Privacy policy

What we collect

We collect only what you write. In the session request form: your name, mobile number, email address, store or company name, sector, the service you need, and a description of your challenge, saved together with the page it was sent from and its language. When you order from the store: the business name, the commercial registration or unified national number if any, the representative’s name and title, mobile number, email, the services ordered with their prices, and your answers to the kickoff questionnaire. We do not ask for sensitive data.

Newsletter

If you subscribe to the newsletter at the bottom of the site, we store your email address and the language of the page you subscribed from, and we send the newsletter through our email provider, Brevo. You can unsubscribe at any time from the link at the bottom of every email, or by writing to us, and we will remove your address from the list.

Signing the contract

When you accept the contract electronically, we keep the signer’s name, the time of acceptance, the browser type, and a fingerprint of the contract text you accepted, to prove agreement to that exact, unaltered text.

Payment

Payment takes place on the Moyasar payment gateway page, by mada, Visa, Mastercard or Apple Pay. Card details are entered directly on Moyasar’s page, so they never reach us and we do not store them; Moyasar sends us only the payment status, amount and reference.

Why we collect it

To contact you, prepare the diagnostic session, deliver the services you ordered, issue the contract, invoices and renewal reminders, and send notifications about your order. We do not sell your data or use it to market anyone else.

Where it is stored and who processes it

Data is stored in the website database on Cloudflare servers, and a notification of each request reaches the company’s official email. We send email through Brevo and take payments through Moyasar; if you message us on WhatsApp, the conversation passes through WhatsApp and is subject to its policy. Access to the data is limited to the Thibrh Online team.

How long we keep it

We keep session requests as long as the relationship or the need for them continues. Contracts, invoices and payment records are kept for the period required by the regulations of Saudi Arabia. Anything not legally required is deleted on request within working days.

Cookies and measurement

The site loads no tracking, advertising or measurement tools from third parties. The only cookie is the technical cart cookie, which remembers the services you added to your order and is cleared when the order is completed or after 30 days. To prevent repeated submissions, we temporarily use an irreversible encrypted fingerprint of your connection address, and we never store the address itself.

Website previews for businesses

We prepare website previews for some businesses from their publicly available business information, and send the preview link to their business number. Anyone who asks us to stop is added to a do-not-contact list and receives nothing further from us.

Your rights

Under the Saudi Personal Data Protection Law, you may ask to access your data, receive a copy, correct it, delete what is not legally required to be kept, or withdraw your consent. Write to us using the contact details below and we respond within working days.

Changes to this policy

If the policy changes, the last-updated date at the top of the page changes with it, and the new text does not apply retroactively to what was collected before.

Email: info@thibrh.online · Mobile: +966 55 957 9617 · WhatsApp: +966 55 957 9617