Privacy Notice
**Last updated: 13 September 2026**
Matrix Intelligence for Communications and Information Technology (“Matrix Intelligence”, “we”, “our” or “us”) respects your privacy and is committed to protecting your personal data.
This Privacy Notice explains how we collect, use, store, disclose and protect personal data when you visit **odoo.mi-cit.com**, contact us, book a consultation, submit a support ticket, use our customer portal or communicate with our team.
For the activities described in this notice, Matrix Intelligence generally acts as the **Data Controller**. When we process personal data on behalf of an Odoo customer as part of an implementation or support service, that customer may be the Data Controller and its privacy notice may also apply.
## 1. Personal data we collect
Depending on how you interact with us, we may collect the following categories of personal data:
### Contact and identification information
- Full name
- Business email address
- Phone or WhatsApp number
- Company name
- Job title
- Preferred contact method
### Business and consultation information
- Company size
- Services you are interested in
- Current business or ERP system
- Business requirements, challenges and objectives
- Appointment date, time and attendee details
- Information provided during consultations or demonstrations
### Customer-support information
- Support ticket subject and description
- Affected Odoo application or module
- Production or testing environment
- Business impact
- Screenshots, documents or other attachments
- Ticket responses, status and support history
- Customer-portal activity
Please do not include passwords, access credentials, API keys, payment-card information or unnecessary personal or sensitive information in forms, tickets or attachments. If protected access is required, our team will provide an approved secure method.
### Marketing preferences
We may record whether you have chosen to receive Odoo insights, service updates, event invitations or other marketing communications.
### Technical and website information
When you visit our website, we may automatically collect:
- IP address
- Browser and device information
- Language and general location settings
- Pages visited and interactions with the website
- Referral source and campaign information
- Session, security and diagnostic logs
- Cookie and analytics information
More information is available in our [Cookie Policy]
## 2. How we collect personal data
We may collect personal data:
- Directly from you through contact, consultation, appointment and support forms.
- When you communicate with us by email, telephone, WhatsApp, online meeting or another approved channel.
- Automatically through website logs, cookies and similar technologies.
- From your employer, an authorized company representative, an implementation partner or another lawful source.
- From publicly available business sources where permitted by applicable law.
Fields marked with an asterisk (*) are required. If you do not provide required information, we may be unable to process your request, arrange an appointment or provide support.
Marketing consent is optional and is not required to receive a consultation, submit a support request or use our services.
## 3. Why we process personal data
We process personal data to:
- Respond to enquiries and understand business requirements.
- Arrange consultations, demonstrations and meetings.
- Recommend suitable Odoo applications and implementation approaches.
- Prepare proposals, quotations and project plans.
- Create and manage customer and sales records.
- Deliver Odoo implementation, integration, training and support services.
- Create, investigate, prioritize and resolve support tickets.
- Manage customer-portal access and service communications.
- Maintain the security, reliability and performance of our website and systems.
- Understand website usage and improve our content and services.
- Comply with legal, regulatory, accounting and contractual obligations.
- Establish, exercise or defend legal claims.
- Send marketing communications when you have provided the required consent.
## 4. Legal grounds for processing
Depending on the activity, we may process personal data based on one or more of the following legal grounds:
- Your consent, including consent for optional marketing communications and non-essential cookies where required.
- Taking steps at your request before entering into an agreement.
- Performing an agreement or providing services to you or your organization.
- Complying with an applicable legal or regulatory obligation.
- Pursuing our legitimate business interests where permitted and where those interests do not prejudice your rights or involve sensitive personal data.
- Protecting your interests or another lawful basis recognized under applicable Saudi law.
You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing already performed lawfully or processing supported by another legal ground.
## 5. How we disclose personal data
We limit access to personal data to authorized people and organizations that require it for an identified business purpose.
Personal data may be disclosed to:
- Authorized Matrix Intelligence employees and contractors.
- Technology providers supporting our website, hosting, CRM, helpdesk, appointments, email, analytics and communications.
- Odoo, where its platform is used to operate website, CRM, appointment, customer-portal or support functions.
- Google services, where enabled for analytics, calendar functions or online meetings.
- Professional advisers, auditors, insurers and legal representatives.
- Government, regulatory, judicial or law-enforcement authorities where disclosure is required or permitted by law.
- A successor organization in connection with a lawful merger, restructuring or transfer of business, subject to appropriate safeguards.
