01Who we are

BAT — Smart Energy Solutions (“we”) is based in Riyadh, Saudi Arabia, and operates batapp.sa. This policy explains what personal data the website collects, why, where it is kept, and how to exercise your rights under the Kingdom’s Personal Data Protection Law (PDPL) and its implementing regulations.

02What we collect

We collect the minimum needed to reply to you — nothing more.

03Stored on your device

The site uses your browser’s local storage (not cookies) for two items only:

You can clear both at any time from your browser settings (clear site data).

04How we use it

• To contact you about your request or question.
• To send you the product information, quote, or partnership details you asked for.
• To protect the website and form from abuse and automated spam.

We do not sell or rent your data, use it for targeted advertising, or send you marketing you didn’t ask for.

Legal basis: your consent when you submit the form. You can withdraw it at any time (see “Your rights”); withdrawal doesn’t affect processing that happened before.

05Service providers

We rely on technical service providers who process data on our behalf, only to run the website:

Fonts and libraries are self-hosted, so your browser doesn’t contact other parties to load them. We may disclose data to competent authorities where the law requires it.

06Transfers outside Saudi Arabia

The providers above may process or store data in data centres outside the Kingdom of Saudi Arabia. We keep this to the minimum needed to run the service, within the controls set by the PDPL and the Regulation on Personal Data Transfer outside the Kingdom.

07Retention

We keep interest-form data for no longer than 24 months from our last contact, then delete it — or sooner, whenever you ask.

08How we protect it

• Mandatory encrypted connections (HTTPS) on every page, with HSTS.
• A Content Security Policy that blocks any script from outside the site.
• Every input is sanitised before storage; the form is protected against flooding and bots.
• Access to the data is limited to authorised people at BAT.

If a breach affects your data, we notify the Saudi Data & AI Authority (SDAIA) within the statutory period, and notify you where required.

09Your rights

• To be informed about what we collect and why — this page.
• Access: request a copy of your data.
• Correction: have inaccurate or incomplete data fixed.
• Deletion: have your data destroyed once it’s no longer needed.
• Withdraw consent at any time.

Email admin@batapp.sa from the email or number you registered with, so we can verify it’s you. We reply within 30 days. You may also lodge a complaint with SDAIA, the competent authority.

10Minors

The site is intended for adults and businesses. We don’t knowingly collect data from anyone under 18, and delete it if we learn we have.

11Changes to this policy

If we change how we process data, we update this page and the date above. Material changes will be highlighted on the site.

12Contact

Privacy questions: admin@batapp.sa — Riyadh, Saudi Arabia.