Last updated: May 2026. This Privacy Policy explains how wcloud.sa collects, uses, and protects your personal data in compliance with the Saudi Personal Data Protection Law (PDPL) and the NCA Essential Cybersecurity Controls (ECC-1:2018).
1. Who We Are
wcloud.sa is a certified freelance cloud deployment service operating in the Kingdom of Saudi Arabia. Contact: hello@wcloud.sa
2. Data We Collect
When you submit our intake form, we collect: full name, email address, phone number (optional), app URL, app type, database requirements, timeline preference, and additional notes. This constitutes personal data under PDPL.
3. How We Use Your Data
- To assess your deployment requirements and prepare a proposal
- To contact you within 24 hours regarding pricing and next steps
- To deliver and manage agreed deployment services
- To send service-related updates and notifications
4. Legal Basis
We process your personal data on the basis of pre-contractual necessity: you have submitted an inquiry and we need your data to assess and respond to it. We do not rely on consent as our legal basis, so you do not need to opt out separately.
5. Data Sharing
We do not sell or share your personal data with third parties for marketing purposes. We may share data with our infrastructure provider solely for service delivery purposes, under strict data protection agreements.
6. Security
We implement technical and organizational security measures including encryption of data in transit (TLS) and at rest, access controls limiting data access to authorized personnel only, and Azure cloud security controls. Our security approach is aligned with the NCA Essential Cybersecurity Controls (ECC-1:2018).
7. Data Retention
We retain your inquiry data for 12 months from the date of submission, or for the duration of any active service engagement plus 12 months. After this period, data is securely deleted.
8. Your Rights Under PDPL
You have the right to: access your personal data, correct inaccurate data, request deletion of your data, request restriction of processing, and data portability. To exercise any of these rights, email hello@wcloud.sa. We will respond within 30 days as required by PDPL.
9. Data Breach Notification
In the event of a personal data breach that poses a high risk to your rights, we will notify the Saudi Data and AI Authority (SDAIA) within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay.
10. Contact Us
For any privacy-related questions or to exercise your rights: hello@wcloud.sa. If you have a complaint, email us with the subject line "Complaint." We will acknowledge within 2 business days and resolve within 30 days.
