Privacy policy

Exq IT Consulting and Services (“exQ”, “we”, “us”) provides IT services from Riyadh, Saudi Arabia. Contact us about this policy at info@exq.services.

We handle personal data in line with the Saudi Personal Data Protection Law (PDPL).

• When you send an enquiry: your name, company, email address, phone number, the service you choose and your message, together with the page you sent it from and the time.
• When you book a consultation: the details you enter in the booking calendar, such as your name, email address and any notes.
• To protect the site: your IP address and basic browser information, used to block spam and limit repeated submissions.
• Sign-in attempts to the site’s private administration area (used only by exQ): the time, and the address entered and your IP address stored as shortened one-way codes rather than in full, to detect misuse.
• Your theme choice: if you switch to dark mode, the choice is saved in your own browser. It is not sent to us.
• The Solutions Lab: the simulations run entirely in your browser. Nothing you choose in them is sent to us.

• To reply to your enquiry and send you a confirmation email.
• To arrange and hold the consultation you book.
• To keep the website secure and protect the contact form from spam and abuse.

We use your enquiry and booking details because you asked us to respond to you or to hold a consultation, and we do not use them for anything else.

We use a small number of providers, only for the purposes above:

• Resend delivers contact-form emails to us and the confirmation email to you.
• Cloudflare Turnstile checks that a form submission comes from a person, not an automated program.
• Microsoft Bookings (part of Microsoft 365) runs the booking calendar and sends booking confirmations.
• Vercel hosts this website and keeps short-term technical logs.
• Neon hosts the database behind the website’s content and the sign-in records described above.

These providers are companies based in the United States, and they may process data outside the Kingdom of Saudi Arabia. Where Neon and Microsoft 365 store data depends on the region chosen for exQ’s account. We do not sell personal data or use it for advertising.

The site itself sets no cookies for visitors, and it does not use advertising or analytics cookies, tracking pixels or session recording. A single sign-in cookie is used in the private administration area only. Cloudflare Turnstile and Microsoft Bookings may set cookies that they need in order to work.

We keep enquiry emails and booking records for 24 months after our last contact with you, then delete them. Records used to limit repeated form submissions are held in the server’s memory for up to an hour, and those for sign-in requests are deleted after a day. The log of sign-in attempts and website changes is kept for 12 months.

To access, correct or delete your personal data, email info@exq.services. You can also ask us how your data is used, or withdraw your consent to us contacting you. We reply to these requests within 30 days. If you are not satisfied with our response, you can complain to the Saudi Data and Artificial Intelligence Authority (SDAIA), which oversees the Personal Data Protection Law.

The site is served over an encrypted connection, and access to enquiries is limited to the people at exQ who need it to reply.

If we change this policy, we will update this page and the date at the top. See also our terms of service.