Privacy Policy – MAND VCARD
Effective Date: September 1, 2025 (Riyadh Time)
1) Introduction and Scope
This Privacy Policy applies to all MAND VCARD services available through:
- The website: mandvcard.com
- The mobile application (iOS & Android)
2) Infrastructure in Saudi Arabia
- All user data is processed and stored on servers located within the Kingdom of Saudi Arabia, using local cloud solutions in compliance with SDAIA and the National Cybersecurity Authority (NCA).
- Data is not transferred outside Saudi Arabia except when technically necessary, in limited cases, and with appropriate safeguards.
3) Information We Collect
- Account Information: name, email, mobile number, profile photo, social links, vCard content.
- Transaction Data: orders, invoices, payment status, shipping details.
- Usage Data: IP address, device/browser type, visited pages or features, duration of use.
- Cookies & Analytics Tools: to personalize and improve your experience on the website and app.
4) Mobile Application Privacy
- Camera / Gallery: to scan QR codes or upload profile pictures.
- NFC: to share your digital card via tap.
- Contacts (Optional): to share your card with others.
- Location (Optional): to improve delivery or local offers.
- Notifications: we may send operational or promotional push notifications, which you can manage from your device settings.
5) Payments and Billing
- Payments are processed through licensed payment providers (Mada, Visa, MasterCard, Apple Pay, etc.).
- We do not store full card details on our servers.
- Transaction and invoice data is retained for at least 5 years in compliance with Saudi tax regulations.
6) How We Use Your Data
- Operating and maintaining the website and app.
- Managing accounts, subscriptions, orders, payments, and deliveries.
- Providing technical support and customer service.
- Sending notifications and alerts.
- Improving performance through analytics (Analytics SDKs).
- Marketing (only with your explicit consent).
- Compliance with legal obligations.
7) Data Sharing
- We do not sell personal data.
- Data may be shared with:
- Local service providers (payment, shipping, hosting, analytics).
- Regulatory authorities when legally required.
8) Data Security
- We use reasonable technical and organizational safeguards to protect your data.
- Keeping data within Saudi Arabia enhances security and reliability.
- Users are encouraged to keep their passwords confidential and secure their devices.
9) Data Retention
- Data is kept only as long as necessary to provide services or comply with legal requirements.
- Once no longer needed, data is deleted or anonymized securely.
10) Your Rights
Under Saudi Arabia’s Personal Data Protection Law (PDPL), you have the right to:
- Request access to your data.
- Correct or update information.
- Request deletion of your data (subject to legal limits).
- Withdraw consent for processing.
11) Complaints
You may first contact us at:
📧 support@mand.sa
If unresolved, you may escalate your complaint to the competent authority in Saudi Arabia (SDAIA).
12) Children’s Data
Our services are not directed to individuals under 18. If we learn of such data collection, it will be deleted promptly.
13) Changes to this Policy
We may update this Privacy Policy periodically. Updates will be posted here with a revised Effective Date.
