1. Data Controller & Scope
Omnexa Technology, registered in the Kingdom of Saudi Arabia, is the 'Data Controller' responsible for processing your personal data through the Teyalah mobile application and web interfaces. This policy applies to all clients, certified technicians, and operators.
2. Personal Data We Collect
We only collect data strictly necessary to facilitate home maintenance and protect transactions, including:
Full name, mobile number, email address, and verification credentials (national ID or freelancing licenses for technicians).
Precise GPS coordinates of the residential premises for technician dispatch, plus city and district metadata.
Escrow payment logs and tax invoices. (Note: Payment card data is processed directly via PCI-DSS compliant gateways; we never store raw card numbers).
Uploaded malfunction photos, receipts, and in-app chat text/audio messages used to document repairs and arbitrate disputes.
3. Legal Basis & Processing Purposes (PDPL)
In compliance with Article 6 of the Saudi Personal Data Protection Law (PDPL), processing is grounded upon the following legal bases:
- Contract Performance: Processing bookings, matching certified technicians, routing to address, and issuing invoices.
- Explicit Consent: Marketing updates and tailored recommendations, which you may opt-out of at any time.
- Legal & Regulatory Compliance: Complying with ZATCA electronic invoicing mandates, and lawful orders from competent Saudi authorities.
4. Data Sharing & Third-Party Disclosures
We enforce strict constraints on data disclosure, sharing details only in the following defined scenarios:
• With Assigned Technician: Only first name, location, and issue details are shared. Masked communication numbers are utilized to preserve private phone numbers.
• With Licensed Payment Gateways: Transaction processing via Saudi Central Bank (SAMA) licensed payment aggregators.
Strict Guarantee: We never sell, lease, or monetize your personal data with third-party marketers or advertisers under any circumstances.
5. Data Residency & Local Storage
In strict compliance with Saudi cybersecurity directives and the PDPL, all sensitive customer records are hosted on secure, certified cloud infrastructure located within the geographical borders of the Kingdom of Saudi Arabia, ensuring sovereign data protection.
6. Encryption & Security Controls
End-to-end TLS 1.3 protocol encryption securing all data in transit between your mobile app and our servers.
Database storage secured using industry-standard AES-256 encryption with hardware security module (HSM) key isolation.
7. Data Retention Policy
We retain personal data as long as your account remains active. Upon account deletion, records are securely erased or anonymized, excluding transactional records required by ZATCA to be archived for 5 years for statutory tax audits.
8. Data Subject Rights
Under the Saudi PDPL, you hold explicit rights that you can exercise at any time via our Privacy Center:
10. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not intentionally collect personal information from minors. Any discovered minor accounts are deleted immediately.
11. Contact Our Data Protection Officer
For inquiries or complaints regarding personal data processing, contact our Data Protection Officer directly:
We commit to resolving all data protection inquiries within 48 business hours.
Have a legal or privacy inquiry?
The Teyalah compliance and data protection team is ready to assist with all your questions and process requests promptly.