Privacy Policy

1. Who is responsible

Smart of Things (SOT), Riyadh, Kingdom of Saudi Arabia, decides how the personal data described here is handled and is the party to contact about it. Questions, requests and complaints can be sent through the contact page or to the address published on it.

This policy was last updated on 6 September 2026.

2. What we collect

An account holds a name, an email address, a phone number and, where you give one, a company name. Email and phone are verified when the account is created, which is how a password reset reaches you rather than somebody else.

An order holds what was bought, the delivery address, and the record of payment — the last of these as an invoice, because tax regulation requires the invoice to exist and to say who it was issued to.

An enquiry holds what you type into the form: name, phone, email, company, subject, question, and any file attached to it — a drawing or a bill of quantities, which is stored as a document rather than in the message.

Every request also carries technical data: an IP address, the browser's own description of itself, and the time. We read them to rate-limit abuse and to investigate a security incident, not to build a profile.

3. Why we hold it, and on what basis

To do what you asked: answer an enquiry, price a project, deliver an order, honour a warranty. Personal data given for one of those is used for that.

To meet obligations that are not ours to waive — invoicing and tax records under the regulations of the Kingdom.

To keep the site working and safe: the rate limits, the bot check on the form, and the logs that show what happened when something breaks.

We do not sell personal data, and we do not use it for advertising.

4. Who else sees it

The services that run this site see the parts they operate: Clerk holds the credentials and sessions behind accounts, our hosting and database providers hold the site and its records, and Cloudflare stores uploaded files and runs the bot check on the form.

An enquiry is delivered into our own CRM so the team can answer it. An order is shared with the carrier that delivers it. A warranty claim is shared with the manufacturer, because the manufacturer is the party that honours it.

Some of those providers operate outside the Kingdom, so data reaches servers abroad. Where it does, it goes under the terms those providers are bound by, and only what the service needs to do its job.

We disclose personal data to an authority where the law requires it, and not otherwise.

5. How long it is kept

An account and its history are kept while the account exists. Invoices and the records behind them are kept for the period the Kingdom's tax and commercial regulations require, which is longer than an account may last and is not something we can shorten on request.

An enquiry that does not become an order is kept while it is useful to answer follow-up questions, and then removed.

6. Your rights

Under the Personal Data Protection Law of the Kingdom of Saudi Arabia you may ask what we hold about you and receive a copy of it, ask that something wrong be corrected, ask that data be deleted where we are not required to keep it, and withdraw a consent you gave.

Ask through the contact page. We will answer within the period the regulations allow, and where we cannot do what was asked — because an invoice must be kept, for instance — we will say which obligation prevents it rather than leave the request unanswered.

If our answer does not satisfy you, the Saudi Data and Artificial Intelligence Authority (SDAIA) supervises this law and takes complaints.

7. Security, and a limit worth stating

Access to customer records is limited to the staff whose work needs it, traffic to this site is encrypted, and files are stored in access-controlled storage rather than on the site itself.

No system is beyond compromise, and a policy that promised otherwise would be marketing. What we can commit to is that a breach affecting personal data is reported to the authority and to the people affected, as the regulations require.

8. Children

This is a site for businesses and for adults buying equipment. It is not directed at children, and we do not knowingly collect their data.

9. Changes

When this policy changes, the version published here is the one that applies from the date at the top of it. A change that materially affects how personal data is used will be brought to the attention of account holders rather than left here to be discovered.