Privacy Policy

1. Data Controller

Transcend Tech Est., based in Jeddah, Kingdom of Saudi Arabia, is the controller of the personal data described in this policy, except where section 7 describes situations in which we act as a processor. You can reach us at hello@transcend.com.sa.

2. Scope of This Policy

This policy applies to personal data processed through our website, our client services, and our products. It applies to website visitors, prospective and current clients, and users of our products. Where a specific product publishes its own privacy notice, that notice supplements this policy for that product.

3. Data We Collect

Depending on how you interact with us, we may collect:

• Contact details you submit through our forms or by email, such as your name, email address, phone number, company name, and the content of your message.
• Account data when you register for one of our products, such as your name, email address, role, and organization details.
• Usage data generated while using our products, such as store records in Matjar, schedules and attendance records in Jadwal, or bookings and event activity in Hudoor.
• Billing data where payments occur, such as invoicing details and transaction references. Card details are handled by licensed payment providers and are not stored on our servers.
• Technical data collected automatically, such as IP address, browser type, device information, approximate location derived from IP, and pages visited.
• Preferences stored in your browser, such as language selection and whether you have already seen our intro animation.
• Communication records, such as correspondence with our team and support requests.

4. Sources of Data

We collect personal data directly from you, automatically through your use of our website and products, and in some cases from your organization, for example when an employer creates an account for you in one of our products, or from service providers acting on our behalf.

5. How We Use Your Data

We use personal data to:

• Respond to your enquiries and communicate with you about projects and services.
• Provide, operate, secure, and improve our website and products.
• Set up and manage accounts, provide support, and send service notifications.
• Process invoicing and payments where applicable.
• Monitor for fraud, abuse, and security incidents.
• Understand how our website and products are used so we can improve them.
• Meet our legal and regulatory obligations in the Kingdom of Saudi Arabia.

6. Legal Basis for Processing

We process personal data on the bases permitted by the PDPL, including your consent, the performance of a contract with you or steps taken at your request before entering a contract, our legitimate interests in operating, securing, and improving our services in a manner that does not prejudice your rights, and compliance with legal obligations. Where processing is based on consent, you may withdraw it at any time.

7. Our Role in the Products

For accounts and data belonging to the businesses that use our products, our role can differ:

• In Matjar, merchants operate their own stores. For the personal data of a merchant’s customers, the merchant is the controller and Transcend processes that data on the merchant’s behalf to run the platform.
• In Jadwal, organizations manage schedules for their teams. For the personal data of an organization’s employees, the organization is the controller and Transcend acts as a processor.
• In Hudoor, event organizers manage events and attendance. For attendee data belonging to an organizer’s events, the organizer is the controller and Transcend acts as a processor.

Where we act as a processor, we process personal data according to the controller’s instructions and the applicable agreement. If you are an end user with a question about data processed in one of these contexts, we recommend contacting the business you interact with, and we will support them in responding.

8. Sharing of Data

We do not sell personal data. We may share personal data with:

• Service providers who help us operate our website and products, such as hosting, email delivery, payment processing, and analytics providers, under contracts that require appropriate safeguards.
• Professional advisers, such as auditors or legal counsel, where necessary and under confidentiality obligations.
• Competent authorities in the Kingdom of Saudi Arabia where disclosure is required by law or by a binding order.
• A successor entity in the event of a merger, acquisition, or asset sale, in which case this policy continues to apply to the transferred data.

9. Data Transfers Outside the Kingdom

Some of our service providers may process data outside the Kingdom of Saudi Arabia. Where personal data needs to be processed or stored outside the Kingdom, we do so only in accordance with the transfer requirements of the PDPL and its implementing regulations, and we apply contractual and technical safeguards appropriate to the transfer.

10. Data Retention

We keep personal data only for as long as it is needed for the purposes described in this policy or as required by law, including tax and commercial record-keeping obligations in the Kingdom of Saudi Arabia. As general guidance:

• Enquiry correspondence is kept for as long as needed to handle the enquiry and for a reasonable period afterwards.
• Product account data is kept while the account is active and deleted or anonymized within a reasonable period after account closure, subject to legal retention requirements.
• Billing records are kept for the periods required by the regulations of the Zakat, Tax and Customs Authority.

When data is no longer needed, we delete it or anonymize it.

11. Security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, including encryption in transit, access controls, and the principle of least privilege for internal access. No method of transmission or storage is completely secure, but we work to protect your data using industry practices and we review our measures regularly.

12. Data Breach Notification

If a personal data breach occurs that poses a risk to your data or rights, we will notify the competent authority and, where required, the affected individuals, in accordance with the timelines and procedures of the PDPL.

13. Your Rights

Under the PDPL, you have the right to:

• Be informed about how your personal data is processed and the legal basis for it.
• Request access to the personal data we hold about you and obtain a copy of it.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, subject to legal retention requirements.
• Withdraw your consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at hello@transcend.com.sa. We may need to verify your identity before acting on a request. We will respond within the timeframes required by the PDPL, and there is no fee for making a request unless the law permits one.

14. Marketing Communications

We only send marketing or promotional communications where permitted, and every marketing message we send includes a way to opt out. Opting out of marketing does not affect service communications such as security notices or account notifications.

15. Automated Decision-Making

We do not use your personal data to make automated decisions that produce legal effects on you or significantly affect you. Features in our products that use AI, such as scheduling assistance in Jadwal, operate on the data of the subscribing organization and remain subject to human oversight by that organization.

16. Cookies and Local Storage

Our website uses browser storage to remember preferences such as your language and whether the intro animation has been shown. We do not use invasive tracking. If we introduce additional cookies or analytics in the future, we will update this policy and, where required, ask for your consent.

17. Children

Our website, services, and products are directed at businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

18. Complaints

If you have a concern about how we handle your personal data, please contact us first at hello@transcend.com.sa and we will do our best to resolve it. You also have the right to lodge a complaint with the competent data protection authority in the Kingdom of Saudi Arabia.

19. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page with an updated date. For material changes, we will make reasonable efforts to provide notice.

20. Contact Us

For any questions about this Privacy Policy or how we handle personal data, contact us at hello@transcend.com.sa.