Privacy Policy

1. Introduction & Scope

Tech Vision Era ("we", "us", "our", or "the Company") is a full-service digital agency headquartered in Kuwait City, Kuwait, with active operations in Saudi Arabia, the United Arab Emirates, and Malaysia. We provide custom web application development, mobile app development, e-commerce solutions, customer relationship management (CRM) systems, enterprise resource planning (ERP) platforms, search engine optimisation (SEO), AI Answer Engine Optimisation (AEO), digital branding, cloud hosting, and education placement services under our "Study in Malaysia" vertical.

This Privacy Policy explains what personal data we collect, why we collect it, how it is processed and stored, with whom it may be shared, and what rights you hold in relation to your data. It applies to:

• All visitors to techvisionera.com and any subdomains we operate;
• Prospective clients who contact us via our website contact forms, email, WhatsApp, or telephone;
• Contracted clients who engage Tech Vision Era for any of our services;
• Students and families who enquire about or enrol through our Study in Malaysia placement service;
• Partners, suppliers, and third-party collaborators who share data with us in the course of a business relationship.

By using our website, submitting an enquiry, or entering into a contract with us, you confirm that you have read and understood this policy. If you do not agree with any part of this policy, please refrain from submitting personal information to us and contact us to discuss how we can accommodate your concerns.

We are committed to protecting your privacy and handling your data with integrity, transparency, and in strict conformity with the laws of Kuwait, the Kingdom of Saudi Arabia, Malaysia, and, where applicable, the General Data Protection Regulation (GDPR) of the European Union.

2. Information We Collect

We collect personal data in two principal ways: information you provide to us directly, and information collected automatically when you interact with our digital properties.

2.1 Information You Provide Directly

• Identity data: Your full name, job title, and company name.
• Contact data: Email address, telephone or WhatsApp number, and mailing address.
• Project brief data: Technical requirements, budget ranges, timelines, and any other information included in a project enquiry or brief.
• Payment data: Bank transfer references, invoice acknowledgements, and payment confirmation records. We do not store raw card numbers; payment card transactions are processed by PCI-DSS-compliant third-party processors.
• Education placement data (Study in Malaysia): Academic transcripts, passport copies, immigration status, and institution preference data collected solely for the purpose of processing Malaysian student visa applications and university admissions.
• Communications data: Records of emails, WhatsApp messages, and meeting notes exchanged during a project engagement.

2.2 Information Collected Automatically

• Usage data: Pages visited, time spent on pages, referring URLs, click paths, and download events.
• Device & technical data: IP address, browser type and version, operating system, screen resolution, and device identifiers.
• Cookie data: Session cookies, preference cookies, and analytics cookies as described in Section 5 below.
• Log data: Server access logs maintained by our hosting infrastructure containing timestamps, requested URLs, and response codes.

2.3 Information from Third Parties

We may receive information about you from partner agencies, referral sources, or publicly available business directories when pursuing a commercial relationship. In all such cases we apply the same standards of care to that data as to information you provide directly.

3. How We Use Your Information

We use the personal data we collect for the following purposes:

3.1 Service Delivery

To design, develop, test, and deliver the digital products and services you have commissioned; to manage project timelines; to provide post-launch support and maintenance; and to administer client accounts and project management systems.

3.2 Communication

To respond to enquiries and support requests; to provide project status updates; to issue invoices and receipts; to notify you of changes to our services or policies; and to conduct project discovery and requirement-gathering sessions.

3.3 Analytics & Performance Optimisation

To understand how visitors interact with our website so that we can improve content, navigation, and conversion pathways. Analytics data is processed in aggregated or pseudonymised form where possible.

3.4 Marketing & Business Development

Where you have given consent, or where we have a legitimate interest in doing so, we may send you information about new services, case studies, industry insights, or promotional offers relevant to your business. You may opt out of marketing communications at any time by sending an email to hello@techvisionera.com with the subject line "Unsubscribe".

3.5 Legal & Compliance

To meet our obligations under applicable law, including tax record-keeping, anti-money-laundering checks, and responses to lawful requests from competent authorities.

3.6 Study in Malaysia Placement

To process university applications, Education Malaysia Global Services (EMGS) visa documentation, accommodation arrangements, and ongoing pastoral support for students enrolled through our placement service.

4. Legal Basis for Processing

We process personal data on the following legal bases:

4.1 Contract Performance

The majority of our processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract. This covers project delivery, invoicing, and client communications.

