Data Controller: Almustaqim Establishment For Metals, CR No. 7042626825, Saudi Arabia
Contact: +966532415577 (or support@almustaqeem.sa)

Al Mustaqeem respects your privacy and is committed to protecting your personal data in accordance with the Saudi Personal Data Protection Law (PDPL). This policy explains how information is collected, used, shared, and protected when you use the Al Mustaqeem application for blacksmithing, metal fabrication, welding, and laser-cutting services.

1. Information We Collect

  1. Personal information (name, phone number, email, city)
  2. Project details and uploaded files (drawings, photos, designs)
  3. Technical data (device type, IP address, app usage data)
  4. Location data (used to match you with nearby Fabricators; you can decline this, though it may limit matching accuracy)
We do not collect or store full payment card details — these are handled directly by our licensed payment service provider.

2. Why We Process Your Information

We process your data on the basis of: performing our contract with you (providing the service you requested), your consent (e.g. optional location access, marketing communications), and our legal obligations (e.g. record-keeping for tax and dispute-resolution purposes).

We use your information to:
- Match you with Fabricators and process your requests
- Process payments and manage escrow
- Communicate with you about your orders
- Improve the app and troubleshoot issues
- Comply with legal and regulatory requirements

3. Marketing Communications

We will only send you promotional or marketing messages if you opt in. You can opt out at any time via your account settings or by contacting us; this will not affect service-related notifications (e.g. order updates).

4. Data Sharing

We do not sell or rent your personal data. We may share it with:
- The Fabricator you are working with, limited to what is needed to complete your request (Fabricators are contractually required to keep your project details confidential and not reuse them without your consent — see Terms & Conditions, Section 12)
- Our payment service provider, to process payments
- Cloud hosting and infrastructure providers, to operate the Platform
- Authorities, where required by law

5. Cross-Border Data Transfers

Some of our service providers may process data outside Saudi Arabia. Where this occurs, we take appropriate safeguards in line with the PDPL's requirements for transfers of personal data outside the Kingdom.

6. Data Retention

We retain your personal and account data for as long as your account is active. If you request deletion of your account, we delete your personal data within 30 days, except for:
- Transaction and invoice records, which we retain for 6 years from the end of the relevant tax period, in accordance with ZATCA record-keeping requirements; and
- Any data reasonably needed to resolve an open dispute, chargeback, or legal claim, which we retain until that matter is resolved.

You may request access to or correction of your data at any time — see Section 9.

7. Data Security

We apply reasonable technical and organizational measures to protect your data, including access controls and encryption where appropriate. In the event of a data breach that risks your rights or interests, we will notify affected users and the relevant authority in accordance with PDPL requirements.

8. Uploaded Files

Designs and files you upload remain your property. They are used solely to fulfill your requested service and are shared only with the Fabricator working on your request, who is contractually bound not to reuse them without your consent.

9. Your Rights

You may access, correct, or request deletion of your personal data at any time by contacting +966532415577 (or support@almustaqeem.sa). We aim to respond to requests within 30 days. If you are not satisfied with our response, you may escalate your complaint to the Saudi Data & Artificial Intelligence Authority (SDAIA).

10. Payments

Payments are processed through our authorized, licensed payment service provider. For quote-based services, funds are held in escrow and released according to our Terms & Conditions. You agree to provide accurate and up-to-date payment information.

11. Refunds

Refund requests are reviewed based on the status of the service and evidence provided, per our Terms & Conditions. Approved refunds are processed through the original payment method.

12. Chargebacks

If you submit a chargeback claim through your bank or payment provider, we may share relevant transaction records and evidence of service delivery with them to help resolve the dispute. Where it is established — by the bank, payment provider, or our review of the evidence — that the service was provided as agreed, you may be held responsible for a false or unjustified chargeback claim.

13. Fraud and Unauthorized Use

You must only use payment methods you own or are authorized to use. We may suspend an account or transaction where fraud is suspected and may request further verification.

14. Disputes

Contact us first to resolve any payment or service dispute. Disputes are handled per this policy, our Terms & Conditions, applicable Saudi law, and our payment provider's rules.

15. Prices and Fees

Prices and applicable fees are displayed before you confirm an order or payment. Any additional fees are disclosed before payment confirmation.

16. Children's Privacy

Al Mustaqeem is not intended for use by individuals under 18. We do not knowingly collect data from minors.

17. Changes to This Policy

We may update this policy from time to time. Material changes will be notified through the Platform before taking effect.

18. Contact Us

Questions about this policy or your data can be directed to +966532415577 (or support@almustaqeem.sa), or via our [Get in Touch] page.