1. Data Controller
TawasulTech for Commercial Services Co. is the Data Controller responsible for determining the purposes and means of processing personal data collected through our website and services.
Contact Information: Email: privacy@tawasul-tech.com Phone: +966 920018051 Address: RHOC2493, Makkah Al Mukarramah Branch Road, Olaya District, Riyadh, Saudi Arabia
2. Odoo Online Cloud Platform
TawasulTech operates its website, eCommerce platform, customer relationship management (CRM), repair management, helpdesk, inventory management, and business systems using Odoo Online services provided by Odoo S.A.
Odoo S.A. acts as a Data Processor and processes personal data solely on behalf of and under the instructions of TawasulTech. TawasulTech remains responsible for determining the purposes and means of processing personal data, and takes reasonable measures to ensure that service providers maintain appropriate security and confidentiality safeguards.
3. Personal Data We Collect
Depending on your interaction with us, we may collect:
Customer Information: full name, company name, email address, mobile number, telephone number, delivery address, billing address.
Order and Transaction Information: order history, invoices, payment references, delivery information.
Device and Service Information: IMEI numbers, serial numbers, product identifiers, warranty records, repair records, diagnostic reports, service history.
Technical Information: IP address, browser type, device information, website activity logs, cookie identifiers (see our Cookie Policy for detail on how these are collected).
Communications: contact form submissions, live chat communications, helpdesk tickets, warranty claims, repair requests, customer support correspondence.
4. Purposes of Processing
We process personal data for the following purposes: processing and fulfilling orders; delivering products and services; warranty administration; repair and maintenance services; customer support; device ownership verification; trade-in and buyback services; data erasure services; fraud prevention; regulatory compliance; business administration; service improvement; and security monitoring.
5. Legal Basis for Processing
Personal data may be processed where:
- Processing is necessary to perform a contract;
- Processing is required to comply with legal obligations;
- Processing is necessary for legitimate business purposes, balanced against your rights and interests; or
- Consent has been obtained where required by applicable law.
6. Marketing Communications
Where customers provide consent, TawasulTech may send promotional offers, product announcements, service updates, and newsletters. Customers may withdraw consent at any time by using unsubscribe options or contacting us directly at privacy@tawasul-tech.com.
7. Data Sharing
We do not sell personal data. Personal data may be shared with: payment service providers; shipping and logistics companies; authorized repair providers; cloud hosting and software providers (including Odoo S.A.); professional advisors; and government authorities where legally required.
All third parties are expected to maintain appropriate security and confidentiality standards.
8. International Data Transfers
Because our systems utilize Odoo Online and other cloud-based services, certain personal data may be processed or stored outside the Kingdom of Saudi Arabia. Where international transfers occur, TawasulTech will implement reasonable safeguards and comply with applicable PDPL requirements relating to cross-border data transfers.
9. Payment Processing
Payments are processed through authorized, licensed payment service providers. TawasulTech does not store complete payment card information on its systems. Payment providers may process personal data for transaction verification, fraud prevention, and payment processing purposes.
10. Customer Communications and Support
Information submitted through contact forms, website inquiries, live chat, helpdesk systems, warranty claims, and repair requests may be stored and processed through Odoo systems and related service platforms for customer service and support purposes.
11. Data Retention
Personal data is retained only for as long as necessary to fulfill contractual obligations, provide warranty and repair services, meet legal and regulatory requirements (including commercial record-keeping obligations under Saudi law), resolve disputes, and protect legitimate business interests. When data is no longer required, it will be securely deleted, anonymized, or archived in accordance with applicable laws.
12. Data Security
We implement reasonable technical and organizational measures to protect personal data against unauthorized access, misuse, disclosure, alteration, loss, and destruction. These measures include access controls, encryption technologies, monitoring systems, and secure cloud infrastructure.
13. Your Rights
Subject to applicable Saudi laws, individuals may have the right to:
- Access personal data we hold about them;
- Request correction of inaccurate data;
- Request deletion where legally permitted;
- Withdraw consent where applicable; and
- Submit privacy-related complaints.
Requests may be submitted to privacy@tawasul-tech.com. If you believe your personal data has been processed unlawfully, you may also lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA).
14. Children's Privacy
Our services are intended for adults and business customers. We do not knowingly collect personal data from individuals under the age of 18 without appropriate parental or legal guardian authorization.
15. Changes to This Privacy Policy
TawasulTech reserves the right to update this Privacy Policy at any time. Updated versions will be published on our website and become effective upon publication.
16. Contact Us
For privacy-related inquiries:
Email: privacy@tawasul-tech.com Phone: +966 920018051 Address: RHOC2493, Makkah Al Mukarramah Branch Road, Olaya District, Riyadh, Saudi Arabia