Privacy Policy

Smart Valley Business Solutions ("Smart Valley", "we", "us", "our") respects your privacy and is committed to protecting it through this Policy. This page explains what information we collect when you visit our website or interact with our services, how we use it, where it is stored, and the rights you have over it.

Information We Collect - **Contact information you provide:** name, email, phone number, company name, role, and any message or project details you submit through contact forms or the assessment request. - **Lead-qualification chatbot:** when you interact with our floating AI assistant, we store the full conversation transcript along with any contact details, business needs, budget, or timeline you share, so our team can follow up with a relevant proposal. - **Technical data collected automatically:** IP address, browser type and version, device type, operating system, referring URL, pages visited, and timestamps. This is collected using cookies and similar technologies (see our Cookie Policy). - **Communications:** records of emails, calls, and meetings you have with our team.

We do not knowingly collect data from children under 18 and do not request sensitive personal data (e.g., government IDs, financial account numbers) through our website.

How We Use Your Information - Respond to your inquiries, requests for assessments, quotes, and proposals. - Qualify leads and prepare relevant ERP consulting recommendations. - Deliver, customize, and support the services you have engaged us for. - Improve our website, content, and AI assistant performance. - Send service-related communications and, only with your consent, marketing or insights emails (you can unsubscribe at any time). - Comply with legal, regulatory, and contractual obligations.

We do not sell, rent, or trade your personal information.

Where We Store Your Data - Lead submissions and chatbot transcripts are stored in our secure managed cloud database (Lovable Cloud / Supabase infrastructure) with row-level security policies. - Email communications are stored in our business email and CRM systems. - Data may be processed on servers located outside the Kingdom of Saudi Arabia by trusted infrastructure providers operating under appropriate safeguards.

Data Sharing We share information only with: - Trusted service providers who help us operate (cloud hosting, database, AI processing, email delivery, analytics) under written confidentiality and data-processing terms. - Competent authorities when required by Saudi law, court order, or to protect our legal rights. - Successors in the event of a merger, acquisition, or restructuring, with prior notice where required by law.

We never share your data with advertisers or unrelated third parties for their own marketing.

Data Retention - Lead and chatbot data is retained for as long as needed to follow up on your inquiry and for a reasonable period thereafter for record-keeping (typically up to 24 months from last interaction), unless a longer period is required by law or by a signed engagement. - Technical/analytics logs are retained for shorter periods (typically up to 12 months). - You may request earlier deletion at any time (see "Your Rights").

Data Protection We use industry-standard technical and organizational measures to safeguard your data, including: - Encryption in transit (HTTPS/TLS) for all website and API traffic. - Access controls and least-privilege permissions on our backend systems. - Row-level security policies on stored lead data. - Regular review of our service providers' security practices.

No system is 100% secure; in the unlikely event of a data incident affecting your information, we will notify you and the relevant authorities as required by Saudi law.

Your Rights You have the right to: - Access the personal information we hold about you. - Request correction of inaccurate or incomplete data. - Request deletion ("right to be forgotten") of your data, subject to legal retention requirements. - Withdraw consent for marketing communications at any time. - Object to or restrict certain processing.

To exercise these rights, email privacy@smartvalley.sa. We respond within 30 days.

Cookies Our website uses cookies and similar technologies for essential functionality, performance analytics, and remembering your language preference. See our Cookie Policy for details and how to manage your preferences.

Third-Party Platforms Our services often involve third-party ERP platforms (such as Odoo). When you use those platforms directly, their own privacy policies apply to data you submit within them. Smart Valley is not responsible for the privacy practices of third-party platforms outside the scope of our consulting engagement.

Changes to This Policy We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this page reflects the latest revision. Continued use of our website after changes constitutes acceptance.

Contact For privacy questions, data requests, or complaints: - Email: **privacy@smartvalley.sa** - Address: Smart Valley Business Solutions, Riyadh, Kingdom of Saudi Arabia.