Privacy Policy

Who handles your data

Ahmad Al-Ansari personally operates Mujassam LAB and manages customer data. Privacy contact: info@mujassamlab.com or phone and WhatsApp +966533802283.

Information we receive

Information you provide through quotation, enquiry, careers, training and partnership forms includes your name, contact details, city, organisation, request and project details, and a CV when supplied. It includes drawings, images, scans and uploaded files. Historical Smart Quote and Objects request records may also remain; these flows do not accept new requests on the current website.

Operational records

As work progresses, records include quotation revisions and acceptances, projects, deliverables, deliveries and acknowledgements, follow-up notes, events, notification status and expiring access links. Operational emails may contain request information and file links. Admin authentication, session and technical records support website operation and protection.

Purposes and basis for processing

We use data to respond to and assess your request, prepare a quotation, perform agreed work, deliver it and support future revisions, and to protect the service and resolve faults. Processing supports your request or agreement, your consent where required, or an applicable legal obligation. We do not sell customer data. Required fields are needed for the selected request; optional fields and non-required files are voluntary. Missing necessary information may prevent assessment.

Service providers and access

We use technology providers for hosting, storage, email delivery and protection as needed to provide the service. These services may process data outside Saudi Arabia depending on their operating locations. The owner currently performs project work without external project collaborators; this does not exclude technology providers.

File confidentiality and protection

Project files are private. Admin access requires authentication; customer files use protected routes or expiring links. We take reasonable measures to protect data, but cannot guarantee absolute security. Keep your links confidential and report unauthorised access.

Requests that do not become an engagement

Each month we manually review quotation, enquiry, careers, training and partnership requests that did not become an engagement, aiming to delete their data and attachments one year after the last contact unless a specific legitimate retention reason applies. This is a manual review and deletion process, not automatic website deletion.

Completed project archive

We may retain necessary source files and technical outputs for future customer revisions or a private internal work archive. We review the need annually and delete what is no longer needed; retention is not indefinite without review. An archive does not promise free revisions or remove the need for a new survey when necessary. We will not publish or use the work for marketing without separate prior customer consent.

Retention reasons and exceptions

Specific records may need retention for an applicable legal or contractual obligation, accounting, an active dispute, fraud prevention or an actual operational need, only to the extent and for the period necessary on a permitted basis. We review the reason and period and restrict use; a generic operational need does not justify permanent retention. When the reason ends, we delete records or remove identifying information where appropriate.

Your rights and deletion requests

Contact us to ask about your data, access it, obtain a copy, correct it, request destruction, or withdraw consent where consent is the processing basis. We verify identity and authority proportionately and explain justified exceptions and retained records. We handle requests within applicable legal periods and notify you of justified extensions. Deleting website records and files does not automatically erase emails or provider copies; we also review those locations when handling your request and explain any limitations and remaining periods. You may complain to the competent personal data protection authority when needed.

Policy updates

We update this policy when data handling changes and explain material changes where appropriate. Last updated: 12 September 2026.