Privacy policy

Haneul Tech is a founder-led technology brand affiliated with شركة إرساء العلوم القابضة, commercial registration 1010956532. The parent company is responsible for information handled through this website. Contact info@haneultech.com or WhatsApp +966 59 007 0068.

This policy covers browsing, project enquiries and authorised administration accounts. A service agreement may require an additional notice for project data. External project websites have their own policies.

Project pages do not ask for identity documents, payment details or health information. Keep sensitive information and your own or your customers’ secrets out of briefs and correspondence.

• Correspondence: your name, email, message and attachments you choose to send. This may include your phone and organisation, or your number and profile name when you contact us through WhatsApp.
• Project request: project type, goal, features, timing, name, email, preferred reply channel, and organisation or phone if provided. Phone is required for phone or WhatsApp replies. Submission stores these fields, the privacy acknowledgement version, a request reference.
• Operation and security: IP address, browser and device information, request time, requested page and request outcome, to deliver the site, protect it and diagnose problems.
• Optional statistics: page views and needs builder or WhatsApp clicks, with page language, page path and referring domain, excluding query text and contact details. We create no visitor identifier or analytics cookie, and store no raw IP address in these statistics.
• Administration only: administrator name, email, permissions, sign-in, session and two-factor authentication information and sign-in attempts. Visitors do not need an account.

Fields stay in page memory while you prepare them. Saving a request requires privacy acknowledgement, Cloudflare Turnstile verification and choosing Send project request. The server validates the input and security check, then saves the request before returning its receipt. The acknowledgement version is 2026-10-06-intake-v1 and includes no marketing or analytics consent.

Email, WhatsApp draft and download options are separate from form submission. Opening an email draft passes text to your email app or provider; a WhatsApp draft passes the brief to WhatsApp. The company receives it after you send it in that channel. A downloaded brief is a file on your device for you to keep or delete.

The needs builder and demonstrations run in your browser. Moving from the needs builder to “Start your project” places the project type, features and a generated brief in the transition link to prefill the page. These values reach the hosting service with the page request and may appear in request logs. The generated link includes no name, email or phone.

You can browse without giving us your name or email. Submission requires a name, email and valid brief. Organisation is optional; phone is required only for phone or WhatsApp replies. A limited-use security signature is derived from the connection address to prevent abusive repeated requests, without storing the raw address in the request record.

We use correspondence to understand and respond to the enquiry you choose to send. Where processing relies on consent, it is limited to the stated purpose and you can withdraw it. An enquiry is not a marketing subscription. Browsing is not blanket consent to additional processing.

Necessary security processing protects the site and prevents abuse on the basis of legitimate interests, subject to applicable safeguards and without using sensitive data for that purpose. An agreed service or legal obligation relies on the applicable agreement or obligation, explained where relevant.

Your light or dark appearance choice is stored locally as haneul-theme without automatic expiry. Change it through the appearance control, or remove it by clearing this site’s browser data.

The introduction-display flag is stored locally as haneul-intro-seen to avoid repeating it; your motion-pause choice is stored as haneul-motion-paused for the tab session. These display preferences contain no name or contact details and are not tracking identifiers. Clear site data to remove local values. Pages also work when this storage is blocked.

Administration uses necessary sign-in, session and security cookies. Clearing them may require signing in again. No marketing subscription, advertising tracking or Google Analytics is enabled.

Optional usage statistics start only after your separate consent, version 2026-10-06-analytics-v1. Your allow or decline choice is stored locally as haneul-analytics-consent without a personal identifier. Change it through privacy settings; withdrawal stops future events and does not automatically delete previous statistics. Declining preserves site functionality. Project-request privacy acknowledgement does not authorise optional statistics.

We do not sell contact information or share it for advertising. Your request contents are not automatically forwarded to an AI tool. Administration access to requests is restricted to the authorised owner.

• Cloudflare: hosting, protection, request and content storage, necessary operational data, administration access verification, Turnstile form protection and incoming email routing.
• Google (Gmail): receiving correspondence sent to our contact email and handling replies.
• Resend: when notifications are enabled and the sending domain is verified, an owner alert contains only the request identifier and administration link, excluding client name, email and brief. Incomplete configuration keeps the alert pending and does not prevent saving the request.
• WhatsApp (Meta): messaging when you choose that channel. Its link takes you to an external service; this website loads no embedded WhatsApp chat tool.
• People authorised to follow up your request, and recipients where disclosure has a legal basis, limited to what the purpose requires.

The site uses global cloud, email and messaging providers. Technical information or correspondence may therefore be processed outside Saudi Arabia. We do not promise that all information is stored in the Kingdom.

Transfers are subject to the Saudi PDPL and transfer rules, including a lawful purpose, necessary minimum data, adequate protection, and safeguards and risk assessment when required. A provider’s policy alone does not establish that Saudi transfer requirements have been met. You can request information about recipients and transfer safeguards through our privacy email.

An unsent brief creates no request record with us. Submitted requests are stored in the site database with follow-up status, administrator notes, acknowledgement and notification records. Needs-builder transition-link values may appear in page-request logs. Downloaded files and drafts follow your storage choices and provider policies; received correspondence is kept in the email account or contact channel.

Retention criteria depend on the category: enquiry data until follow-up ends; project records according to delivery of the contractual relationship; administrator account data according to the account’s continued use and permissions; and security records until their abuse-prevention or incident-investigation purpose ends. A legal obligation or ongoing court case may require specific records to be kept afterwards.

When the purpose ends and there is no legal ground for continued retention, information is deleted or anonymised so it can no longer be attributed to you. Deletion covers related records and copies held by the company and processors, including backups. We explain any legal restriction or action needed to carry out your request.

We use encrypted connections, access controls and two-factor authentication for administration. These measures reduce risk and cannot eliminate it. Do not send passwords, verification codes or recovery codes through contact channels.

Email info@haneultech.com with “Privacy request” as the subject. State the right you wish to exercise, how to reach you and your request reference if available. The site administrator follows up and verifies your identity only as necessary. For deletion requests, we identify the related information and copies and explain the action taken and any legal restriction.

We fulfil rights requests without delay within 30 days. If a lawful extension applies, we notify you beforehand with the reason; the extension cannot exceed a further 30 days.

• Understand the purpose, legal ground and use of your information.
• Access information we hold about you and obtain a clear, readable copy.
• Request correction, completion or updating.
• Request destruction of information no longer needed, subject to legal exceptions.
• Withdraw consent where processing relies on it, and submit a complaint to SDAIA.

The date above identifies this version. Changes to collection or use require an updated notice before the relevant collection, and consent where required. Contact us to ask which version applies to your correspondence.