Privacy Policy

RMZH SMART — Unified National Number 7055239201

Last updated: September 24, 2026

Who we are

RMZH SMART ("we", "us") is a Saudi company based in Jeddah, providing automation, artificial intelligence, and WhatsApp Business Platform integration services to businesses. This policy explains how we collect, use, and protect personal data when you use our website rmzh.sa or our services, in line with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

Data we collect

From our business clients: business and contact person names, phone numbers, email addresses, commercial registration details, billing information, and content they provide to operate the service (such as product or property listings).

From people who message our clients on WhatsApp: phone number, WhatsApp profile name, message content and media, message timestamps and delivery status, and any information voluntarily shared in the conversation (such as request type, budget, or viewing appointments).

From website visitors: basic technical data such as browser type, IP address, pages visited, and information submitted through contact forms.

Our role

When we provide services to a business, that business is the controller of its customers' data and is responsible for determining the purposes of processing and obtaining consent where required. We process that data on the business's behalf, only on its instructions, and only to deliver the agreed service. For our direct clients and website visitors, we are the controller.

How we use data

• Receiving messages and replying automatically or routing them to the right staff member at our client.
• Managing requests, booking appointments, and sending related reminders and notifications.
• Sending marketing messages on behalf of our clients only to people who have opted in.
• Providing our clients with reports and statistics on their service performance.
• Operating, improving, and securing our services, and communicating with clients about their accounts and billing.
• Complying with applicable laws and responding to competent authorities.

Artificial intelligence

Some message content may be processed by third-party AI models to understand requests and draft appropriate replies. This processing may take place outside Saudi Arabia under those providers' terms, and we send them only the part of the conversation needed to draft a reply. Anyone can ask to speak with a human at any time.

Data sharing

We share data only as needed to deliver the service, and only with:

• Meta Platforms (provider of the WhatsApp Business Platform) to send and receive messages.
• Hosting, server, and database providers that run our services.
• The AI service providers described above.
• The business you are communicating with, as your conversation data belongs to them.
• Competent government authorities where required by law.

International transfers

Some data may be processed or stored by service providers outside Saudi Arabia. Where this happens, we follow the applicable legal requirements for cross-border transfers and choose providers offering an appropriate level of protection.

Data retention

We keep data for as long as we provide the service to our client, and delete or anonymize it within 90 days of the end of the contract or the client's request, unless the law requires longer retention.

Security

We apply technical and organizational measures to protect data, including encrypted connections, access restricted to authorized personnel, two-factor authentication on administrative accounts, and regular review of our systems.

Your rights

Under the PDPL you have the right to:

• Be informed about how and why your data is collected and processed.
• Access your data and obtain a copy of it.
• Request correction or updating of your data.
• Request destruction of your data when it is no longer needed.
• Withdraw your consent to processing or to receiving marketing messages.
• File a complaint with the competent authority in Saudi Arabia.

Data deletion and opting out

To stop marketing messages from any business using our services, reply "STOP" (or «إيقاف») in the same WhatsApp conversation and messaging to you will stop.

To request deletion of your data, email sales@rmzh.sa with the subject "Data Deletion Request", including the phone number used in the conversation and the name of the business you contacted. We will verify and complete your request within 30 days and confirm it to you.

Children

Our services are intended for businesses, and we do not knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy as needed and will show the last updated date at the top. We will notify our clients in advance of any material changes.

Contact us

RMZH SMART
Address: Jeddah, Saudi Arabia
Email: sales@rmzh.sa
Phone: +966 55 667 5375