Privacy policy

This website is operated by Flowya, a technology services company based in Saudi Arabia (“Flowya”, “we”, “us”). We are the controller of the personal data described in this policy.

This policy explains what personal data we handle when you use this website, contact us or work with us, and what your rights are.

This website does not use cookies, analytics or advertising trackers.

The contact form only prepares an email in your own email app. We receive your information only if you choose to send that email.

The assistant on this website gives prepared answers. It does not record or send your conversation.

Your choice of dark or light mode is saved in your own browser only. It is never sent to us.

Our hosting provider may keep standard server logs, such as IP address, browser type and pages requested, for security and reliability.

When you email, call or message us, we receive what you choose to share: your name, company, contact details and a description of what you need.

If you become a client, we also keep the information needed to deliver the work and manage the relationship, such as project documents, agreements and invoices.

We use personal data only to reply to you, arrange calls and pilots, prepare quotes, deliver the services you ask for, issue invoices and meet our legal obligations.

We rely on your consent when you contact us, on our agreement with you when you are a client, and on legal requirements where they apply.

We do not sell personal data, and we do not use it for third-party marketing.

We share personal data only with service providers who help us operate, such as email, hosting and accounting providers, and only as far as they need it to provide their service.

We may disclose information where the law or a competent authority requires it.

Some of our team members and service providers are located outside Saudi Arabia. Where personal data is transferred abroad, we do so in line with the Personal Data Protection Law and its regulations, and we limit the transfer to what is necessary.

Access to personal data is limited to the people who need it for their work. We use reasonable technical and organisational measures to protect it against loss, misuse and unauthorised access.

No method of sending or storing data is completely secure. If a breach affects your personal data, we will notify you and the competent authority as the law requires.

We keep enquiry correspondence for as long as needed to respond and follow up, and client records for as long as our agreements and the law require. After that, we delete the data or make it anonymous.

Under Saudi Arabia's Personal Data Protection Law, you can ask to know how your personal data is used, to access it, to correct it, to delete it when it is no longer needed, and to withdraw your consent.

To make a request, write to us at contact@flow-ya.com. We reply within the period set by the law.

If you are not satisfied with our reply, you can submit a complaint to the Saudi Data & AI Authority (SDAIA).

This website is intended for businesses. We do not knowingly collect personal data from children.

This website may link to other websites. We are not responsible for their content or their privacy practices.

We may update this policy. The date at the top of the page shows when it last changed.

For any question about this policy or your personal data, write to us at contact@flow-ya.com.