Privacy Policy
Last updated: July 2026
1. Introduction
Athar Card is committed to protecting the privacy of its visitors and users in line with the Saudi Personal Data Protection Law (PDPL). This policy explains what data we collect and how we use and protect it.
2. Data we collect
When you visit a public profile we record anonymous usage events (page views, clicks, contact saves) with country and source. IP addresses and browser fingerprints are stored only as irreversible hashes. When you use the "Share your details" form we collect the name, phone or email, and note you voluntarily enter.
3. Explicit consent
Your details in the exchange form are stored only after your explicit consent via the consent checkbox, and are shared exclusively with the card owner and the company managing their account.
4. How data is used
Data is used solely to provide the service: rendering profiles, usage statistics for the card-owning company, and enabling the card owner to contact you if you share your details. We never sell data and never share it with third parties for marketing. The public website uses Google Analytics 4 (measurement ID G-JPQ6H7W6LQ) only after you accept analytics cookies. It receives the paths of Athar's public pages and the campaign tags in the link (such as utm_source or gclid) — never signed-in pages, payment or activation links, or the card pages of our customers' employees, from which nothing is sent to Google at all. If you also accept marketing cookies, the same campaign tags are stored with an order you place, so we know which campaign brought you.
5. Cookies
Essential cookies run the site: language preference, theme, and the sign-in session for account managers. Analytics cookies (Google Analytics 4) are set only with your consent in the cookie notice, where you can accept or refuse them in one tap. Marketing cookies (the TikTok Pixel, to measure our TikTok ads) are set only with your separate consent to marketing cookies, on Athar's public pages only — never on account, payment or employee profile pages — and carry no name, e-mail or phone.
6. Your rights
You may request access to, correction of, or deletion of your data at any time; we answer within 30 days. Signed in, you can download a copy of your data and send a deletion request yourself (account settings, or the employee portal for employees). If you shared your details via the exchange form and want them removed, contact us.
7. Data security
Our customers' database and files are kept on our servers inside Saudi Arabia, with full isolation between companies, one-way hashed passwords, AES-256 encrypted daily backups, and role-restricted access. A few supporting services may process limited data outside the Kingdom — the e-mail provider that delivers our messages, the cloud storage that holds our already-encrypted backups, the network that protects the site, and analytics only after your consent; the Arabic policy (the binding version) lists them. We review our security practices regularly.
8. Contact
For any privacy inquiry or deletion request, email [email protected] (the address the binding Arabic policy names).