Privacy Policy

1.1. CLOUD (a brand owned by Cloud Payment Communications & Information Technology Co., commercial registration no. 7037551590) is committed to protecting client privacy.

1.2. This policy explains how we collect, use, and protect your personal data.

1.3. By using our services, you agree to this policy.

1.4. This policy complies with the Personal Data Protection Law of the Kingdom of Saudi Arabia.

Registration Data: Full name, company or organization name, email address, phone number, address (for billing), commercial registration or ID number (for enterprise contracts).

Payment Data: Card details are processed directly by the payment gateway (Noon Payments). CLOUD does not store card numbers. Invoice and payment history.

Usage Data: Login history (time, IP), Control Panel activity log, resource usage (CPU, RAM, storage, bandwidth).

Support Data: Support ticket content, conversation history.

Website Data (visitors): IP address, browser type and operating system, pages visited and visit duration, referral source.

Providing services and managing your account Legal basis: Contract performance.

Processing payments and issuing invoices Legal basis: Contract performance.

Sending service notifications (renewal, maintenance, outages) Legal basis: Contract performance.

Technical support Legal basis: Contract performance.

Improving services and performance Legal basis: Legitimate interest.

Analyzing website usage Legal basis: Legitimate interest.

Complying with Saudi regulations Legal basis: Legal obligation.

Sending marketing updates (with consent) Legal basis: Client consent.

4.1. We do not sell your data. We do not share it with third parties for marketing purposes.

4.2. We share data only with: Payment gateway (Noon Payments) for payment processing, SMS provider for notifications, WhatsLoop for WhatsApp notifications, competent government authorities per court order or official request.

4.3. All service providers are bound by data protection agreements.

5.1. All client data is stored in data centers within the Kingdom of Saudi Arabia.

5.2. Data is not transferred outside Saudi Arabia without written client consent.

5.3. We retain data for the subscription period + 90 days after cancellation.

5.4. Invoices and financial records are retained for 7 years (tax obligation).

6.1. Data encrypted in transit (TLS 1.3).

6.2. Data encrypted at rest for sensitive systems.

6.3. 24/7 continuous infrastructure monitoring.

6.4. Role-based access controls.

6.5. Regular security audits.

6.6. In the event of a breach affecting client data, affected parties are notified within 72 hours.

7.1. Access: Request a copy of your personal data.

7.2. Correction: Update inaccurate data.

7.3. Deletion: Request deletion of your data (subject to legal obligations).

7.4. Objection: Object to processing your data for marketing purposes.

7.5. Withdraw consent: Withdraw consent for marketing communications at any time.

7.6. To exercise any of these rights: send a request to privacy@cloud.net.sa. We respond within 30 days.

Essential Cookies: Login and session management, language preferences cannot be disabled.

Analytics Cookies: Website usage analysis activated after visitor consent, can be disabled in browser settings.

We do not use advertising cookies or cross-site tracking.

9.1. Some services use third-party tools (such as website analytics).

9.2. Each tool is subject to its own privacy policy.

9.3. We only select tools that meet acceptable data protection standards.

10.1. CLOUD services are not directed at individuals under 18.

10.2. We do not knowingly collect children's data. If discovered, we delete it immediately.

11.1. CLOUD reserves the right to amend this policy.

11.2. Material changes are communicated 30 days in advance.

11.3. The updated version is always published at cloud.net.sa/en/legal/privacy.

Email: privacy@cloud.net.sa

Phone: 0570116626