Privacy Policy

1. Introduction

Your privacy is important to Internet of Things Technologies for Information Technology (hereinafter referred to as “iot squared”, “we”, “our” or “us”). In this notice “you” or “your” refers to the data subject (customers, vendors, partners, website visitors and other external parties) whose Personal Data is processed by us. When you use our services, you trust us with your information. We understand this is a significant responsibility, and we work hard to protect your information and put you in control.

This privacy notice explains the Personal Data we handle, how we process it, and for what purposes. It is formulated in accordance with the Personal Data Protection Law and its Implementing Regulation in the Kingdom of Saudi Arabia; to help you understand the nature of the Personal Data we collect from you and how it will be treated by us. For the purposes of this notice, “Personal Data” means any data, regardless of its source or form, that may lead to identifying an individual specifically, or that may directly or indirectly make it possible to identify an individual, including name, personal identification number, biometric data such as finger-print or face recognition, addresses, contact numbers, license numbers, records, personal assets, bank and credit-card numbers, photographs and videos of an individual, and any other data of a personal nature.

This privacy notice applies to all our sectors and business units. All our staff, contractors and vendors working on a permanent or temporary basis are obliged to follow the standards set out herein. The Personal Data of iot squared employees and job candidates is addressed in a separate Internal Privacy Notice.

2. Who We Are

iot squared enables Internet of Things, connectivity and digital-services solutions for enterprises, government entities and consumers in the Kingdom of Saudi Arabia and the wider region.

3. Why We Collect and Use Your Personal Data

To provide you with the highest standard of service and products, we collect and use your Personal Data on the basis of the following legal grounds:

a) Consent

Personal Data is processed after obtaining your consent (for example, for sales and marketing purposes).

b) Contract

Personal Data is processed to fulfil our contractual obligations for the performance of a service agreement to which you are a party.

c) Actual Interests

Personal Data is processed where it serves your actual interests, but communicating with you is impossible or difficult.

d) Legal Obligation

Personal Data is processed where required to comply with regulatory requirements — including but not limited to national security, protection of public health, or to satisfy judicial requirements or respond to a lawsuit.

e) Legitimate Interests

Personal Data is processed where necessary for the purpose of our legitimate interests. Legitimate interest means the interest of iot squared in conducting and managing its business and enabling us to give you the best service and the most secure experience.

The purposes of the Personal Data collection include the following:

a) Enabling us to develop, enhance, market and/or deliver products and services to you, including Internet-of-Things, connectivity, platform, cybersecurity and digital-services offerings.

b) Supporting our operations and systems to ensure continuity and quality of service, providing accurate billing, and processing payments for products and services.

c) Understanding your needs as a customer, your eligibility for products and services, and recommending products and services that are relevant to you.

d) Communicating about new products, services and features launched.

e) Resolving any queries or complaints you may have and providing a personalized customer experience across all our channels.

f) Providing reports to third parties or to our enterprise clients where such reports do not contain personal information about you or any information that may identify you as a person, in accordance with international and local law. For credit checks in certain scenarios (for example, when contracting for new products or services), we sometimes supplement the information we collect about you with information from other sources, such as data from governmental entities, to assess the accuracy of the information we hold.

In addition, we may work with other entities to ensure quality of service is provided. If your Personal Data is disclosed to those entities, it shall be restricted to the purposes specified in this notice and for which you have provided consent.

4. What Personal Data We Collect and Use

We collect Personal Data from you through our interactions with you and through our products and services. You provide some of this Personal Data directly, and we obtain some of it by collecting data about your interactions, use and experiences with our services.

The main types of Personal Data we collect include:

• a) Personal Data required when registering with our services (such as name, email address, address, phone number, date of birth, nationality and gender).
  Mandatory to collect
• b) Personal Data required for your use of our services, websites (such as cookies and usage data).
  Mandatory to collect
• c) Personal Data exchanged during communications with you (such as customer support requests and feedback).
  Optional to collect
• d) Device data for product recommendations and resolving technical complaints (such as device identifier, model, operating-system version and connectivity data).
  Mandatory to collect
• e) Telemetry, sensor and connectivity data generated by your use of Internet-of-Things devices and connectivity services provided by iot squared, to operate the service, support you and improve our products.
  Mandatory to collect
• f) Personal Data is required to improve operational services and resolve network-related complaints (such as location data).
  Optional to collect
• g) Personal Data captured through video surveillance (such as identity and image data). We may perform video surveillance to ensure the safety and security of our employees, visitors, and business partners present at our offices and premises.
  Optional to collect

