This policy explains what personal data we collect through the RAM CORE website, why we collect it, how we use and store it, and what rights you have over it. It is written to follow the Personal Data Protection Law of Saudi Arabia and its implementing regulations.
Last updated:
Who we are
RAM CORE is a Saudi technology company based in Riyadh that builds management systems, stores and websites and connects them together. We are the data controller for personal data collected through this website — the party that decides why and how it is processed.
How to reach us about your data
For any question or request about your personal data or this policy, contact us by email or WhatsApp as listed on our Contact page. We will receive your request and respond to it.
The data we collect
We collect only what the task you came for actually needs. It falls into two kinds:
- Data you send in the project request form: your name, mobile number, the email and company name if you enter them, your project description, the service, budget and timeline you chose, and your preferred contact method.
- Technical data produced by browsing: IP address, browser and device type, the time of the request and the page requested. These are written to server logs for operation and security.
This site uses no analytics, advertising or tracking cookies. The only thing stored in your browser is your light or dark theme preference, which stays on your device and never reaches us.
Why we collect it, and on what basis
- To answer your request and prepare a suitable proposal or consultation — based on the consent you gave when you submitted the form, and on what preparing or performing a contract requires.
- To contact you about your request or project, using the method you chose.
- To run and protect the site against misuse and automated submissions — based on a legitimate interest in the security of the service.
- To comply with applicable laws in the Kingdom where required.
We do not use your data for any purpose materially different from these without notifying you and obtaining your consent.
Transfers outside the Kingdom
The site's servers and some email services are hosted with providers whose data centres may be located outside Saudi Arabia, which means your data may be stored or processed outside the Kingdom. Where that is the case, we follow the conditions for transferring personal data outside the Kingdom set out in the Personal Data Protection Law and its regulations, and take the measures needed to protect the data in transit and at rest.
Retention and destruction
- Project request data: kept while your request is being handled and for no more than twenty-four months from our last contact, unless a contract between us or a legal requirement calls for longer.
- Technical server logs: kept briefly for operation and security, then deleted.
Once the purpose of collection has been fulfilled, we destroy the data without delay, except where retention is legally required.
How we protect your data
Site traffic is carried over an encrypted connection, access to requests is limited to the people on our team who need it to answer you, and we apply organisational and technical measures to protect data against unauthorised access, alteration or disclosure. No method of electronic transmission or storage is, however, absolutely secure.
Your rights over your data
The Personal Data Protection Law gives you the following rights:
- The right to be informed: to know the legal basis and purpose for collecting your data — which is what this policy sets out.
- The right to access the personal data we hold about you.
- The right to obtain a copy of your data in a clear, readable format.
- The right to have your data corrected, updated or completed.
- The right to have your data destroyed when it is no longer needed for the purpose it was collected for.
- The right to withdraw your consent to processing at any time, without affecting processing carried out before the withdrawal.
To exercise any of these rights, write to us using the contact channels above. We may ask you to verify your identity before acting on a request, to protect your own data.
Children's privacy
Our services are aimed at businesses and organisations, and we do not intend to collect data from anyone under eighteen. If we learn that we have collected a minor's data without their guardian's consent, we destroy it.
Complaints
If you believe our processing of your data breaches the law, contact us first so we can address it. You also have the right to complain to the Saudi Data & AI Authority (SDAIA), the authority responsible for supervising the Personal Data Protection Law.
Updates to this policy
We may update this policy whenever our services or the applicable regulations change. The date of the last update appears at the top of this page, and the updated version is published here.