Service providers must process personal data only for authorized purposes and according to appropriate confidentiality, security and data-protection obligations.
We do not disclose personal data to unrelated third parties for their own direct-marketing purposes.
## 6. Processing and transfers outside Saudi Arabia
Some technology or communication providers may process or store personal data outside the Kingdom of Saudi Arabia.
Where personal data is transferred or disclosed outside the Kingdom, we will apply the requirements of the Saudi Personal Data Protection Law and the Regulation on Personal Data Transfer Outside the Kingdom. This may include assessing the transfer, limiting the information transferred and implementing appropriate contractual, organizational and technical safeguards.
## 7. Retention and destruction
We retain personal data only for as long as it is required for the purpose for which it was collected or where retention is required by an applicable law, agreement, dispute or legitimate operational requirement.
Our retention criteria generally include:
- Enquiry and consultation information is retained while the opportunity remains active and for a reasonable follow-up period.
- Customer, implementation, project and support records are retained during the customer relationship and for any legally or contractually required period afterward.
- Marketing preferences are retained until consent is withdrawn or you unsubscribe. We may retain a minimal suppression record so that we can respect your choice.
- Technical, security and website records are retained according to operational, security and cookie requirements.
- Information relating to a dispute, investigation or legal obligation may be retained until the matter and the applicable retention requirement have ended.
When personal data is no longer required, it will be securely deleted, destroyed or anonymized in accordance with our approved procedures.
## 8. Security
We apply reasonable administrative, organizational and technical measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, damage or destruction.
These measures may include access controls, secure communications, system monitoring, backups, employee confidentiality obligations and security controls appropriate to the nature of the information.
No online system can guarantee absolute security. Please use approved channels and avoid submitting credentials or unnecessary confidential information through public website forms.
## 9. Your personal-data rights
Subject to the Saudi Personal Data Protection Law and its applicable limitations, you may have the right to:
- Be informed about how and why your personal data is processed.
- Access personal data available to us about you.
- Request a readable and clear copy of your personal data.
- Request correction, completion or updating of inaccurate or incomplete data.
- Request destruction of personal data that is no longer required.
- Withdraw consent where consent is the legal ground for processing.
- Submit a complaint concerning the processing of your personal data.
To exercise a right, contact us using the details below. We may need to verify your identity and request information needed to locate your records.
We aim to complete valid requests within 30 days. Where unexpected additional effort or multiple requests require an extension, we may extend this period by up to an additional 30 days and will notify you of the reason.
Some requests may be limited or refused where permitted or required by applicable law.
## 10. Marketing communications
We will send promotional emails, updates or invitations only where the appropriate consent or other lawful permission exists.
You can withdraw your marketing consent at any time by:
- Using the unsubscribe option in a marketing message.
- Contacting us at odoo-sale@mi-cit.com.
- Asking our team to update your communication preferences.
Stopping marketing messages will not affect operational, contractual, appointment or support communications.
## 11. Cookies and analytics
Our website uses essential cookies needed for security, language preferences and website functionality. With your choice where required, it may also use analytics or marketing technologies, including Google Analytics.
You can manage available cookie categories through the website’s cookie settings and browser controls. See our [Cookie Policy] for further information.
## 12. Children’s data
Our website and services are intended for businesses and professional users and are not directed to children.
If you believe that a child’s personal data has been submitted to us without appropriate authorization, please contact us so that we can review and take the appropriate action.
## 13. Third-party websites
Our website may contain links to third-party websites, including Odoo and other service platforms. Those organizations operate under their own privacy notices, and we recommend reviewing them before providing personal data.
## 14. Changes to this notice
We may update this Privacy Notice when our services, systems, processing activities or legal obligations change.
The latest version will be published on this page with an updated revision date. Material changes may also be communicated through an appropriate additional notice.
## 15. Contact us or exercise your rights
For questions, privacy requests, complaints or withdrawal of consent, contact:
**Privacy and Data Protection Requests**
Matrix Intelligence for Communications and Information Technology
Jeddah, Kingdom of Saudi Arabia
Email: **odoo-sale@mi-cit.com**
Phone and WhatsApp: **+966 55 698 1897**
Website: [Contact Matrix Intelligence]
Please use the subject line **“Personal Data Request”** when contacting us by email.
If you are not satisfied with our response, you may submit a complaint to the Saudi Data & AI Authority through the National Data Governance Platform at **dgp.sdaia.gov.sa**.