Such Personal Data is only processed for the purposes for which it is collected. However, we may collect your Personal Data indirectly, or process Personal Data for a purpose other than that for which it was collected, in the following cases:

• If you consent, in accordance with the provisions of the Personal Data Protection Law.
• If the Personal Data is publicly available, or collected from a publicly available source, without prejudice to the provisions of the Personal Data Protection Law.
• If compliance with the above restriction may cause harm to you or affect your vital interests, as set out in the applicable regulations.
• If the collection or processing of Personal Data is necessary to protect public health, public safety or public interest, or to protect your life or health.
• If the Personal Data will not be recorded or stored in a form, that makes it possible to identify you directly or indirectly.
• If the collection or processing of the Personal Data is necessary to achieve our lawful interests or those of any other party, without prejudice to your rights or interests and provided that the Personal Data is not sensitive Personal Data, in accordance with the rules and provisions set out in the regulations.

5. How We Collect Your Personal Data

We may collect your Personal Data through the following channels:

a) Products and Services

When you register, use or sign a contract to become our customer and use one of our products or services, including IoT devices, connectivity SIMs, IoT platforms and managed services.

b) Direct Interactions

When you complete a form and send it to us via our website, email, post or telephone call to our contact center — including any Personal Data you provide when making an enquiry or taking part in a promotion or marketing activity.

c) Conferences and Events

When you register and submit your Personal Data during iot squared's participation in events or conferences, learn more about our updates, products, services or insights.

d) Browsing

Data about how you use our website, including the date and time of your visit, the type of internet browser you use and how you were referred to our website.

e) Web Surveys

Our online web surveys enable us to gather specific feedback — for example on the look and feel of our website, and on elements of our customer service. Your feedback is vital; appreciated and enables us to enhance the quality of service we provide. Provision of your name and other details is optional.

f) IoT Networks and Devices

When you use our IoT, connectivity, and digital-services networks and devices, we collect technical and operational data necessary to deliver and secure the service.

g) Business Purposes

Personal Data provided by you through face-to-face meetings, email, telephone conversations, our websites or by third parties. If you contact us, we may keep a record of that contact. We collect this Personal Data where it is necessary for business purposes or to meet the purposes for which you have submitted the information.

6. How Long We Store Your Personal Data

Your Personal Data is stored either in hard-copy form at our offices or electronically on our servers. Personal Data is only stored for as long as is necessary, according to defined retention periods for the purposes for which it was collected, and for satisfying any legal, regulatory, accounting or reporting requirements. It is properly destroyed in accordance with our data storage and retention policy and applicable laws and regulations once the purpose of collection has been fulfilled. Retention periods may vary depending on individual circumstances; where Personal Data is kept after the purpose of collection ceases to exist, all personally identifiable information will ultimately be destroyed.

We regularly review our retention periods to ensure we are not keeping your Personal Data for longer than necessary. Personal Data may be retained after the purpose of collection ceases to exist only where retention is required on a legal basis, or where it relates to a matter under consideration before a judicial authority and shall be destroyed after the specified period.

We may further retain Personal Data relating to you where we believe it may be necessary to prevent fraud or future abuse, to enable us to exercise our legal rights and/or defend against legal claims or where required by law or for other legitimate purposes. We may continue to retain your Personal Data in anonymized form for analytical and research purposes.

7. Personal Data Protection and Disclosure

We take the protection of your Personal Data very seriously and apply appropriate organizational and technical data-protection and security measures — including internal and external audit, training of staff and contractors on privacy, and reporting to our audit and data-governance steering committees and to the relevant regulatory authorities — to safeguard your Personal Data from any unauthorized disclosure or processing. These measures are aligned with the controls issued by the National Cybersecurity Authority (NCA) of the Kingdom of Saudi Arabia and the Saudi Personal Data Protection Law (PDPL).

We maintain the privacy and confidentiality of all Personal Data collected. Such Personal Data may only be disclosed or shared when approved and required by law, or when we believe such action is necessary or desirable to provide products, services or technical support, and in accordance with the section “Why We Collect and Use Your Personal Data”.

