Privacy Policy

This policy explains how MASO Dynamics collects, uses, shares and protects personal data when you use this website, contact us, or verify a certificate we have issued. We process personal data in accordance with the Saudi Personal Data Protection Law and its Implementing Regulations, and we collect only what we need for the purposes described below.

Who we are

This website is operated by Modular Automation & Smart Operations Dynamics Company L.L.C ("MASO Dynamics", "we", "us"), a company registered in Al Madinah Al Munawwarah, Kingdom of Saudi Arabia, under Unified No. 7051005903.

MASO Dynamics is the controller of the personal data described in this policy. This means we decide why and how that data is processed and we are responsible for protecting it.

In this policy, "the Law" means the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 9/2/1443H, as amended by Royal Decree No. (M/148) dated 5/9/1444H, together with its Implementing Regulations and the regulations on transferring personal data outside the Kingdom.

Personal data we collect

We collect personal data directly from you, from the organisations we work with, and automatically when you use the website. Depending on how you interact with us, this may include:

• Enquiry data: your name, company, email address, phone number, the type of enquiry and the content of your message.
• Recruitment data: your CV and any information you choose to include in a job application.
• Customer and service data: the names and work contact details of people at our customer organisations, and the records we create when we test or calibrate equipment, such as instrument details, serial numbers, results and certificate data.
• Certificate verification data: the certificate number or QR code you look up, together with standard technical data about the request.
• Portal account data: for authorised staff who use our calibration management portal, their name, work email, user role, sign-in credentials (stored in protected form) and a record of actions taken in the portal.
• Technical data: your IP address, browser type, device information, date and time of access, the pages you request and referring addresses, which our servers record automatically.
• Cookie data: the essential cookies described in our Cookie Policy.

Sensitive data

We do not ask for sensitive personal data, such as health information, religious beliefs or criminal records, through this website. Please do not include this kind of information in messages or CVs you send us. If you do, we will process it only as far as necessary and in accordance with the Law.

Why we use your data and our legal basis

We process personal data only for specific, clear and legitimate purposes, and only where the Law permits it. Our purposes and the legal basis for each are:

• To answer your enquiry or prepare a quotation: based on the consent you give when you submit the contact form, and on steps you ask us to take before entering into a contract.
• To deliver testing, commissioning and calibration services and to issue certificates: necessary to perform our contract with the customer, and to comply with the requirements of our accredited quality system.
• To let anyone holding a certificate confirm that it is genuine: necessary for our legitimate interest, and our customers' interest, in preventing forged or altered certificates.
• To consider job applications: based on your consent.
• To keep the website, the portal and our records secure, to detect misuse and to investigate incidents: necessary for our legitimate interests in protecting our systems and our customers' data.
• To meet our obligations under Saudi laws and regulations, for example on commercial, tax and accounting records, and to respond to lawful requests from competent authorities.

Withdrawing consent

Where we rely on your consent, you may withdraw it at any time by contacting us. We will then stop the related processing without undue delay. Withdrawing consent does not affect processing that took place before you withdrew it.

The certificate verification page

Our public verification page allows anyone who has a certificate number or scans the QR code on a certificate or calibration label to check that we issued it. To make this possible, the page displays certificate details, including the customer name, the instrument description and identification, and the calibration and due dates.

The page does not display personal contact details such as email addresses or phone numbers. In most cases the customer is an organisation. If you are an individual customer and have questions about the details shown for your certificates, please contact us.

Who we share data with

We do not sell personal data. We share it only where necessary, and only with:

• Service providers that process data on our behalf, such as our website hosting provider and email services. We choose providers that can protect personal data, and they may use it only on our instructions and for the services they provide to us.
• Google, which delivers the fonts used on this website. When a page loads, your browser connects to Google's servers, which receive your IP address and basic browser information.
• The Saudi Accreditation Center (SAC), which may review our calibration records during accreditation assessments under its own confidentiality obligations.
• Professional advisers, such as lawyers and auditors, under a duty of confidentiality.
• Courts, government bodies and other competent authorities, where the law requires us to disclose data or where disclosure is necessary to protect our legal rights.

