Privacy Policy

This policy covers www.stickeit.com and the Stickeit platform. For data our customers enter in the platform, the customer is the controller and we are the processor acting on its instructions. For website visitors, prospects and our own customer relationship, we are the controller.

• Using the platform (customers and their users): account details (name, email, mobile), branches, products, shelf lives, ingredients, allergens, nutrition values, names of the people who print, print records, B2B customer names and deliveries between branches. Why: to provide the service under the customer's agreement. Basis: performance of a contract.
• Demo requests and prospects: name, company, email, mobile and message. Why: to contact you and send the information or quotation you asked for. Basis: your consent, given when you submit the form.
• Billing: legal name, VAT number, billing contact and payment records. Why: invoicing and statutory accounting records. Basis: contract and legal obligation.
• Device and error data: the connected printer's name and technical error details. Why: to keep printing working and fix faults. Basis: our legitimate interest in a secure, reliable service.
• Payments: handled by a licensed payment gateway once online payment is enabled. We never store card numbers.

We contact customers and prospects by email, phone and WhatsApp about their account, support, invoices, renewals and quotations.

We may also send product news and offers by email to customers and to people who asked for a demo. Every such email has an unsubscribe link, and unsubscribing does not affect service emails about your account.

We may ask customers for feedback on the service, to keep improving it.

We never sell personal data or share it for others' marketing. We share it only with:

• Service providers listed below, who process it only on our written instructions.
• Professional advisers, such as lawyers, auditors and accountants, when they need it for their work for us.
• Authorities, when the law requires it, and where needed to protect our rights, our customers or others, to enforce our terms, or to prevent fraud and cyberattacks.

Each provider must keep the data confidential, use only trained and reliable staff, apply appropriate technical and organisational security, tell us promptly about any breach, and help us answer requests from you or the authorities.

Because some providers are outside the Kingdom, we apply the transfer safeguards required by the PDPL and its regulations, and we update this list when providers change.

Encrypted connections, each customer's data isolated in the database, permissions per user and per branch, two-step sign-in for the platform owner, sign-in attempt limits, and idle sessions ended after 30 days.

If a breach affects your data, we notify the customer without delay and notify the Saudi Data and AI Authority (SDAIA) within 72 hours where the regulations require it.

We keep data for the term of the subscription. After cancellation you can export it for 30 days; we then delete it within 90 days, except what the law requires us to keep, such as accounting records. If a free trial ends without a subscription, the data is kept for 90 days and may then be deleted. Demo requests are kept to follow up, and deleted on request. Data we no longer need is deleted or anonymised.

Only essential cookies, to keep you signed in and remember your workspace, plus a few preferences stored in your browser (last template, person printing, recent branches). We use no advertising, remarketing or analytics cookies.

Under the PDPL you may ask to be informed about how your data is used, to access it, receive a copy in a readable format, correct it, have it deleted, and withdraw your consent at any time. Withdrawing consent does not affect processing before it.

Email hello@stickeit.com and say which right you want to use. We confirm who you are before sharing any data, and reply within 30 days. If a customer of ours entered your data, for example your employer, we pass your request to that customer.

You may also complain to the Saudi Data and AI Authority (SDAIA).

Please tell us if your contact or billing details change, so the data we hold stays accurate.

We may update this policy. The date at the top shows the latest version, and we notify customers of material changes.