Privacy Policy

Data Controller

NEXORA FUTURISTIC TECHNOLOGY Company
Commercial Registration (CR): 7004221219
VAT Registration Number: 314993603500003
Address: Building 5610, Al-Kharj 16259 (Additional 7218), Riyadh Province, Kingdom of Saudi Arabia
Phone: +966 59 100 0306
Email: info@nexorafuturistic.com

NEXORA FUTURISTIC TECHNOLOGY Company is the data controller responsible for your personal data collected through this website and during the provision of our services.

1. Personal Data We Collect

We collect the following categories of personal data when you interact with our website or engage our services:

• Identification Data: Full name, job title, company or organization name.
• Contact Data: Email address, phone number, and any additional contact details you voluntarily provide through our enquiry form.
• Project Data: Information about your engineering requirements, technical challenges, workflow descriptions, and project specifications you share with us during enquiries or engagement.
• Technical Data: IP address, browser type, device information, and pages visited on our website, collected through standard server logs and analytics tools if enabled.
• Communication Records: Records of correspondence via email, phone, or our contact form, retained for quality and follow-up purposes.

2. Purpose and Legal Basis of Processing

We process your personal data for the following purposes, based on the legal bases set out in the PDPL:

• Responding to Enquiries (Consent): To respond to your project enquiries, assess feasibility, and communicate about potential engagement — based on your consent when you submit our contact form.
• Service Delivery (Contract Performance): To deliver contracted engineering automation, AI, digital twin, and industrial automation services — based on the performance of a contract between you and NEXORA.
• Legal Compliance (Legal Obligation): To comply with Saudi legal and regulatory obligations, including VAT record-keeping, commercial registration requirements, and ZATCA filings.
• Service Improvement (Legitimate Interest): To improve our website, services, and customer experience through analytics and feedback — based on our legitimate business interests.

3. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described above:

• Enquiry Data: Retained for up to 24 months after the last interaction, after which it is deleted or anonymized.
• Contract/Project Data: Retained for the duration of the contract plus 7 years to meet Saudi tax and regulatory record-keeping requirements (per ZATCA VAT regulations).
• Technical/Log Data: Retained for up to 90 days, then automatically deleted.

You may request earlier deletion of your personal data, subject to legal retention obligations.

4. Data Sharing and Disclosure

NEXORA does not sell your personal data to any third party. We may share your data only in the following circumstances:

• Service Providers: With trusted third-party service providers (e.g., cloud hosting, email delivery, analytics) who process data on our behalf under contractual data protection obligations. All providers are bound by confidentiality and may not use your data for their own purposes.
• Legal Authorities: With Saudi government authorities (e.g., ZATCA, SDAIA, Ministry of Commerce) when required by law, regulation, or court order.
• Business Transfers: In the event of a merger, acquisition, or asset sale, personal data may be transferred subject to the protections of this Privacy Policy.

5. Cross-Border Data Transfer

NEXORA is headquartered in Al-Kharj, Riyadh Province, Saudi Arabia. Some service providers (e.g., cloud infrastructure, analytics) may process data outside the Kingdom of Saudi Arabia. Where cross-border transfer occurs, NEXORA ensures that:

• The recipient country provides an adequate level of data protection, or
• Appropriate contractual safeguards (e.g., Standard Contractual Clauses) are in place, and
• The transfer complies with PDPL Article 17 on Cross-Border Transfer of Personal Data.

6. Data Security

NEXORA implements appropriate technical and organizational measures to protect your personal data, including:

• Encrypted data transmission (TLS 1.2+ / HTTPS) across all web interfaces.
• Access controls limiting personal data access to authorized personnel only.
• Regular security assessments and vulnerability monitoring.
• Incident response procedures aligned with Saudi Anti-Cyber Crime Law requirements.

In the event of a personal data breach, NEXORA will notify affected individuals and the competent authority (SDAIA) in accordance with PDPL requirements and within the prescribed timelines.

7. Cookies and Analytics

This website uses minimal cookies necessary for functionality. If analytics tools (e.g., GA4) are enabled:

• Analytics data is collected in an aggregated and anonymized form.
• IP addresses are truncated or anonymized where possible.
• You may disable cookies through your browser settings; core website functionality remains available.

8. Your Rights Under the PDPL

As a data subject under the Saudi PDPL, you have the following rights regarding your personal data held by NEXORA:

• Right of Access: Request a copy of your personal data held by NEXORA.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to Data Portability: Request your personal data in a structured, machine-readable format for transfer to another controller.
• Right to Object: Object to the processing of your personal data for legitimate interest purposes.
• Right to Withdraw Consent: Withdraw your consent to data processing at any time, where processing is based on consent.
• Right to Lodge a Complaint: Lodge a complaint with the Saudi Data & AI Authority (SDAIA) if you believe your data protection rights have been violated.

To exercise any of these rights, contact NEXORA at info@nexorafuturistic.com or +966 59 100 0306. We will respond to your request within 30 days, as required by the PDPL.

9. Children's Data

This website and NEXORA's services are intended for business and professional audiences. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided personal data, please contact us so we can promptly delete it.

10. Updates to This Privacy Policy

NEXORA may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The effective date below indicates when this policy was last revised. We will notify you of material changes by posting the updated policy on this page.

11. Contact

For any privacy-related enquiries, data subject rights requests, or complaints, please contact:

NEXORA FUTURISTIC TECHNOLOGY Company
CR: 7004221219 · VAT: 314993603500003
Building 5610, Al-Kharj 16259 (Additional 7218), Riyadh Province, Kingdom of Saudi Arabia
Phone: +966 59 100 0306
Email: info@nexorafuturistic.com

Complaints regarding data protection may also be filed with the Saudi Data & AI Authority (SDAIA) through their official channels.