Privacy and Personal Data Protection Policy

1. Introduction & Scope

7teams Information Technology Company ("7teams", "we", "us", "our") is dedicated to protecting the privacy, integrity, and confidentiality of personal data belonging to our users, educational institutions, commercial enterprises, trainees, and students. This Privacy Policy details how we collect, use, process, disclose, and safeguard personal data when you access our website (www.7teamstech.com), our virtual reality simulations, classroom apps, and enterprise management platforms, in strict accordance with the Saudi Personal Data Protection Law (PDPL, Royal Decree No. M/19) and its implementing regulations.

2. Personal Data We Collect

We collect only the minimum necessary information required to deliver virtual reality education and vocational training simulations, manage licenses, and maintain platform security:

• Identity & Contact Information: Full name, email address, phone number, institution or school name, job title, and entity classification (Government, Military, Private, Non-profit).
• Account & Subscription Data: Selected tier, subscription lifecycle dates, allocated licenses, and headset hardware inventory.
• Payment & Invoicing Information: Payments are processed through secure, SAMA-authorized payment gateways (including Moyasar). Card details (Mada, Visa, MasterCard, Apple Pay) are encrypted under global PCI-DSS standards. 7teams does not store complete cardholder payment data on its servers.
• Simulation & Performance Metrics: Trainee and student performance data generated inside virtual experiments (step execution sequence, completion time, mastery rate, and assessment results).
• Technical & Device Data: Device model, VR headset ID, operating system version, IP address, and system diagnostic logs for stability monitoring.

3. Legal Basis & Purposes of Data Processing

Your personal data is processed based on your explicit consent or the necessity to execute our service contract with your institution, for the following purposes:

• Creating accounts, activating curriculum and course licenses, and deploying VR training.
• Processing electronic payments and issuing official electronic tax invoices in accordance with ZATCA regulations.
• Providing prompt technical support, customer care, and hardware maintenance assistance.
• Generating analytical performance indicators for teachers, instructors, and educational administrators.
• Enhancing VR simulations and algorithmic accuracy based on aggregated, anonymized analytical insights.
• Complying with applicable legal, statutory, and regulatory mandates in the Kingdom of Saudi Arabia.

4. Data Sharing & Third-Party Disclosures

We uphold strict confidentiality standards and do not sell, rent, or lease personal data to third parties. Disclosures are limited to:

• Authorized Payment Gateways (Moyasar): To securely verify and complete payment transactions.
• Certified Cloud & Infrastructure Partners: Cloud data providers hosting secure, encrypted infrastructure compliant with Saudi national cybersecurity and data residency frameworks.
• Government & Regulatory Authorities: When legally mandated by formal statutory order from Saudi judicial or regulatory bodies.

5. Data Security & Retention

We deploy robust administrative, physical, and technical safeguards, including transport layer encryption (SSL/TLS), strict role-based access controls, firewalls, and regular security audits.

Personal data is retained for the active duration of your subscription or contract, plus any mandatory retention period required by Saudi tax and accounting regulations, after which it is securely deleted or anonymized.

6. Your Rights Under Saudi PDPL

Under the Saudi Personal Data Protection Law, data subjects enjoy the following enforceable rights:

• Right to be Informed: Understanding the legal basis and purpose behind data collection.
• Right of Access: Requesting a copy of your personal data processed by 7teams.
• Right to Rectification: Requesting updates or corrections to inaccurate or incomplete data.
• Right to Erasure: Requesting the deletion of personal data when no longer needed, subject to statutory limits.
• Right to Withdraw Consent: Withdrawing consent at any time for non-contractual processing activities.

7. Cookies & Tracking Technologies

We use essential cookies to maintain secure sessions, preserve language preferences, and ensure seamless navigation. You can modify your browser settings to decline cookies, though certain features may experience limited functionality.

8. Contact Our Data Protection Officer

For any questions regarding this Privacy Policy or to exercise your statutory rights, please contact our Data Protection Office: