Nawalنوال
العربية

Privacy Policy

Last updated: 27 July 2026 — Version 1.0

This policy explains how Khalid Hussein Shobokshi Communications & Information Technology Co. (“Nawal”, “we”) collects, uses and protects personal data when you use our website or service.

We follow the principles of the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL), and handle data on a data-minimisation and purpose-limitation basis.

Data we collect

1. Client business data

  • Business name, contact person, email address and WhatsApp number.
  • Account settings and preferences for message scheduling and approval.

2. Invoice and debtor contact data provided by the client

  • Invoice numbers, amounts and due dates.
  • Debtor name and WhatsApp number, as supplied to us by the client.

For debtor data, Nawal acts as a data processor on behalf of the client business. The client business remains the data controller and is responsible for the lawfulness of collecting that data and sharing it with us.

3. Technical data

  • Basic server logs necessary to operate and secure the service.

How we use data

  • To send payment reminders over WhatsApp on behalf of, and in the name of, the client business.
  • To show send, delivery and reply status back to the client business.
  • To operate, support, secure and improve the service.
  • To contact you about your account or your early-access request.

We do not sell personal data, and we do not use debtor data for any marketing purpose of our own.

Sharing

  • WhatsApp / Meta — to deliver messages over the WhatsApp Business Platform.
  • 360dialog — the authorised solution provider through which we route messages.
  • Hosting and infrastructure providers — under data-processing agreements.
  • Competent authorities where we are under a legal obligation.

Retention

We retain invoice and contact data for as long as we provide the service to the client business, then delete it within thirty (30) days of termination or of receiving a deletion request, unless law requires longer retention.

Your rights

  • Access your personal data and learn how it is processed.
  • Request correction of inaccurate data.
  • Request deletion — see our Data deletion page.

To exercise any of these rights, email khalid@getnawal.com. We respond within thirty (30) days.

Security

We apply appropriate technical and organisational controls, including encryption in transit and access restricted on a need-to-know basis.

Changes to this policy

We may update this policy. The last-updated date and version number are always shown at the top of this page.

Contact

Khalid Hussein Shobokshi Communications & Information Technology Co. — Kingdom of Saudi Arabia
Email: khalid@getnawal.com