Privacy Policy & Data Protection Standards

1. Introduction & Scope

SIMZKNR ("we", "us", "our") is dedicated to safeguarding the confidentiality, integrity, and security of personal and corporate data entrusted to us. This Privacy Policy governs all services provided by SIMZKNR, including our custom Web Development, Mobile App Development, Managed Web Hosting, and our flagship SaaS platform, BarakaSales (accessible via simzknr.com and associated portals).

This policy is formulated in accordance with the Saudi Personal Data Protection Law (PDPL) issued pursuant to Royal Decree No. (M/19) dated 09/02/1443H (as amended), relevant National Data Management Authority (NDMO) standards, and applicable global data privacy regulations (such as GDPR).

2. Data We Collect

We may collect and process the following categories of information:

• Contact & Identification Data: Full name, corporate email address (info@simzknr.com), phone and WhatsApp number (+966 53 842 5069), company name, job title, and regional jurisdiction.
• Service & Project Specifications: Architectural requirements, budget scopes, hosting preferences, and custom ERP workflow requests submitted via consultation and contact forms.
• BarakaSales SaaS Enterprise Data: Customer lists, sales orders, inventory cataloging, supplier purchase orders, financial ledgers, and billing records stored by our enterprise clients within their isolated BarakaSales tenant instance.
• ZATCA E-Invoicing Metadata: Cryptographic compliance stamps, invoice hash chains, CSID identifiers, and XML e-invoice records transmitted in accordance with Saudi Zakat, Tax and Customs Authority requirements.
• Technical & Log Data: IP addresses, browser types, server access timestamps, SSL/TLS handshake metadata, and diagnostic telemetry required for cybersecurity and system uptime maintenance.

3. Purpose and Legal Basis of Processing

We process data strictly under lawful bases specified by the Saudi PDPL and contractual necessities:

• Contractual Performance: To provision web hosting environments, develop custom mobile and web applications, and operate the BarakaSales SaaS ERP platform.
• Regulatory Compliance: To generate legally compliant ZATCA Phase 2 cryptographic e-invoices, VAT records, and maintain statutory audit trails required under Kingdom of Saudi Arabia law.
• Security & Abuse Prevention: To monitor system uptime, mitigate Distributed Denial-of-Service (DDoS) attacks, detect malicious intrusion attempts, and enforce role-based access controls (RBAC).
• Customer Support & Communications: To respond to technical consultation requests, provide 24/7 SLA escalation, and deliver critical system maintenance notifications.

4. BarakaSales SaaS Multi-Tenant Isolation & Security

BarakaSales is engineered using strict tenant isolation architecture. Every client's operational data—including CRM contacts, warehouse inventory, general ledger, and invoices—is logically segregated via Row-Level Security (RLS) and isolated encryption keys.

All data at rest is encrypted using AES-256 industry-standard encryption, and all data in transit across our networks is secured using modern TLS 1.3 / HTTPS cryptographic protocols. SIMZKNR does not monetize, sell, or analyze your proprietary commercial data for advertising purposes.

5. Cloud Hosting, cPanel & Infrastructure Security

For clients utilizing our Managed Web Hosting and Cloud services, servers are hosted in high-tier, certified data centers supporting GCC and KSA data residency requirements. Our hosting environment features:

• Hardened cPanel and WHM management controls with Multi-Factor Authentication (MFA).
• Real-time Web Application Firewalls (WAF) and automated malware scanners.
• Automated, encrypted daily off-site backups with Disaster Recovery (DR) protocols.

6. Third-Party Disclosures & Sub-Processors

We do not share personal data with external parties except where strictly necessary to provide our services or comply with mandatory legal directives:

• Regulatory Authorities: Direct transmission of e-invoicing data to ZATCA (Saudi Tax and Customs Authority) when authorized by our SaaS clients.
• Payment Gateways: Integration with certified regional payment processors (Moyasar, Mada, HyperPay) for secure financial settlement.
• Infrastructure Providers: Tier-1 cloud infrastructure and data center partners operating under binding Data Processing Agreements (DPAs).

7. Data Retention & Disposal

We retain personal and corporate information only as long as necessary to fulfill the operational purposes for which it was collected, or to satisfy legal, accounting, and ZATCA compliance requirements (which may require retaining fiscal records for a minimum of 5 to 10 years as mandated by Saudi commercial law). Upon contract termination or verified deletion request, client data is sanitized using certified cryptographic erasure protocols.

8. Your Rights Under Saudi PDPL

Under the Saudi Personal Data Protection Law, you possess explicit rights regarding your personal information:

• Right to be Informed: You have the right to understand the legal basis and purposes of our data collection.
• Right of Access: You may request a copy of your personal data maintained in our systems.
• Right to Rectification: You may request correction or completion of inaccurate or outdated information.
• Right to Erasure / Destruction: You may request destruction of personal data that is no longer necessary for the stated purpose.
• Right to Withdraw Consent: You may withdraw consent for marketing or non-essential communications at any time.

To exercise any of these rights, please submit a formal written request to our Data Protection Officer at info@simzknr.com.

9. Cookies & Tracking Technologies

Our website uses strictly necessary technical cookies to maintain user session security, CSRF protection, and load balancer routing. We do not employ third-party behavioral advertising trackers.

10. Contact & Grievance Redressal

For questions, legal notices, or inquiries regarding this Privacy Policy or our security protocols, please reach out directly: