Privacy Policy
ProdLinc's Privacy Policy
This Policy is written to operate under the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL). It is ProdLinc's real, current Privacy Policy, not placeholder text, though we recommend independent legal review before relying on it for a commercial launch.
Who We Are
This Privacy Policy explains how ProdLinc ("we," "us") collects, uses, discloses, and protects personal data belonging to Buyers, Sellers, and Promoters who use the Platform. ProdLinc acts as the data controller for the personal data described in this Policy and processes it in accordance with the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL) and its Implementing Regulations, issued and supervised by the Saudi Data and Artificial Intelligence Authority (SDAIA).
Personal Data We Collect
We collect the information you provide directly, such as your full name, email address, and password at sign-up, plus any store details, bio, country, or bank/payout details you add as a Seller, or link and promotion data as a Promoter. We also collect information generated by your use of the Platform, such as purchase and order history, course progress, uploaded product files, reviews, and messages, as well as limited technical data like IP address, device and browser type, and cookie identifiers.
Why We Process Your Data
We process your personal data to create and operate your account, deliver purchased products and course content, process payments through our payment provider, enable Seller storefronts and Promoter links, communicate with you about your account or orders, detect fraud and abuse (including automated bot-detection at sign-up), moderate listed content, and comply with Saudi legal, tax, and anti-money-laundering obligations. Our legal bases for this processing are your consent, the necessity of processing to perform our contract with you, and our legitimate interest in keeping the Platform safe and lawful.
Who We Share Data With
We do not sell your personal data. We share only what is necessary with: our payment processor (currently Moyasar) to complete transactions; our cloud hosting and database provider (Supabase) to store account and platform data securely; and competent Saudi authorities where required by law, court order, or valid regulatory request. Sellers can see the name and order details of Buyers who purchase from them, to the extent needed to fulfill support requests.
Cross-Border Data Transfer
Some of our service providers may process or store data outside the Kingdom of Saudi Arabia. Where this occurs, we take reasonable steps consistent with the PDPL's requirements to ensure the destination country or the receiving party provides an adequate level of protection for personal data, including through contractual safeguards with our providers.
Data Retention
We keep your personal data while your account is open. You can download a copy of it, or delete your account, at any time from Settings. Deleting removes your name, date of birth, reviews, comments, wishlist, cart, follows, notifications, course progress and saved bank details, and closes any store. Records of orders, refunds, payments and payouts are kept for 10 years, and a seller's ID details for 10 years after their last sale, because Saudi commercial and tax record-keeping rules require it.
Your Rights
Under the PDPL, you have the right to know what personal data we hold about you, to access and obtain a copy of it, to request correction of inaccurate data, to request deletion of your data, and to withdraw any consent you previously gave, subject to legal or contractual limits. To exercise any of these rights, email us at support@enubb.com. If you believe your rights have not been respected, you may also file a complaint with SDAIA.
Cookies and Similar Technologies
We use essential cookies to keep you signed in and remember your language, currency, and theme preferences, and functional cookies to track which Promoter link referred a visitor to a product page, so commissions can be calculated correctly. We do not use cookies for third-party advertising.
Children's Privacy
ProdLinc is not directed at, and is not intended for use by, individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact us at support@enubb.com so we can remove it.
Data Security
We use industry-standard technical and organizational measures, including encrypted connections, access controls, and row-level security on our database, to protect your personal data from unauthorized access, alteration, or disclosure. No online platform can guarantee absolute security, and you should also keep your own password confidential.
Changes to This Policy
We may update this Privacy Policy as our Platform, services, or applicable law evolve. We will post the updated Policy here with a new effective date, and will highlight material changes at your next login.
Contact Us
For any question about this Privacy Policy or to exercise your PDPL rights, contact ProdLinc support at support@enubb.com.