Privacy Policy | Artaltech

Artaltech (“Artaltech,” “we,” “us,” or “our”) is committed to protecting privacy and handling personal data responsibly, securely, and transparently.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you visit our websites, communicate with us, or use our digital platforms, applications, products, and services, including CEIVEX.

This Privacy Policy applies only to privacy and personal data practices. The use of our products and services may also be subject to separate Terms and Conditions and contractual agreements.

1. Personal Data We Collect

The personal data we collect depends on how you interact with Artaltech and our services. It may include:

Contact and Identity Data
Name, business email address, telephone number, company name, job title, and other information you voluntarily provide.

Account Data
User identifiers, account details, authentication information, preferences, permissions, and account activity.

Device and Technical Data
IP address, browser type, device identifiers, operating system, application information, access times, system logs, and diagnostic information.

Location, Vehicle and Telematics Data
Where CEIVEX or another Artaltech service is used for connected vehicles or assets, we may process GPS location, routes, trips, vehicle or asset identifiers, speed, mileage, ignition status, driving events, sensor information, alerts, and other telematics or IoT-generated data.

Communications and Support Data
Information contained in inquiries, customer support requests, service communications, feedback, and correspondence with us.

Usage Data
Information regarding how users interact with our websites, applications, platforms, features, and services.

2. How We Use Personal Data

We process personal data only for legitimate and specified purposes, which may include:

Providing, operating, securing, and maintaining our services;

Managing user accounts and access permissions;

Delivering vehicle tracking, fleet management, IoT, telematics, analytics, reporting, alerts, and related functionality;

Providing technical support and responding to inquiries;

Monitoring service performance, availability, reliability, and security;

Preventing fraud, abuse, unauthorized access, and cybersecurity incidents;

Improving our platforms, products, services, and user experience;

Communicating important service, security, administrative, and product information;

Meeting contractual, regulatory, and legal obligations; and

Establishing, exercising, or defending legal rights where necessary.

We do not process personal data for purposes incompatible with those for which it was collected unless permitted or required by applicable law.

3. Legal Basis for Processing

We process personal data only where a lawful basis exists under applicable data protection legislation.

Depending on the circumstances, processing may be based on consent, contractual necessity, compliance with legal or regulatory obligations, legitimate interests where recognized by applicable law, or another lawful basis.

Where consent is required, it may be withdrawn in accordance with applicable law.

4. Location and Telematics Data

Certain Artaltech services, including CEIVEX, are designed to process data generated by connected vehicles, assets, GPS devices, sensors, and IoT systems.

This may include current and historical location, routes, trips, vehicle status, driving events, device activity, sensor readings, and other telemetry.

When such information is processed on behalf of an organization using our services, that organization is generally responsible for determining the lawful basis and purpose for collecting and using the information and for providing any required notices to its employees, drivers, contractors, customers, or other individuals.

Artaltech processes such information in accordance with applicable law, customer instructions, and applicable contractual requirements.

5. Data Sharing and Disclosure

Artaltech does not sell personal data.

We may disclose personal data only where necessary and appropriate, including to authorized service providers, technology partners, cloud infrastructure providers, mapping and communications providers, cybersecurity providers, professional advisers, and other parties supporting the delivery and security of our services.

We may also disclose information where required by applicable law, regulation, court order, or a lawful request from an authorized governmental or regulatory authority.

Where third parties process personal data on our behalf, we require appropriate confidentiality, security, and data protection safeguards.

6. International Data Transfers

Where personal data is transferred outside the Kingdom of Saudi Arabia, we implement appropriate safeguards and comply with applicable requirements governing cross-border transfers of personal data.

Transfers are conducted only where legally permitted and subject to safeguards appropriate to the nature and sensitivity of the information.

7. Data Security

We implement technical, organizational, and administrative safeguards designed to protect personal data against unauthorized access, alteration, disclosure, misuse, loss, or destruction.

Depending on the nature of the processing, these safeguards may include access controls, authentication mechanisms, encryption, security monitoring, logging, backup and recovery procedures, vulnerability management, and incident-response processes.

No system can guarantee absolute security. We continuously evaluate and improve our safeguards in accordance with risk, technology, and applicable requirements.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by applicable legal, regulatory, contractual, security, or legitimate business requirements.

Retention periods may vary depending on the type of information, the service involved, and applicable obligations.

When personal data is no longer required, it is securely deleted, destroyed, or anonymized in accordance with applicable requirements.

9. Cookies and Similar Technologies

Our websites and digital services may use cookies and similar technologies for essential functionality, security, preferences, performance measurement, and analytics.

Where required by applicable law, we obtain appropriate consent before using non-essential cookies or similar technologies.

Additional information may be provided through a separate Cookie Policy or cookie-management interface.

10. Your Privacy Rights

Subject to applicable law, individuals may have rights concerning their personal data, including the right to:

Access information regarding the processing of their personal data;

Obtain access to personal data held about them;

Request correction or completion of inaccurate or incomplete data;

Request deletion or destruction of personal data where legally applicable;

Withdraw consent where processing relies on consent;

Obtain a copy of their personal data where applicable; and

Exercise other rights provided under applicable data protection legislation.

We may verify the identity of a person making a request before fulfilling it and may apply exceptions or limitations permitted by law.

11. Business Customer Data

Artaltech provides technology and platform services to businesses and organizations.

Where we process personal data through CEIVEX or another Artaltech service on behalf of a customer, the customer may act as the relevant data controller or otherwise determine the purposes and means of processing, while Artaltech acts as a processor or service provider, as applicable.

In such circumstances, privacy requests relating to customer-controlled data should generally be directed to the relevant customer. We will support our customers in responding to valid requests where required.

12. Privacy by Design

We aim to incorporate privacy and data protection considerations throughout the design, development, operation, and improvement of our products and services.

We seek to limit personal data processing to what is reasonably necessary for defined purposes and apply safeguards proportionate to the nature and sensitivity of the information.

13. Children's Privacy

Our websites, platforms, and business services are not generally directed to children.

We do not knowingly collect personal data directly from children through our general corporate services except where such processing is authorized and permitted under applicable law.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or privacy practices.

The current version will be published on this page, and the “Last Updated” date will indicate when the Policy was most recently revised.

15. Contact Us

For questions, concerns, or requests regarding privacy or the processing of personal data, please contact:

Artaltech

Kingdom of Saudi Arabia
Contact : [email protected]