Last updated: 23 February 2026
1) Identity of the Data Controller
This policy explains how personal data is collected, processed, and protected on the website Cloudx (Cloudx) on the domain cloudx.sa. We are an information technology company headquartered in the Kingdom of Saudi Arabia - Riyadh - Al Munsiyah District.
For privacy and data protection inquiries: privacy@cloudx.sa.
2) Scope of Application
This policy applies to data collected through the website, contact forms, email, business-linked WhatsApp, and any digital interaction related to our services.
3) Data We Collect
- Identification and contact data: Name, email address, mobile number, and organization name.
- Service request data: Type of requested service, project scope, related messages, and attachments.
- Technical data: IP address, browser type, device, viewed pages, and visit time.
- Usage and analytics data: Performance and interaction measurement data through Google Analytics.
4) Data Sources
- Directly from the data subject (through forms or direct communication).
- Automatically while using the website (cookies and usage logs).
- From a third party when there is authorization or a contractual relationship related to the service request.
5) Purposes of Processing
- Responding to inquiries and providing quotations and technical proposals.
- Executing contracts and projects, and providing technical support and post-delivery service.
- Improving performance, user experience, and the quality of content and services.
- Complying with legal requirements and protecting legal rights.
6) Legal Basis for Processing
Data is processed based on one or more of the following legal bases: the data subject's consent, performance of a contract or service request, a legitimate interest that does not conflict with the data subject's rights, or a legal obligation under the applicable regulations in the Kingdom of Saudi Arabia.
7) Cookies and Analytics
We use cookies to improve the user experience and measure performance. We also use Google Analytics to understand website usage and improve services. For more details, see Cookie Policy.
You can manage cookies from your browser settings, and disabling some of them may affect certain website functions.
8) Disclosure of Data to Third Parties
We do not sell personal data. Limited data may be shared, when needed, with technical service providers (such as hosting, security, and analytics) or with competent authorities when there is a legal obligation or court order.
9) Transfer of Data Outside the Kingdom
Processing or technical hosting may be carried out by providers outside the Kingdom when operationally necessary, with appropriate contractual, organizational, and technical safeguards applied to protect data in compliance with legal requirements.
10) Data Retention Period
We retain personal data for the period necessary to fulfill the purpose for which it was collected, or for the period required legally or contractually, after which it is securely deleted, destroyed, or anonymized.
11) Data Subject Rights
Under applicable regulations, the data subject has the right, as applicable, to request knowledge of processing, request access, request correction or update, request destruction when there is no longer a legal need, and withdraw consent in cases based on consent.
To submit rights-related requests: legal@cloudx.sa.
12) Data Security and Incident Notification
We apply appropriate organizational and technical security measures to protect data from unauthorized access, loss, or unlawful disclosure, and we review controls periodically. In the event of a significant security incident, it is handled in accordance with legal procedures.
13) Payments
Currently, electronic payments are not collected through the website. Any payments are made via bank transfer in accordance with an approved contract or invoice.
14) Policy Updates
This policy may be updated when services or legal requirements change. The version published on this page is the approved version.
15) Governing Law and Jurisdiction
This policy is subject to the laws of the Kingdom of Saudi Arabia, and in case of dispute, jurisdiction shall be with the courts of Riyadh.