How we protect your personal data.

1. Data controller

The controller responsible for your personal data is:

• Name: SLIMWORKS
• Commercial Registration number: 7055276823
• Email: slimworksksa@gmail.com
• WhatsApp: 0551426480

2. Data we collect

Our website is informational. The only purpose for which it collects personal data is booking consultations, whether through the consultation form, WhatsApp or email. We do not collect personal data when you browse the rest of the site.

When you request a consultation, we collect your full name, mobile number, email address (optional) and message (optional), along with the date and time of the request.

If you become a client and later share health information such as your weight, measurements or medical conditions, we treat it as sensitive data under the PDPL and process it only with your explicit consent, and only as far as needed to deliver your program.

3. Why we use your data

• To book and respond to consultations and contact you about them.
• To keep a record of consultation requests and clients in our database, so we can manage bookings and follow up with clients.
• To deliver the program you join, including training, your nutrition plan, meal preparation and delivery, and progress monitoring.
• For service communication about your membership, such as scheduling, delivery and payment.

We will not send you marketing messages or offers unless you give separate consent, which you can withdraw at any time.

4. Legal basis

• Your consent, including when you submit the consultation form and your explicit consent to the processing of any health data.
• Performance of the service agreement with you when you join the program.

5. Sharing and service providers

We do not sell your personal data. We share it only with service providers that process it on our behalf, and only as needed to provide our services:

• Website hosting and database: the Lovable platform and the Supabase database provider, where our record of consultation requests and clients is stored. They may rely on cloud infrastructure providers.
• Email: Gmail by Google, when you email us.
• WhatsApp by Meta: when you contact us on WhatsApp. The conversation is also subject to WhatsApp's privacy policy.
• Google Fonts: used to load the website's fonts, which technically receives your device's IP address when you visit.

6. Transfers outside Saudi Arabia

Some of the providers listed above may store or process data outside the Kingdom of Saudi Arabia. Any such transfer follows the PDPL requirements for transferring personal data outside the Kingdom and is limited to the minimum data needed for the purpose.

7. How long we keep data

We keep your personal data only for as long as needed for the purpose it was collected for. After that, it is deleted or anonymized.

Consultation requests that do not become clients are deleted 12 months after the request date.

8. Your rights

Under the PDPL you have the right:

• To be informed about how and why your data is collected and processed.
• To access the personal data we hold about you.
• To obtain a copy of your data in a clear format.
• To correct, update or complete your data.
• To request deletion of your data when it is no longer needed.
• To withdraw your consent at any time, without affecting processing that took place before.

How to exercise your rights

Send your request to slimworksksa@gmail.com or on WhatsApp at 0551426480. We may ask for information to verify your identity, and we will respond within 30 days.

9. Security

We use appropriate organizational and technical measures to protect your data, including:

• An encrypted HTTPS connection to the website.
• Storage in an access-controlled database that cannot be read through the public website.
• Access limited to staff who need the data to do their work.
• Limits on how often the consultation form can be submitted, to prevent spam. This uses a scrambled, irreversible version of your IP address and mobile number that is deleted automatically within 24 hours.

10. Data breaches

If a breach of or unauthorized access to personal data occurs, we notify SDAIA and the affected individuals as required by the PDPL and its Implementing Regulations, and take the necessary steps to limit its impact.

11. Your right to complain

You have the right to file a complaint with the Saudi Data & AI Authority (SDAIA) if you believe the processing of your data breaches the PDPL. We welcome you to contact us first so we can try to resolve your concern.

12. Cookies and analytics

Our website does not use cookies for tracking or advertising, and does not use any analytics tools.

The site saves your language preference (Arabic or English) in your browser's local storage only; it is not sent to us. Our hosting provider and Google Fonts technically receive your IP address and browser information when pages load.

13. Changes to this policy

We may update this policy from time to time. Updates will be posted on this page with a new "last updated" date, and we will notify you of material changes where appropriate.