We will not use any of your Personal Data for commercial purposes, or share it with any third party outside iot squared or partner companies, without your permission — unless it is collected without identifiers on an aggregated basis for analytical purposes, studies or reports, in compliance with the Personal Data Protection Law and regulations of the Kingdom of Saudi Arabia. You will be notified of other sources used in the event that additional Personal Data is indirectly collected from other entities.

We may transfer your Personal Data outside the Kingdom, or disclose it to a party outside the Kingdom, in accordance with the Personal Data Protection Law and its Implementing Regulation, and in the following cases:

• If the transfer is related to the performance of an obligation under an agreement to which the Kingdom is a party.
• If the transfer serves the interests of the Kingdom.
• If the transfer is for the performance of an obligation to which the data subject is a party.

We shall transfer your Personal Data outside the Kingdom only where one of the following conditions applies under the Personal Data Protection Law:

• Transfer based on an adequacy decision by the Competent Authority.
• Transfer based on appropriate safeguards.
• Transfer based on derogations as defined in the Personal Data Protection Law and its bylaws.

We will not disclose your Personal Data without your consent except in the following circumstances, where the entity requesting disclosure is a public entity, in which case the Personal Data will be shared in strict accordance with the controls and procedures set out in the Personal Data Protection Law of the Kingdom of Saudi Arabia:

• For security purposes.
• To implement another law.
• To meet judicial requirements.
• To protect public health or safety.
• To protect the life or health of a particular individual or individuals.

8. Your Rights

As a data subject, you have the right to be informed about the purpose and type of Personal Data we hold about you, to access this Personal Data, to request its correction or destruction, to obtain a copy, and to withdraw your consent to the processing of your Personal Data. As part of our data-privacy compliance, we make the rights below available to you, depending on your relationship with us.

a) Right to be Informed

The right to know how we process your Personal Data, and the legal basis and purpose of collection.

b) Right to Access

The right to access your Personal Data held by us.

c) Right to Request a Copy of Personal Data

The right to request and obtain your Personal Data held by us in a readable and clear format.

d) Right to Request Correction of Personal Data

The right to request the correction, completion, or update of your Personal Data held by us.

e) Right to Request Destruction of Personal Data

The right to request destruction of your Personal Data held by us when it is no longer needed for the purpose for which it was collected.

f) Right to Withdraw Consent

The right to withdraw your consent for the processing of your Personal Data, where such processing is based on consent.

We try to respond to all legitimate data-subject rights requests within 30 days, as required by law. Occasionally it may take us an additional 30 days to respond if your request is particularly complex or if you have made several requests. In that case, we will notify you and keep you updated.

We may refuse to act on a request where it is repetitive, manifestly unfounded or requires disproportionate effort, in which case you will be notified of the reason.

For further details regarding the processing of your Personal Data, and how to exercise your rights, you can contact iot squared's Personal Data Protection Officer at: DPO@iotsquared.com.sa.

9. Links to Other Websites

Our website may contain links to third-party sites which may be subject to separate privacy policies. These sites are not under our control, and we are not responsible for their privacy practices. We encourage you to read the privacy policies of any third-party site you visit.

10. Privacy Information Specific to the iot squared Website — Use of Cookies

As part of our Personal Data collection process on our sites, the site may deposit “cookies” on your device. Cookies are small data files transferred to your device's storage by a site while using a web browser (upon your acceptance). They keep a record of your activities on the site, making your subsequent visits more efficient.

The iot squared website uses cookies and similar technologies in a range of ways to improve your experience on our website, commonly including:

• Keeping you signed in.
• Operating the website and supporting essential functionality.
• Understanding how you use our website.

You have a variety of tools to control the data collected by cookies. By continuing to use our services, you agree with our use of cookies. If you do not agree with our use of cookies, you can use the controls in your internet browser to limit how the websites you visit are able to use cookies, and to withdraw your consent by clearing or blocking cookies. Some functionality of the site may be lost as a result.

11. Complaints and Inquiries

For any question, comment, complaint, or further detail regarding the processing of your Personal Data, you may contact iot squared's Data Protection Officer at:

If you are not satisfied with our response, you may also lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) through the channels published on its official website.

12. Changes to the Privacy Notice

We may modify this privacy notice from time to time to reflect our current privacy practices. When we make changes to this notice, we will revise the date set out on the cover. Any change to the processing of Personal Data described in this notice that affects you will be communicated through an appropriate channel, depending on how we normally communicate with you.

This Privacy Notice was last updated on 11th May 2026. The current version will be published on the iot squared website.