Transfers outside the Kingdom

Our website is hosted by a third-party provider, and some of our service providers, including Google, may store or process data on servers located outside Saudi Arabia.

Where personal data is transferred or disclosed outside the Kingdom, we do so only in accordance with the Law and its regulations on transfers. We limit each transfer to the minimum data necessary and rely on appropriate safeguards, such as contractual commitments that require the recipient to maintain a level of protection that is not lower than that required by the Law.

How long we keep data

We keep personal data only for as long as it is needed for the purpose for which it was collected, or for longer where the law requires it or where it is needed to establish or defend a legal claim. When data is no longer needed, we destroy it securely or anonymise it so that it no longer identifies you.

• Enquiries are kept for as long as needed to respond and follow up. If an enquiry leads to a contract, related records are kept for the duration of the relationship and any period required by law.
• Calibration records and certificates are kept for the period set by our quality management system, which reflects the requirements of ISO/IEC 17025, our accreditation and our contracts.
• CVs are kept for as long as needed for the recruitment process. With your agreement, we may keep your CV for future vacancies, and you may ask us to destroy it at any time.
• Server and security logs are kept for a limited period and then deleted.

How we protect your data

We apply organisational, administrative and technical measures to protect personal data against unauthorised access, loss, alteration or disclosure. These include:

• Encrypted connections (HTTPS) between your browser and our website.
• Access to the calibration portal limited to authorised staff, with permissions based on each person's role.
• Passwords stored in protected form, never as plain text, and forms protected against cross-site request forgery.
• Activity logging, regular backups and monitoring of our systems.
• Confidentiality obligations for our staff, in line with the impartiality and confidentiality requirements of ISO/IEC 17025.

Data breaches

If a personal data breach occurs, we will take immediate steps to contain it. Where the Law requires, we will notify the competent authority and inform the people affected, explaining what happened and what they can do to protect themselves.

Your rights

Subject to the conditions set out in the Law and its Implementing Regulations, you have the right to:

• Be informed of the legal basis and purpose of collecting and processing your personal data, and of how it is processed.
• Access the personal data we hold about you.
• Obtain a copy of your personal data in a clear and readable format.
• Request correction, completion or updating of your personal data if it is inaccurate or incomplete.
• Request destruction of your personal data when it is no longer needed for the purpose for which it was collected, unless we are required by law to keep it.
• Withdraw your consent to processing that is based on consent, at any time.

How to exercise your rights

To make a request, email us at the address shown on our Contact page with "Privacy request" in the subject line, or use the contact form. Please tell us which right you wish to exercise and give enough detail for us to find your data.

We may need to confirm your identity before acting on a request. We will respond within the period set by the Implementing Regulations, which is currently 30 days, and will let you know if an extension permitted by the Regulations is needed. There is no charge for a request.

Complaints

If you have a concern about how we handle your personal data, please contact us first so that we can try to resolve it.

You also have the right to submit a complaint to the competent authority, the Saudi Data and Artificial Intelligence Authority (SDAIA), in accordance with the procedures it sets.

Cookies

We use only the essential cookies needed to run this website, unless you agree to more. Our Cookie Policy explains each cookie and how to control them.

Children

This website is intended for businesses and professionals. It is not directed at children, and we do not knowingly collect personal data from anyone under 18 years of age.

Links to other websites

This website may link to websites operated by others. We are not responsible for their content or privacy practices, and we encourage you to read their privacy policies.

Changes to this policy

We may update this policy to reflect changes in our services or in the law. The date at the top of this page shows when it was last updated. Where a change materially affects how we use your personal data, we will make it clearly visible on this website.

Contact us

For any question about this policy or your personal data, contact MASO Dynamics using the email address or contact form on our Contact page.

---

Modular Automation & Smart Operations Dynamics Company L.L.C — Commercial Registration / Unified No. 7051005903. Building 4858, Al Hijrah Rd, Dhu Al Hulayfah Dist., Al Madinah Al Munawwarah 42393, Saudi Arabia