regulatory obligations.
04Legal basis
We process data based on your consent, the performance of a contract or pre-contract steps you request, our legitimate business interests, and compliance with legal obligations.
05Sharing your data
We do not sell personal data. We share it only with trusted service providers who help us operate, such as hosting, CRM, email, analytics and project management platforms, under confidentiality and data protection obligations, or when required by law or a competent authority.
06International transfers
Some of our providers may store data outside the Kingdom of Saudi Arabia. Where this happens, we transfer data only as permitted by the PDPL and apply appropriate safeguards.
07Cookies
We use essential cookies to run the website and analytics cookies to understand how it is used. You can control or delete cookies through your browser settings. Disabling some cookies may affect site functionality.
08Data retention
We keep personal data only as long as needed for the purposes above, or as required by law. Enquiry data with no ongoing relationship is deleted or anonymised within 24 months.
09Security
We apply technical and organisational measures, including access controls, encryption in transit and secure providers, to protect personal data against unauthorised access, loss or misuse.
10Your rights
Under the PDPL you have the right to:
- Be informed about how your data is processed.
- Access and obtain a copy of your personal data.
- Request correction of inaccurate or incomplete data.
- Request deletion of data that is no longer needed.
- Withdraw consent at any time, without affecting prior processing.
To exercise any of these rights, email info@crustim.com. We respond within 30 days.
11Changes to this policy
We may update this policy from time to time. The latest version is always published on this page with its update date.