Olltek Co. (CR No: 1010908013) ("Olltek," "we," "us," or "our") is committed to protecting your privacy and securing your personal data. This Privacy Policy explains how we collect, use, share, and protect your information when you interact with our website, products, and services.

We comply with applicable data protection laws worldwide, including:

• Personal Data Protection Law (PDPL) in the Kingdom of Saudi Arabia

• General Data Protection Regulation (GDPR) in the European Union

• California Consumer Privacy Act (CCPA) in the United States

• Other relevant regulations in jurisdictions where we operate

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy.

1.1 Personal Information

We may collect the following types of personal data:

• Identity Information: Name, username, national ID, passport number

• Contact Information: Email address, telephone/mobile number, mailing address

• Financial Information: Bank account details, credit/debit card information

• Demographic Information: Age, gender, preferences

• Health Information: Health data when relevant to our services

• Technical Information: IP address, device ID, browser type, operating system

• Usage Data: Browsing history, interaction with our website, cookies data

• Location Data: Geographic location through IP address or device settings

1.2 How We Collect Information

We collect your personal data through:

• Direct Interactions: When you register on olltek.com, make purchases, subscribe to newsletters, fill out forms, contact customer support, or participate in surveys

• Automated Technologies: Through cookies, pixels, and similar tracking technologies when you visit our website

• Third-Party Sources: From business partners, service providers, publicly available sources, or your employer/organization

• Social Media: When you interact with us on social media platforms

We process your personal data for the following purposes:

2.1 Service Delivery

• Provide, maintain, and improve our products and services

• Create and manage user accounts or loyalty programs

• Process transactions and send transaction confirmations

• Monitor your preferences to personalize your experience

2.2 Communication

• Send important updates about our services, functionality changes, or security alerts

• Respond to your inquiries and support requests

• Send promotional communications about offers, deals, and campaigns (you can opt out anytime)

• Provide customer service and technical support

2.3 Business Operations

• Perform contracts and agreements with you

• Comply with legal obligations and regulatory requirements

• Prevent fraud and enhance security

• Resolve disputes and enforce our terms

2.4 Marketing and Analytics

• Conduct data analysis and identify usage trends

• Evaluate the effectiveness of marketing campaigns

• Improve products, services, and user experience

• Provide personalized recommendations using AI-driven insights

We process your personal data based on:

• Your Consent: When you explicitly agree to specific processing activities

• Contract Performance: To fulfill our contractual obligations to you

• Legal Obligations: To comply with laws and regulations

• Legitimate Interests: To pursue our business interests while respecting your rights

• Vital Interests: To protect your life or that of another person

We may share your personal data in the following circumstances:

4.1 Service Providers

With trusted third-party vendors who assist us with payment processing, data analysis, email delivery, hosting services, and customer support.

4.2 Business Partners

With partners to offer you products, services, or promotions that may interest you.

4.3 Corporate Affiliates

Within Olltek's group of companies, including holding companies, subsidiaries, and affiliates.

4.4 Business Transfers

In connection with mergers, acquisitions, sales of assets, financing, or other business transactions.

4.5 Legal Requirements

When required by law, court order, or government authority, or to protect our rights, property, and safety.

4.6 With Your Consent

For any other purpose with your explicit consent.

4.7 Public Interactions

When you post comments, participate in forums, or engage in other public interactions on our platform.

Important: Our service providers are bound by strict confidentiality agreements and are only permitted to use your data to provide services on our behalf.

Your personal data may be processed at our offices in Riyadh, Kingdom of Saudi Arabia, or in other locations where our service providers operate. When we transfer data internationally, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved under GDPR

• Adequacy decisions by relevant authorities

• Other legally recognized transfer mechanisms

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, including:

• Maintaining your account for as long as it remains active

• Complying with legal, accounting, or reporting obligations

• Resolving disputes and enforcing our agreements

• Meeting regulatory requirements

• When your data is no longer needed, we securely delete or anonymize it.

Depending on your location, you may have the following rights:

7.1 Universal Rights

• Access: Request a copy of the personal data we hold about you

• Correction: Request corrections to inaccurate or incomplete data

• Deletion: Request deletion of your personal data (right to be forgotten)

• Restriction: Request limitation on how we process your data

• Objection: Object to certain processing activities

• Data Portability: Request your data in a portable format

7.2 Additional Rights (GDPR - EU Residents)

• Withdraw consent at any time

• Lodge a complaint with a supervisory authority

7.3 Additional Rights (CCPA - California Residents)

• Know what personal information is collected, used, and shared

• Delete personal information held by businesses

• Opt out of the sale of personal information

• Non-discrimination for exercising privacy rights

To exercise your rights, contact us at tech@ollkom.com

We implement robust security measures to protect your personal data, including:

• Encryption: Data encryption in transit and at rest

• Access Controls: Restricted access to personal data on a need-to-know basis

• Security Audits: Regular security assessments and audits

• Employee Training: Comprehensive data protection training for staff

• Industry Standards: Compliance with standards like ISO 27001

• Physical Security: Secure facilities and infrastructure

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

We use cookies, web beacons, pixels, and similar technologies to:

• Enable essential website functionality

• Remember your preferences and settings

• Analyze website traffic and user behavior

• Deliver personalized advertising

• Measure marketing campaign effectiveness

9.1 Types of Cookies We Use

• Essential Cookies: Required for website operation

• Functional Cookies: Remember your preferences

• Analytics Cookies: Help us understand how visitors use our site

• Advertising Cookies: Deliver relevant ads based on your interests

9.2 Managing Cookies

You can control cookies through your browser settings or our cookie consent tool. Note that disabling certain cookies may affect website functionality.

For more details, please refer to our Cookie Policy.

Olltek does not knowingly collect personal data from children under 13 years of age (or 16 in certain jurisdictions) without verifiable parental consent. If we discover that we have collected data from a child without proper consent, we will promptly delete it.

If you believe we have collected information from a child, please contact us immediately at tech@ollkom.com.

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will:

• Post the updated policy on our website at https://olltek.com

• Update the "Last Updated" date at the top of this policy

• Notify you via email or prominent notice on our website (for material changes)

We encourage you to review this Privacy Policy periodically.

If you have questions, concerns, or wish to exercise your privacy rights, please contact us:

Olltek Co.

CR No: 1010908013

Address: Alshabakiah - Rabie Dist - PC, 13316

Riyadh, Kingdom of Saudi Arabia

Email: tech@ollkom.com

Telephone: +966 55 580 9072

Legal Representative: Mr. Mansour Alswelem

Data Protection Officer: Available at tech@ollkom.com

For clarity, the following terms used in this Privacy Policy have the meanings set forth below:

• Personal Data: Any information that can identify you directly or indirectly, including name, ID numbers, contact details, financial information, and online identifiers.

• Sensitive Data: Personal data revealing racial/ethnic origin, religious beliefs, health data, biometric data, genetic data, or data about criminal convictions.

• Processing: Any operation performed on personal data, including collection, storage, use, disclosure, transfer, or deletion.

• Controller: Olltek, as the entity that determines the purposes and means of processing personal data.

• Processor: Third parties who process personal data on behalf of Olltek.

• Data Subject: You, the individual to whom personal data relates.

• Consent: Your freely given, specific, informed, and unambiguous agreement to the processing of your personal data.

By using olltek.com and our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services.

For processing activities that require explicit consent, we will obtain your consent separately before collecting or using your data for those specific purposes.