Last updated:

Privacy policy

We collect the minimum data needed to provide and protect our services, in line with applicable Saudi laws.

Data controller: iHelp, an independent professional business operating under Freelance Certificate No. FL-389096155, based in Buraydah, Al-Qassim, Saudi Arabia. Privacy requests: info@ihelp.co.

1. Scope of this policy

This policy explains how we collect, use, share and protect personal data when you visit ihelp.co or use portal.ihelp.co, iHelp services, plugins or hosting. It applies to clients, users, website visitors and people who contact us.

2. Data we may collect

  • Identity and contact data: Name, email address, mobile number, address, and business or authorised-representative details.
  • Account and service data: Login information, connected websites, plan, subscription, orders, project files, correspondence and support tickets.
  • Billing and payment data: Saved orders, invoices, bank-transfer receipts, amounts, transaction status, references and payment methods, and details of upgrade credit and refunds. The payment provider processes card details; we do not store full card numbers or card verification codes.
  • Content and media data: Photos, files and metadata uploaded by clients to hosting services or supplied for use in their projects.
  • Technical and security data: IP address, browser and device type, login, activity and error logs, and essential cookies.

3. How we obtain data

We obtain data directly when you create an account, order a service, pay or contact us; automatically through websites, the Portal and connected plugins; or from payment, hosting and communications providers as needed to confirm transactions and operate and protect the service.

We may send a verification code to the contact method used to create or access an account. We process verification data to confirm access to that contact method and protect the account. Requesting a code does not constitute consent to marketing messages.

4. Purposes and legal bases for processing

  • Creating accounts, fulfilling orders and contracts, providing support, and managing subscriptions and invoices.
  • Verifying payments, preventing fraud, and protecting accounts and services.
  • Communicating about services, renewal, interruptions and important updates.
  • Meeting legal and accounting obligations and responding to competent authorities.
  • Improving performance and user experience using the minimum necessary data.

Depending on the circumstances, our legal basis is performing a contract with the data subject, meeting a legal obligation, consent, or a legitimate interest that does not conflict with the data subject’s rights.

5. Disclosure to service providers

We do not sell personal data. We may disclose the minimum necessary data to providers working on our behalf, such as Moyasar for payment processing, WordPress.com for public-website hosting, Cloudflare for content security, delivery and media hosting, the client Portal hosting provider, Zoho for email, and Msegat for messaging. We may also disclose data to competent authorities where legally required or to protect a legitimate right.

6. Processing locations and transfers outside Saudi Arabia

Some technology providers may process data inside or outside Saudi Arabia, depending on their cloud infrastructure locations. Where data is transferred outside Saudi Arabia, we comply with the applicable legal requirements and limit transfers to what is necessary to provide and protect the service.

7. Cookies

Our websites and Portal use essential cookies for sessions, security, login and language preferences. Limited performance-measurement tools may also be used if enabled. Browsers can block non-essential cookies, but blocking essential cookies may prevent login or payment completion.

We also use the session to retain cart selections when you move to login and payment. Service messages may contain private links for viewing an order or invoice and continuing payment. Keep these links confidential: anyone who receives them may be able to view the details available through them. Bank-transfer receipt files remain restricted to authorised accounts.

8. Retention and deletion

We retain data for as long as needed to provide and support the service, settle payments, protect rights and meet legal requirements. Once the purpose ends, we delete or anonymise it unless longer retention is required by law or an ongoing dispute. Limited copies may remain in backups until the secure deletion cycle is completed.

Expiry of an unpaid order does not mean immediate deletion of its records; they may be needed to verify a payment or resolve a dispute. Cancelling a subscription or deleting photos does not erase financial records that must be retained. Photo availability and download periods are separate from financial-record retention. See the Terms and conditions for the private 60-day recovery period after a paid pause expires and the other cases in which photo display or downloads stop.

9. Data security

We apply appropriate technical and organisational measures, including encrypted connections, access controls, credential protection, backups, log monitoring and limiting the data available to each provider. No electronic method is entirely risk-free. We therefore respond to incidents and report them as required by applicable law.

10. Your rights

Under the Saudi Personal Data Protection Law, and subject to the circumstances and legal limitations, you have the following rights:

  • Right to be informed: To know how your data is collected, the legal basis and purpose of processing, and the parties to whom it may be disclosed.
  • Right of access and to obtain a copy: To access the personal data we hold about you and request a clear, readable copy.
  • Right to correction: To request that your data be corrected, completed or updated.
  • Right to request deletion: To request deletion of data that is no longer needed, unless there is a legal basis for retaining it.
  • Right to withdraw consent: To withdraw consent where consent is the basis for processing, without affecting processing based on another legal basis.
  • Right to complain: To submit a complaint to the competent authority if your request cannot be resolved with us.

To exercise a right or raise an objection, email info@ihelp.co with a description of your request and sufficient information to verify your identity, without sending more data than necessary. We respond within the legally required period and may request additional information if we cannot verify the requester’s identity.

11. Other people’s data and photos

Clients who upload other people’s photos or data are responsible for having a lawful basis and appropriate consent to process and publish them. We process that content to deliver the service under the client’s instructions and do not use it for marketing without separate permission.

12. Updates and contact

We may update this policy when the service, processors or legal requirements change. The latest update date appears at the top of the page. We will draw attention to material changes in an appropriate way. For privacy questions or complaints, contact info@ihelp.co.