Privacy Policy

Who we are

Manzilat Darb is a Saudi establishment based in Hail, Commercial Registration 7055431691. We are responsible for the data that reaches us from this site. For anything about your data: hello@manzilatdarb.com.

The "Which station is your business at?" tool

The result is calculated in your browser, and your answers are not sent to us. The one exception: if you choose to email yourself the result and submit the form, the answers are sent transiently with the request so the server can recompute the result, and are never stored.

We do not ask for an email or a name to show your result on the page.

We count completed assessments with an anonymous counter that is not linked to you and does not need your consent.

Emailing the result

We keep your email, your name if you entered it, your result (the station and each station's score), the time of your request, and the source link you came from if there was one. We use them for: sending you the tool result; the short station messages, after your consent; the monthly article, after your consent.

We delete this data two years after our last contact, or sooner if you ask.

Consent to messages

We send marketing emails only if you tick the consent box yourself; it is unticked by default.

We keep proof of consent: its time, the version of the consent text you saw, and the method (a checkbox on the tool form). Your email is kept in that proof as an HMAC hash, never in plaintext.

It covers four short messages about your station over two weeks, then a monthly article. You can unsubscribe at any time from a link in every message.

Contact form and email

Form fields: name, organisation (optional), email, mobile (optional), request type and message. We use them only to reply to you, and keep them for two years after our last contact. We reply within two working days.

WhatsApp

If you write to us on WhatsApp we see your number, your profile name and your messages, and use them to reply. The prefilled message you open from the site is sent only when you send it yourself.

The first reply on WhatsApp Business may be automated, sent by a third-party provider acting on our behalf only to receive and route your message; a member of our team then replies.

Our WhatsApp automated-reply provider is Kapso, based in the United States with an affiliated team in Chile; data may be processed outside the Kingdom.

Booking a fit call

When you book on our booking page we keep: your name, email, business name if given, role, staff-size band, what you want to improve, WhatsApp number if given, the time you chose, your time zone and the page you came from. We use them only to arrange and prepare the call, never for marketing. We create the appointment in the Manzilat Darb calendar on Microsoft 365, which sends you an invitation with a Teams link; the invitation contains only your name, email and the time. We delete booking details twelve months after the call, unfinished booking attempts after 30 days, or sooner if you ask, and we remove the appointment and its messages from our mailbox and calendar within the same period. If you become a client, your details move to the contract records and follow their periods. Processors: Replit (United States) to store the request, Microsoft 365 for the calendar and call link, and Resend for reminders once enabled. If you book on our Microsoft Bookings page instead, Microsoft holds the same details as our service provider. Email and booking data in Microsoft 365 is stored in data centres in Europe and may be processed outside the Kingdom.

Analytics

Google Analytics runs only with your consent, and the site works fully if you decline. Your earlier choice is respected until you change it from "Analytics settings" at the foot of the page.

An aggregate hosting counter and the anonymous assessment-completion counter remain, with no data that identifies you.

Retention

We keep data for two years from the last contact, except call-booking data: 12 months after the call.

Invoices and accounting records: 6 years, for tax and legal purposes.

Processors acting for us

We use providers to process data:

• Replit (United States): hosting the site and database.
• Resend (United States, where the company states on resend.com/security/gdpr.md that its primary processing takes place): sending email.
• Email and booking data in Microsoft 365 is stored in data centres in Europe and may be processed outside the Kingdom.
• Our WhatsApp automated-reply provider is Kapso, based in the United States with an affiliated team in Chile; data may be processed outside the Kingdom. Its role is limited to receiving and routing messages.

Transfers outside the Kingdom

Some of your data is transferred outside the Kingdom: to the United States through Replit, Resend and Kapso, to Microsoft 365 data centres in Europe, and it may be accessed by Kapso's team in Chile. We transfer data outside the Kingdom in accordance with the Personal Data Protection Law and its regulations.

Your rights

You may ask to see, correct or delete your data, or object to its use. We reply within 30 days; the period may be extended once if needed, and we tell you in writing. Write to hello@manzilatdarb.com.

Changes

If we change this policy we change the date at the top of the page.