Privacy · Trust
Privacy policy for every region we serve.
How we collect, use and protect personal data for KSA, India and global customers.
At Mishal Technologies, we respect your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, and safeguard your data when you interact with our services, website, or products. We operate in accordance with applicable regulations in the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL) and ZATCA compliance requirements.
Information We Collect
- Personal details (e.g., name, email, phone number) submitted through contact forms or service inquiries
- Business-related data required for ERP configuration, deployment, and support
- Device metadata including IP address, browser type, and operating system for technical diagnostics and service optimization
- Voluntary submissions such as feedback, testimonials, or survey responses
Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- User consent
- Contractual necessity for service delivery
- Legitimate interest in improving and securing our services
- Compliance with legal obligations under Saudi law
How We Use Your Information
- To respond to inquiries, fulfill service requests, and deliver tailored solutions
- To enhance our website, services, and overall user experience
- To meet regulatory obligations, including integration with ZATCA-compliant systems
- To communicate service updates, offers, or important operational announcements
Data Protection & Retention
- All sensitive data is securely stored and protected against unauthorized access
- Access to personal information is limited to authorized personnel under strict confidentiality protocols
- We implement industry-standard encryption, backup, and data hygiene practices
- For our SaaS platform, client data is retained according to the active subscription plan. In case of non-renewal, archived data is preserved for five (5) years, allowing clients to reactivate their subscription during this period. After five years, data may be permanently deleted unless otherwise requested.
- Clients may request deletion of their data by contacting our grievance team at css@mishalco.com. Data removal will proceed upon written acknowledgment that the client accepts full responsibility for any consequences resulting from deletion.
- Analytics tools are used exclusively on our public website to improve usability and performance. No analytics or tracking tools are applied within our SaaS application environment.
User Rights
Under Saudi PDPL, users have the right to:
- Access their personal data
- Request correction or updating of inaccurate data
- Request deletion of their data
- Withdraw consent for data processing
- Lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA)
Cross-Border Data Transfers
Where data is transferred or stored outside the Kingdom of Saudi Arabia, we ensure compliance with PDPL and apply appropriate safeguards to protect your information.
Sharing Information
We do not sell or lease your personal information. Data may be shared only with trusted third-party providers under binding confidentiality agreements and solely for service delivery or legal compliance.
Data Breach Notification
In the event of a data breach, we will notify affected users and relevant authorities in accordance with PDPL requirements and our internal incident response protocols.
Policy Updates
This Privacy Policy may be updated periodically. Changes will be reflected on this page, and significant updates may be communicated via email or site notifications.
Contact Us
If you have questions or concerns regarding our privacy practices, please contact us at css@mishalco.com.
At Mishal Technologies, we value your privacy and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data when you interact with our services, website, or products. We comply with applicable Indian laws, including the Information Technology Act, 2000 and the SPDI Rules.
Information We Collect
- Personal details (e.g., name, email, phone number) submitted via contact forms or service inquiries
- Business-related data required for ERP configuration, deployment, and support
- Device metadata including IP address, browser type, and operating system for diagnostics and service optimization
- Voluntary submissions such as feedback, testimonials, or survey responses
Legal Basis for Processing
We collect and process personal data based on:
- User consent
- Contractual necessity for service delivery
- Legitimate interest in improving and securing our services
- Compliance with applicable legal obligations
How We Use Your Information
- To respond to inquiries, fulfill service requests, and deliver tailored solutions
- To enhance our website, services, and overall user experience
- To meet regulatory obligations, including GST and e-invoicing integrations
- To communicate service updates, offers, or important operational announcements
Data Protection & Retention
- All sensitive data is securely stored and protected against unauthorized access
- Access to personal information is limited to authorized personnel under strict confidentiality protocols
- We implement industry-standard encryption, backup, and data hygiene practices
- For our SaaS platform, client data is retained according to the active subscription plan. In case of non-renewal, archived data is preserved for five (5) years, allowing clients to reactivate their subscription during this period. After five years, data may be permanently deleted unless otherwise requested.
- Clients may request deletion of their data by contacting our grievance team at css@mishalco.com. Data removal will proceed upon written acknowledgment that the client accepts full responsibility for any consequences resulting from deletion.
- Analytics tools are used exclusively on our public website to improve usability and performance. No analytics or tracking tools are applied within our SaaS application environment.
User Rights
Under Indian law, users have the right to:
- Access their personal data
- Request correction or updating of inaccurate data
- Withdraw consent for data processing
- Request deletion of their personal data
Disclosure to Third Parties
We do not sell or lease your personal information. Data may be shared only with trusted third-party providers under binding confidentiality agreements and solely for service delivery or legal compliance.
Cross-Border Data Transfers
If data is stored or processed outside India, we ensure that such transfers comply with applicable laws and contractual safeguards to protect user privacy.
Data Breach Notification
In the event of a data breach, we will notify affected users and take appropriate remedial measures in accordance with Indian legal requirements.
Policy Updates
This Privacy Policy may be updated periodically. Changes will be reflected on this page, and significant updates may be communicated via email or site notifications.
Contact Us
If you have questions or concerns regarding our privacy practices, please contact us at css@mishalco.com.
At Mishal Technologies, we are committed to protecting your privacy and ensuring transparency in how we handle your personal data. This Privacy Policy applies to all users accessing our services, website, or products from regions outside India and the Kingdom of Saudi Arabia. We adhere to internationally recognized data protection principles, including those outlined in the EU General Data Protection Regulation (GDPR) and other applicable laws.
Information We Collect
- Personal identifiers (e.g., name, email address, phone number) submitted via contact forms or service inquiries
- Business-related data required for ERP configuration, deployment, and support
- Device and usage data such as IP address, browser type, operating system, and interaction logs
- Voluntary submissions including feedback, testimonials, or survey responses
Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Consent provided by the user
- Performance of a contract or service agreement
- Legitimate interest in improving and securing our services
- Compliance with legal obligations
How We Use Your Information
- To respond to inquiries, fulfill service requests, and deliver tailored solutions
- To improve our website, services, and user experience
- To meet compliance requirements relevant to your region
- To communicate service updates, offers, or important operational announcements
Data Protection & Retention
- We implement industry-standard encryption, access controls, and backup protocols to safeguard your data
- Access to personal data is restricted to authorized personnel under strict confidentiality agreements
- Client data on our SaaS platform is retained according to the active subscription plan. In case of non-renewal, archived data is preserved for five (5) years, allowing clients to reactivate their subscription during this period. After five years, data may be permanently deleted unless otherwise requested
- Clients may request deletion of their data by contacting css@mishalco.com. Data removal will proceed upon written acknowledgment that the client accepts full responsibility for any consequences resulting from deletion
- Analytics tools are used exclusively on our public website to improve usability and performance. No analytics or tracking tools are applied within our SaaS application environment
User Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data
- Request correction or deletion of inaccurate or outdated data
- Withdraw consent for data processing
- Request data portability
- Object to certain types of processing
Cross-Border Data Transfers
Where data is transferred across borders, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent mechanisms, to protect your privacy.
Sharing Information
We do not sell or lease your personal information. Data may be shared only with trusted third-party providers under binding confidentiality agreements and solely for service delivery or legal compliance.
Data Breach Notification
In the event of a data breach, we will notify affected users and relevant authorities in accordance with applicable laws and our internal incident response protocols.
Policy Updates
This Privacy Policy may be updated periodically. Changes will be reflected on this page, and significant updates may be communicated via email or site notifications.
Contact Us
If you have questions or concerns regarding our privacy practices, please contact us at css@mishalco.com.