سياسة الخصوصية

1. Who we are and scope

AMSCV is the Controller of Personal Data collected through https://amscv.com and its services. Privacy and customer-service email: admin@amscv.com. This Policy applies to site visitors, account and form users, prospective and current customers, and business-customer contacts. The professional services are primarily intended for adults; a person lacking full legal capacity must act through a lawful guardian. Third-party sites are governed by their own privacy policies.

2. Data we collect and sources

Data may include: name, email, optional phone number, account and profile details; selected service, package, budget, objective and timing; public LinkedIn URL, target role, career level, market, achievements and notes; organisation name, data sources, KPIs, Power BI dashboard needs, and files or datasets the customer chooses to provide; messages, feedback and consents; order, invoice, payment-status and transaction-reference data; and IP address, device, browser, session, cookie and security-log data. We collect it directly, automatically through the site and device, or from a transaction provider or authorised business representative. Where it is obtained indirectly, we provide the notice required by law. Do not send a LinkedIn password, full card data, an identity document or sensitive data the service does not need.

3. Purposes, legal bases and required data

We use data to answer enquiries and take pre-contract steps; create accounts and administer orders; review scope and pricing; deliver LinkedIn and Power BI services, revisions and support; issue invoices and manage payments and refunds; secure the site and prevent fraud; keep records, comply with law and resolve disputes; and improve services using limited data. Depending on the activity, the legal basis is contract or pre-contract steps, legal obligation, consent, or a legitimate interest that does not override Data Subject rights. Forms identify required fields; without essential data we may be unable to assess or perform a request. Marketing and non-essential cookies are optional and require consent where applicable.

4. Cookies and similar technologies

The site uses technologies necessary for security, sessions, the order cart, login, language and consent preferences. Non-essential analytics, functional or advertising cookies are activated only after consent where they are used. Visitors may reject non-essential cookies or change choices through the cookie-preference tool. AMSCV maintains a current inventory of categories, purpose, provider and duration in that tool or its linked cookie notice. AMSCV does not make decisions with legal or similarly significant effects solely through automated processing.

5. Payment data

When online checkout or a payment link is enabled, the payment provider identified at checkout processes data needed for the transaction, such as name, contact channel, amount, order reference, device and fraud signals, and card data. AMSCV does not store full card numbers or CVV and does not ask customers to send them by email or forms. AMSCV may retain the order number, amount, currency, payment status and transaction identifier as needed for the contract, invoice, refund, accounting and disputes.

6. Disclosure, processors and international transfers

We may share the minimum necessary data with providers of hosting, site administration, backup, email, support, security, CAPTCHA and payment services; professional advisers; and public authorities where a lawful basis exists. We do not sell Personal Data. Our main operation is in Saudi Arabia, while some providers may use infrastructure or support outside the Kingdom. Transfers or processing abroad occur only under the PDPL and Transfer Regulation with the required basis, assessment and safeguards. Processors are required to protect confidentiality and security and use data only for the agreed purpose.

7. Retention and destruction

We retain data only for the purposes and periods in the schedule below, then securely delete or anonymise it so that reasonable access or recovery is prevented. We may retain data longer where law, a legal claim, dispute or security investigation requires it, with use restricted to that need. Deleted data may remain temporarily in backups until overwritten under the backup cycle.

8. Security and Personal Data incidents

AMSCV applies risk-appropriate controls including HTTPS, data minimisation, restricted administrator and customer-file access, strong authentication where available, updates and backups, and separation of service data from payment credentials. No method is 100% secure, so do not send LinkedIn passwords, payment-card data or unnecessary files. We assess, contain and document incidents and notify the competent authority and affected Data Subjects within the legally required periods where the law requires notification.

9. Data Subject rights and requests

Subject to statutory exceptions, the PDPL provides rights to be informed; access Personal Data; obtain a readable copy; correct, complete or update data; request destruction when no longer needed; withdraw consent where consent is the basis; complain; and seek compensation where legal conditions are met. Email admin@amscv.com with “Privacy Request” in the subject and describe the request without initially sending a full identity document. We may verify identity proportionately. Requests are normally completed within 30 days, with a further 30-day extension where justified and notified in advance with reasons.

10. Marketing, complaints and Policy updates

AMSCV sends direct marketing only with appropriate consent, clear sender identity and a free, easy opt-out. Refusing marketing or withdrawing consent does not affect the core service. Privacy complaints may be sent to admin@amscv.com; if dissatisfied, you may complain to the competent Personal Data authority through SDAIA channels. We update this Policy when practices, laws or providers change, publish the effective date, and provide appropriate notice or seek renewed consent where required. The Arabic and English texts are intended to have the same meaning; if they conflict, the Arabic text prevails to the extent permitted by law.

Retention periods and secure destruction

• Enquiries not converted to an order: 6 months after the last contact.
• Account and profile data: while active, then up to 30 days after closure, except records that must be retained.
• Customer project files and datasets: during the project and up to 90 days after final delivery or acceptance; backup copies may remain for up to a further 30 days.
• Support messages and service correspondence: 12 months after the matter is closed.
• Order, invoice and payment-reference records: up to 6 years, or the longer period required by law or an active dispute.
• Cookie, consent and ordinary security logs: generally up to 12 months; consent evidence is kept as needed to demonstrate the choice, and incident records may be retained longer.
• Marketing data: until consent is withdrawn or the contact is inactive for 24 months, whichever occurs first.