Legal
Privacy Policy
This page is a plain-language summary for convenience. The complete, legally binding version is published in the Mirsam legal center, which prevails in case of any difference.
What we collect
- Contact and billing details: your name, email, and phone.
- Your service details: the domain and hosting for your site.
- Records of invoices, payments, and support requests.
- Technical and usage data: sign-in activity, IP address, and portal logs used to run and secure the service.
- We never collect or store full card numbers: payments are processed directly by a licensed payment provider; we keep only a masked reference and the payment result.
Why we use it
To provide and operate your service, issue invoices and process renewals, provide support, comply with tax (ZATCA) and legal obligations, protect against fraud, secure the service, and send you service messages such as renewal reminders and receipts.
Sharing & retention
We share data only with the providers needed to run the service (the payment provider, hosting and domain providers, and email delivery), and with authorities where legally required. We do not sell your data. Some of our providers may process data outside Saudi Arabia; where that happens, we apply safeguards consistent with the PDPL. We keep data while your account is active and as long as required afterward for tax, accounting, and legal purposes.
Your rights
Under Saudi Arabia’s Personal Data Protection Law (PDPL), you may request access to and a copy of your personal data, request correction or deletion, and withdraw consent where processing relies on it. You may also lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA). For privacy matters: contact@mirsam.net