Privacy policy

Version 2026-10-17 · approved

In short

• We keep your data and your project documents for one purpose: managing and following up your project with us, from the contract to handover and the warranty.
• Only the Easy Smart team can see it, plus your project's main contractor where the contract requires it.
• We never sell your data, and we give it to no one unless a regulation requires it or a competent official authority asks for it.
• You can ask for a copy of your data, a correction, or deletion of what we no longer need, at any time.
• We may use photos of your project's construction stages in Easy Smart's marketing, without any personal data or anything that reveals your identity or address. You can ask us to leave your project out at any time by contacting us.

Who we are and how to reach us

Easy Smart Est., Dammam, Kingdom of Saudi Arabia, is responsible for your data in this portal.

For any request or question about your data: email info@easysmart.sa, or WhatsApp 0556061113

What we keep

• Your name and mobile number, which are needed to open your account, and your email if you give it to us, which is optional.
• Your project files: drawings, contract, handover forms, reports, site photos, invoices and the payment schedule.
• Documents you upload, such as the title deed and permits. We ask for a copy of your ID only when an official authority requires it for a transaction about your project, or a regulation requires it.
• Your notes, messages, maintenance requests and the photos you send through the portal.
• Sign-in and security data: your PIN is stored in an encrypted form that no one can read, including us; the devices you signed in from; when you signed in or opened documents; and your notification subscription if you turned it on.
• A record of your consent to this policy, with its date and version.

Why we keep it, and on what basis

• To carry out your contract and follow up your project: reports, handover, answering your notes, invoices, the warranty and maintenance. Basis: the contract you are a party to, and your consent to this policy.
• To keep the invoices and records that regulations require us to keep. Basis: a legal obligation.
• To protect your account and detect any unusual sign-in. Basis: our legitimate interest in protecting your data, without harming your rights.
• We do not use your data for anything else, and we do not send you advertising messages without your consent.

Photos of your project in our marketing

We may use photos of your project's construction stages in Easy Smart's marketing, without any personal data or anything that reveals your identity or address. You can ask us to leave your project out at any time by contacting us.

Asking to leave your project out does not affect our service to you in any way.

Where it is kept and who sees it

• On our website's server (easysmart.sa) with a Saudi hosting company (Sahara Net), in a protected folder outside the public site; it opens only after we verify it's you.
• Only the Easy Smart team sees it, each member as far as their work needs.
• Your project's main contractor, where the contract requires it and only as far as needed, such as handover minutes.
• We do not disclose it to anyone else unless a regulation requires it or a competent official authority asks for it.
• If we ever need to transfer any of your data outside the Kingdom, we will do so only under the rules of the Personal Data Protection Law.

How long we keep it

• Project files (contract, handover forms, reports, photos, invoices and correspondence about the project): 10 years from the project's handover, or until the warranty ends if that is later, because regulations require commercial documents to be kept for that period and to protect your rights and ours in any claim. After that we destroy them or remove everything that identifies you.
• Personal documents you upload (such as the deed and permits): until the warranty ends, then we delete them within 90 days, except what has become part of the contract file. A copy of your ID is deleted once the transaction it was requested for is complete.
• Your portal account: we close it when the warranty ends and delete its data within 90 days. Sign-in and device records are kept for 12 months only.
• If a case about the project is before a court, we keep what relates to it until the case ends.

Your rights

• To know what we keep about you and why, and to ask for a copy in a clear format.
• To ask us to correct, complete or update your data.
• To ask us to delete what we no longer need, except what a regulation requires us to keep.
• To ask us to leave your project out of our marketing photos at any time.
• To withdraw your consent where processing relies on consent, as easily as you gave it, by email or WhatsApp. This does not cover what we need to carry out the contract or what a regulation requires.
• We answer your request within 30 days. If it needs longer, we tell you why before that period ends.
• You can complain to us first, and you may also complain to the competent authority for personal data protection, currently the Saudi Data and Artificial Intelligence Authority (SDAIA).

Your data's and your account's security

• We protect your data with suitable technical and administrative measures. If a breach happens that may harm you, we tell you and the competent authority as the law requires.
• Your personal link opens the portal the first time; after that your 4-digit PIN is asked on any new device, or after some time since your last sign-in.
• Don't give your PIN to anyone. If you think someone got into your account, press "Sign out of all devices" in "My account" and contact us.
• If the PIN is entered wrongly 5 times it locks, and we unlock it once we've verified it's you.

Using the portal

• The portal is for following your project and talking to us. 3D views and artist's impressions are for illustration only; the work follows the contract and the approved drawings.
• Don't upload files that aren't about your project, or that hold other people's data without their permission.
• If anything in the portal differs from the signed contract, the contract prevails.

Changes to this policy

If we change this policy we tell you in the portal and ask for your consent to the new version before you continue.