Privacy policy

1. Who we are

Magmafy (“we”) is responsible for processing your personal data on this website. Company details and contact information are on the Terms & conditions page. We comply with Saudi Arabia's Personal Data Protection Law (PDPL) and its implementing regulations.

2. What we collect

When you book a meeting: name, email, mobile number, business name and city, a link you share (optional), your notes, and the meeting type, time and platform you chose.

When you browse: technical data our hosting provider logs automatically (IP address, time, page, browser type) to run and protect the website. If you accept the statistics category: usage data that doesn't identify you (pages visited, device and browser type, the source you came from, and how you interact with a page) through Google Analytics and Microsoft Clarity. We currently use no ad tools.

3. Why we use it

To arrange the meeting, send the Google Meet or Zoom link and reminders, answer your request and prepare a tailored proposal. We don't use your data for anything else without your consent, and we never sell it.

4. Legal basis

We process your data based on the consent you give when submitting the booking form, and to act on your request before any contract. You can withdraw consent at any time by contacting us; this doesn't affect processing before the withdrawal.

5. Who we share it with

Booking-form data is sent over a secure connection (HTTPS) and reaches us by email, and we use Google Meet or Zoom for the meeting, as you choose. These providers may process data outside the Kingdom; we keep this to what is necessary and apply the safeguards the PDPL requires. If you enable the statistics category, usage data is also processed by Google (Google Analytics) and Microsoft (Clarity), possibly outside the Kingdom.

6. Local storage and cookies

We store only what is necessary in your browser: your language if you change it, and your privacy choice. This data never leaves your device. Statistics and marketing categories are only enabled with your explicit consent. If you accept statistics, Google Analytics and Microsoft Clarity set cookies (such as _ga, _clck and _clsk) that last from one day up to 12 months; you can withdraw consent any time under “Privacy settings”, which stops the tools and deletes these cookies. We don't use the marketing category today.

7. How long we keep it

We keep booking data while we are in contact about your request and delete it within 12 months at most, unless you become a client or another regulation requires us to keep it longer.

8. Your rights

You have the right to be informed, to access your data and get a copy, to have it corrected, to request its destruction and to withdraw consent. Email us at the address on the Terms page and we will reply within 30 days. You may also lodge a complaint with the Saudi Data & AI Authority (SDAIA).

9. Security

The website runs over an encrypted connection (HTTPS), loads no fonts or libraries from third-party servers and enforces a strict content security policy. Access to booking data is limited to the team that needs it.

10. Changes

We may update this policy when our services or legal requirements change, and we show the date of the last update at the bottom of the page.