Manarat X Company · Policies
Understand your data, why it is used, and how to exercise your rights.
Last updated: 27 September 2026
Data controller
Manarat X Company is responsible for personal-data processing on manaratx.com. For privacy questions and requests, email [email protected] with “Privacy request” in the subject. Do not send your password or an identity-document copy in your first message.
What do we collect and why?
At registration we collect your name, username, email, and sign-in information needed to create and operate your account. We record enrolment, progress, quiz answers, and results to deliver and track learning. If you contact us, we process contact details and message content to respond. Hosting and security systems may retain IP addresses, browser information, request times, and error logs to operate and protect the service. Optional profile details and contributions are provided by choice. Without the essential registration information, an account cannot be created.
Basis for processing
We process account and learning data to deliver the service you request, retain data necessary to meet legal obligations, and limit consent-based processing to its stated purpose. Acceptance of the terms is not marketing consent. We do not use your email for marketing without separate consent where required. Security systems and logs are used only as necessary and on an appropriate lawful basis.
Who can access data?
Data is accessible to those who need it for learning administration, support, or operations, according to their permissions. We use Hostinger for hosting, email, and backups, and Cloudflare for delivery and protection; these providers may process necessary technical data. We do not sell your data. We may disclose the minimum necessary information to competent authorities where legally required. Your display name and contributions in public areas may be visible to others.
Processing outside Saudi Arabia
The current hosting uses a data centre in India and backups in Singapore. Cloudflare may also process data outside Saudi Arabia. Data should therefore not be assumed to remain only within the Kingdom. Transfers are subject to the Personal Data Protection Law, its regulations, and required safeguards. You may request information about processors and transfer arrangements through the privacy email address.
Retention and security
We retain account and progress data while needed to deliver the service and manage the account. When the purpose ends or you request destruction, we review the data and delete or anonymise information that no longer needs to be kept, taking legal obligations and outstanding claims into account. Logs and backups follow the retention cycles of operating systems and providers; account deletion does not mean every backup disappears immediately. We use encrypted connections, access permissions, and backups. No technical measure guarantees absolute security.
Your rights and requests
Subject to applicable law, you may request information about your data, access and obtain a copy, correct or complete it, request destruction, and withdraw consent for consent-based processing. Send a request from your account email and explain what you need. We verify identity only to the extent necessary. Rights requests are handled within 30 days, with a possible further 30-day extension in legally permitted circumstances and notification of the reason. Withdrawal does not affect prior lawful processing or processing based on another lawful ground.
Complaints and updates
You may contact us about privacy and may also complain to the competent authority through SDAIA’s National Data Governance Platform. We update this policy when processing changes and show its date. Any new purpose requiring fresh consent will be presented separately. Read the cookie policy as well.