GDPR Compliance

The General Data Protection Regulation (GDPR) is a comprehensive data protection law enacted by the European Union that took effect on May 25, 2018. It gives individuals greater control over their personal data and imposes strict requirements on organizations that collect, store, or process personal data of EU residents.

Even though CodeTech Solutions is headquartered in Saudi Arabia, we comply with GDPR for all customers and users regardless of their location, as we believe everyone deserves strong data protection.

• Privacy by Design: Data protection is built into our product development process from the ground up.
• Data Minimization: We only collect data that is necessary for the services we provide.
• Encryption: All personal data is encrypted at rest (AES-256) and in transit (TLS 1.3).
• Consent Management: We obtain clear consent before processing personal data and make it easy to withdraw consent.
• Breach Notification: In the event of a data breach, we will notify affected users and relevant authorities within 72 hours.
• Regular Audits: We conduct regular internal audits and third-party assessments of our data protection practices.

For enterprise customers who require a Data Processing Agreement (DPA), we provide a comprehensive DPA that covers:

• Nature and purpose of data processing
• Types of personal data processed
• Sub-processor obligations
• Security measures and breach notification procedures