Privacy Policy

Effective date: 24 September 2026

This policy explains how Plus Tech handles personal data through www.plustech-it.com and enquiries about Odoo implementation, customization, integration, training and technical support. It is intended to be read alongside any service agreement and applicable Saudi personal data protection requirements.

1. Who is responsible for your data?

Plus Tech operates this website and determines the purposes of processing website enquiries and its own business communications. Our published address is Khurais Road, Al Manar, Riyadh 14221, Saudi Arabia. For privacy enquiries or requests, contact info@plustech-it.com and use the subject “Privacy request”.

2. What data do we collect?

The contact form collects your full name, email address, subject and message as required fields; your phone number is optional. We also receive information you voluntarily provide about your company, project or support request. Without the required contact details, we may be unable to receive or respond to your enquiry.

Website operation may generate technical records such as IP address, browser and device information, request times and pages accessed, together with session and language preferences. Please do not send passwords, API keys, identity documents, payment-card details or sensitive personal data through the general contact form. If project data is needed, agree an appropriate transfer channel with our team first.

3. Why and on what basis is data processed?

We use enquiry details to understand your requirements, answer questions, arrange consultations and prepare proposals. Processing for these purposes relies on a lawful basis appropriate to the request, including legitimate interests in responding to business enquiries where the required assessment and safeguards permit this. Data needed to perform an existing agreement or meet a legal obligation is processed on that basis. Where consent is required, it must be obtained for the specific purpose and may be withdrawn.

Technical information supports website functionality, troubleshooting and protection against misuse. Submitting an enquiry or browsing this website is not consent to unrelated marketing. Direct marketing requires the applicable permission and a clear means to stop receiving it.

4. Client Odoo systems and project data

When Plus Tech accesses personal data in a client’s Odoo system to deliver implementation, migration, integration or support, its role and permitted activities must be defined in the service agreement and data-processing terms. Where we act as a processor, the client remains responsible for the purposes of processing and we act on its documented instructions. This website policy does not replace the client’s own privacy notice or authorize unrestricted access to its records.

Requests concerning an employer’s or another organization’s Odoo records should normally be directed to that organization. Any use of external artificial-intelligence tools with identifiable client data requires prior assessment, a lawful basis and the authorizations required by the relevant agreement; submitting an enquiry does not authorize such use or model training.

5. Access, service providers and disclosure

Access must be limited to authorized personnel who need the information for the stated purposes. Website, Odoo hosting, email and technical-service providers may process information as needed to operate the relevant service, subject to appropriate contractual and protection requirements. Information may also be disclosed where required by law or a competent authority, or where another lawful ground permits it. This policy does not authorize selling personal data or sharing it for unrelated third-party advertising.

6. Storage and transfers outside Saudi Arabia

Website enquiries are handled through the website and business correspondence systems. Hosting and processing locations depend on the service and provider; this policy does not promise that every copy is stored in Saudi Arabia. Any transfer or access outside the Kingdom must meet applicable Saudi transfer requirements and appropriate safeguards. For a specific project, hosting location, providers and transfer arrangements should be set out in the project’s data-processing terms. You may contact us for information relevant to your data.

7. Retention and deletion

Retention is determined by the time needed to address the enquiry, any ongoing service relationship, applicable recordkeeping duties and the establishment or defence of legal claims. This policy does not set an arbitrary single period for every type of record. When the purpose ends and no lawful reason for retention remains, data must be securely deleted or irreversibly anonymized, including the handling of copies and backups under applicable requirements. Client project records are also subject to the agreed return or deletion arrangements.

8. Cookies and external links

The website uses functionality such as sessions and language selection that may rely on cookies or similar storage. Browser settings allow you to manage or remove cookies; disabling essential storage may affect sign-in or other functions. Non-essential tracking, if introduced, requires appropriate notice and any consent required by law. External platforms linked from this website apply their own privacy policies.

9. Protection of information

Our policy requires technical and organizational safeguards proportionate to the data and the risks, including controlled access and appropriate handling of transfers and support materials. No internet transmission or storage method can be guaranteed completely secure. Suspected exposure should be reported promptly to info@plustech-it.com without sending the exposed credentials or sensitive records. Notification obligations for personal-data incidents are governed by applicable law.

10. Your rights and how to exercise them

Subject to applicable requirements and exceptions, you may request information about processing, access to your personal data, a readable copy, correction or completion, and destruction when legally available. Where processing is based on consent, you may withdraw it without affecting lawful processing carried out before withdrawal or processing supported by another lawful basis.

Send your request to info@plustech-it.com, explaining the right you wish to exercise and how we can contact you. We may need proportionate identity verification to protect your information. The applicable response period is normally no more than 30 days; a permitted extension of up to a further 30 days requires prior notice with reasons. If a request cannot be fulfilled, the reason should be explained as required by law.

11. Complaints and policy updates

You may raise a privacy complaint through the same email address. You also have the right to complain to the competent Saudi authority, including through the Saudi Data and Artificial Intelligence Authority’s National Data Governance Platform. We will publish changes to this policy on this page and update its effective date. A new purpose of processing may require a separate notice or consent; a policy update alone does not provide that consent.