Privacy Policy

Prefect Steel ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

We collect information that you provide directly to us, including: Personal Information: • Name, email address, phone number • Billing and shipping addresses • Company name and VAT number (for business customers) • Payment information (processed securely by our payment providers) Automatically Collected Information: • IP address, browser type, and device information • Cookies and similar tracking technologies • Pages visited, time spent on pages, and navigation patterns • Referring website addresses Transaction Information: • Purchase history and order details • Product preferences and shopping cart contents • Communication preferences

We use the information we collect to: • Process and fulfill your orders • Communicate with you about your orders and account • Send promotional emails and marketing communications (with your consent) • Improve our website, products, and services • Detect and prevent fraud and security threats • Comply with legal obligations and Saudi Arabian regulations • Generate analytics and business intelligence • Provide customer support and respond to inquiries We will never sell your personal information to third parties.

We may share your information with: Service Providers: • Payment processors (Stripe, etc.) • Shipping carriers (Aramex, SMSA) • Email service providers (SendGrid) • Cloud hosting providers • Analytics services Legal Requirements: • When required by law or legal process • To protect our rights, property, or safety • To enforce our terms and conditions • In connection with a merger, acquisition, or sale of assets We ensure all third parties are contractually obligated to protect your data and use it only for the specified purposes.

We implement appropriate technical and organizational security measures to protect your personal information: • SSL/TLS encryption for data transmission • Secure payment processing (PCI DSS compliant) • Regular security audits and updates • Access controls and authentication • Data backup and disaster recovery procedures • Employee training on data protection However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We use cookies and similar tracking technologies to: Essential Cookies: • Maintain your session and shopping cart • Remember your language preference • Enable secure login Analytics Cookies: • Understand how visitors use our website • Improve website performance and user experience Marketing Cookies: • Show relevant advertisements • Track campaign effectiveness You can control cookies through your browser settings. However, disabling certain cookies may limit functionality.

Under Saudi Arabian law and GDPR (for EU residents), you have the right to: • Access: Request a copy of your personal data • Rectification: Correct inaccurate or incomplete data • Erasure: Request deletion of your data ("right to be forgotten") • Restriction: Limit how we process your data • Portability: Receive your data in a portable format • Object: Object to processing for marketing purposes • Withdraw Consent: Withdraw consent at any time To exercise these rights, please contact us at privacy@prefectsteel.com

We retain your personal information for as long as necessary to: • Fulfill the purposes outlined in this privacy policy • Comply with legal, accounting, or reporting requirements • Resolve disputes and enforce our agreements Typically, we retain: • Account information: Until you request deletion • Order history: 7 years (for tax and accounting purposes) • Marketing communications: Until you unsubscribe • Analytics data: Up to 26 months

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Your information may be transferred to and processed in countries other than Saudi Arabia. We ensure appropriate safeguards are in place for such transfers, including: • Standard contractual clauses • Adequacy decisions by relevant authorities • Explicit consent where required

We may update this privacy policy from time to time. We will notify you of any changes by: • Posting the new privacy policy on this page • Updating the "Last updated" date • Sending an email notification (for material changes) Your continued use of our services after changes constitutes acceptance of the updated policy.

If you have questions or concerns about this privacy policy or our data practices, please contact us: Data Protection Officer Prefect Steel Email: privacy@prefectsteel.com Phone: +966 XX XXX XXXX Address: Riyadh, Saudi Arabia For GDPR-related inquiries, you may also contact the relevant supervisory authority in your jurisdiction.