Privacy Policy
We are committed to protecting your privacy and personal data to the highest standards
Data Controller
Unique Content for Information Technology (UC Tech) is the controller of your personal data when you use MSTND.
Scope of the Policy
This policy explains how we collect, process, and protect your personal data in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia.
Lawful Basis for Processing
We process data based on: consent, contract performance, legitimate interest, and legal/regulatory compliance.
Categories of Data Processed
Account, identity, and contact information; technical data (device type, browser, IP addresses, identifiers); payment data where applicable; correspondence and support data; and usage and analytics data.
Purposes
Providing and operating the system, improving quality, identity verification, security and fraud prevention, billing and collection, communication and support, marketing with explicit consent, and compliance with legal requirements.
Cookies
We use essential cookies to operate the system, functional cookies to improve experience, and analytics cookies to measure performance. You can manage your preferences through your browser settings or the consent banner.
Disclosure and Third-Party Processing
We may rely on approved sub-processors to provide infrastructure, analytics, or payment services. We bind them to appropriate data protection agreements. We do not sell your data to any third party.
Data Transfers Outside Saudi Arabia
Your data may be transferred to providers outside the Kingdom under applicable legal safeguards that ensure an equivalent level of protection.
Data Retention
We retain data for as long as necessary for the stated purposes, then delete or anonymize it, taking legal requirements into account.
Information Security
We apply reasonable technical and procedural controls such as access control, encryption in transit, regular backups, and security testing. No method of electronic transmission or storage is completely secure.
Data Subject Rights
You have the following rights: to be informed, to access, to obtain a copy, to correct, to delete, to object to or restrict processing, to withdraw consent without affecting prior lawful processing, and to lodge a complaint with the competent authority. We will process requests within 30 days, extendable by an additional 30 days when needed.
Marketing & Communications
We may send you marketing communications about the system with your consent, and you can unsubscribe at any time via the unsubscribe link or by contacting us.
Children
The system is not directly targeted at those under the legal age. If we discover unintentional processing of a minor's data, we will take appropriate removal actions.
Data Breach
In the event of a security breach affecting your data privacy, we will assess the impact, take corrective actions, and notify as required by applicable regulations.
Changes to the Policy
We may update this policy and will notify you of material changes via the email registered with us or within the system.
Governing Language
The Arabic version is the authoritative one in case of any conflict with a translation.