Legal

Privacy Policy

Last updated: 2026-05-10

This Privacy Policy describes how [PLACEHOLDER: legal entity name] ("Manbaa", "we", "us") collects, uses, and protects personal data in connection with our website and services. We comply with the Saudi Personal Data Protection Law (PDPL) and applicable UAE data protection regimes where relevant.

1. Data we collect

We collect data you provide directly (e.g., your name, email, phone, company, and message when you contact us), and limited technical data when you visit our website (IP address, browser type, pages visited).

2. How we use it

• To respond to your inquiries and deliver requested services
• To send you relevant updates if you opt in
• To improve our website and service delivery
• To meet legal and regulatory obligations

3. Sharing

We do not sell personal data. We share data only with vetted processors strictly to deliver our services (e.g., hosting, analytics) and where legally required.

4. Data residency

Customer data processed via our local-GPU offering remains on the customer's premises or a designated Saudi-hosted environment. Data processed via cloud AI services may be transmitted to vendor regions per the relevant Data Processing Agreement, which is reviewed for PDPL compliance.

5. Your rights

Under PDPL you have the right to access, correct, withdraw consent, and request erasure of your personal data. Contact us at [PLACEHOLDER: privacy email] to exercise these rights.

6. Security

We follow NCA Essential Cybersecurity Controls (ECC) and Cloud Cybersecurity Controls (CCC) for safeguarding data.

7. Contact

Data Protection Officer: [PLACEHOLDER: DPO name and email]
Office: [PLACEHOLDER: registered office address]