Privacy and Cookie Policy
On this page
1. Data controller and scope
The controller is Rise Systems Company For Trading, trading as RISYS, unified national and commercial registration number 7054101774, at Building 3567, Abdulhaq Bin Abi Shuja Street, Al Olaya District, Riyadh 12311, Kingdom of Saudi Arabia. Privacy channel: [email protected].
This policy covers the website, store, quotations, correspondence, delivery, installation, warranty, maintenance and support. It does not govern independent third-party services that process data under their own policies.
2. Personal data we may collect
- Name, contact details, company and job title.
- Shipping and billing addresses, orders, payments and invoices. Full card details are not stored by RISYS when an independent provider processes them.
- Quotation requests, correspondence, consent records, complaints, warranty and support history.
- Site and project details, photographs, plans and files supplied where necessary for assessment or delivery.
- Security and technical logs, including IP address, device, browser, login events, cookies and consent choices.
- Identity or access-permit details only where necessary for site access or compliance.
We do not collect CCTV recordings by default. We may request a limited, necessary excerpt to diagnose a support issue, restrict access to it and delete or restrict it when the purpose ends unless legal or contractual retention is required.
3. Purposes and legal basis
We use data to answer enquiries, prepare quotations, manage orders, payments and invoices, arrange shipping and installation, provide warranty and maintenance, handle complaints, prevent fraud, secure the site, comply with tax and legal duties, improve the store and manage rights or disputes.
Depending on the activity, processing is based on performing a contract or taking steps at your request, complying with law, pursuing legitimate interests that do not override your rights, or your consent where required, especially for marketing and non-essential cookies. You may withdraw consent for future processing without affecting earlier lawful processing.
4. Sharing, disclosure and international transfers
We disclose only what is necessary to hosting, cloud and email providers, payment providers and banks, carriers, customer-management providers, suppliers and service centres, analytics or advertising providers after consent, accountants, auditors and advisers, and government or judicial bodies where there is a lawful basis.
We do not sell personal data. Processors are limited by purpose, confidentiality and appropriate security terms. Where a service requires a transfer outside Saudi Arabia, we apply the safeguards required by applicable law and assess necessity and protection.
5. Retention and security
We retain data for the purpose for which it was collected, the contractual and warranty period, statutory tax or accounting periods and as needed to establish or defend rights. We then delete, anonymise or restrict it unless a longer period is legally required.
We use reasonable and proportionate technical and organisational measures, including access controls, protection in transit, review and backup where appropriate. No transmission or storage method is absolutely secure, so we do not promise absolute protection from every incident. You are responsible for accurate information and account security.
6. Your rights
Subject to applicable law, you may have rights to be informed, access personal data and receive a copy, correct or complete it, request destruction or restriction in qualifying cases, withdraw consent and complain to the competent authority. We may request reasonable information to verify identity and authority.
Send requests to [email protected]. We respond within statutory periods and will explain any permitted extension, refusal or partial refusal and available complaint route.
7. Cookie and similar-technology categories
Strictly necessary
Always active because they support security, basket, login and recording the consent choice. They are not used for advertising.
Functional
Enable optional features such as maps, embedded content and preference enhancements. They do not load before consent or an explicit request to load the feature.
Analytics
Help us understand traffic and performance statistically. They are denied by default until consent.
Advertising and marketing
Support campaign measurement and advertising personalisation. They are denied by default until consent, including Google Consent Mode signals for ad_storage, analytics_storage, ad_user_data and ad_personalization.
8. Managing consent
On the first visit you can accept all, reject non-essential, customise categories or save your selection. Controls are equally visible and do not use deceptive design. You can change or withdraw consent at any time through Cookie Settings in the footer.
We retain the choice, date and policy version using only what is needed to prove and honour your preference. Non-essential analytics and advertising tags do not load before consent. Google Maps remains blocked until you grant functional consent or explicitly choose to load it.
9. Third-party data and external services
If you provide information about an employee, customer or another party’s site, you confirm that you have authority and an appropriate basis and have provided required notices. Independent payment, carrier, map and linked services are governed by their operators’ policies.
We may use anonymous or aggregated information that does not identify a person for statistics and service improvement.
10. Contact and policy updates
For privacy requests, questions or complaints, email [email protected] or call +966 11 516 0223, Saturday to Thursday, 09:00 to 18:00.
We may update this policy when services or legal requirements change. The current version date appears above and material notice will be provided where required. Nothing in this policy waives a mandatory right.