4.2 Legitimate Interests

We process certain data on the basis of our legitimate business interests — for example, maintaining project records, conducting analytics, pursuing business development, and protecting our systems from fraud — provided those interests are not overridden by your rights and freedoms.

4.3 Consent

Where we send marketing communications to individuals who are not existing clients, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without detriment.

4.4 Legal Obligation

We may process data where necessary to comply with a legal obligation, including financial record-keeping requirements under Kuwaiti commercial law and responses to official government requests.

4.5 Applicable Law References

Kuwait: Our primary operations are governed by Kuwait Law No. 20 of 2014 Concerning Electronic Transactions and its associated implementing regulations, which establish requirements for electronic contracting, digital records, and information security. We additionally comply with the Consumer Protection Law and applicable ministerial decisions concerning data handling in the telecommunications and IT sector.

Saudi Arabia: For data relating to Saudi residents, we comply with the Personal Data Protection Law (PDPL) issued by Royal Decree M/19 dated 9/2/1443H (2021), as amended, and its implementing regulations issued by the National Data Management Office (NDMO). This includes requirements for lawful processing grounds, data subject rights, and cross-border transfer safeguards.

Malaysia: For data relating to Malaysian residents and our Study in Malaysia operations, we comply with the Personal Data Protection Act 2010 (PDPA) and its seven Personal Data Protection Principles.

GDPR: Where we process personal data of individuals in the European Economic Area, we apply the standards of the General Data Protection Regulation (EU) 2016/679 as our baseline standard of care, including requirements for lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and accountability.

5. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to operate correctly and to improve your experience. A cookie is a small text file placed on your device. We use the following categories of cookies:

5.1 Strictly Necessary Cookies

These cookies are essential for the website to function and cannot be disabled. They are typically set in response to actions you take such as setting privacy preferences, logging into a client portal, or filling in a contact form. These cookies do not store any personally identifiable information.

5.2 Performance & Analytics Cookies

We use Google Analytics (with IP anonymisation enabled) to collect aggregated information about how visitors use our website. This helps us improve content quality, identify high-bounce pages, and optimise conversion pathways. The data collected is pseudonymous and we have executed a Data Processing Agreement with Google LLC. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

5.3 Functional Cookies

These cookies allow the website to remember your language preference and region, enabling a more personalised experience on subsequent visits.

5.4 Marketing Cookies

Where we run paid advertising campaigns, conversion-tracking cookies may be placed by advertising platforms (such as Google Ads or Meta Ads) when you arrive at our site via a sponsored link. These cookies help us measure the effectiveness of our advertising spend. They are active only if you have accepted marketing cookies in our consent banner.

5.5 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when a cookie is set. Please note that disabling certain cookies may affect the functionality of our website. Instructions for managing cookies in major browsers are available at allaboutcookies.org.

6. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share data only in the following limited and controlled circumstances:

6.1 Cloud Hosting Providers

Our website and client project environments are hosted on servers operated by reputable providers (including Contabo, DigitalOcean, and AWS). These providers act as data processors under our instruction and are contractually bound by data processing agreements that meet or exceed applicable legal standards.

6.2 Communication Platforms

We use WhatsApp Business (Meta Platforms, Inc.) as a primary client communication channel in the Gulf region. Messages sent via WhatsApp are subject to Meta's own privacy policy. We recommend that you do not share highly sensitive personal data via WhatsApp and instead use encrypted email for sensitive communications.

6.3 Analytics Providers

As noted above, we use Google Analytics under a Data Processing Agreement. Aggregated, anonymised analytics data may be used to inform our internal reporting and marketing strategy.

6.4 Payment Processors

For online payment processing, we work with PCI-DSS-certified payment gateways. We share only the minimum data necessary (invoice reference, amount, currency) to facilitate a transaction.

6.5 Study in Malaysia Partners

For students enrolled through our Study in Malaysia vertical, we share necessary application data with: (a) accredited Malaysian public and private universities and colleges; (b) the Education Malaysia Global Services (EMGS) agency for student pass processing; and (c) approved accommodation providers. All such disclosures are made with the student's explicit consent and are necessary to complete the placement service.

6.6 Legal & Regulatory Disclosure

We may disclose personal data to courts, law enforcement agencies, or regulatory bodies where required by law or valid legal process, or where necessary to protect the rights, property, or safety of Tech Vision Era, our clients, or the public.

6.7 Business Transfers

In the event that Tech Vision Era undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held by us may be transferred to the successor entity. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

7. Data Retention

We retain personal data for only as long as necessary for the purposes for which it was collected, including to satisfy any legal, accounting, or reporting obligations. Our standard retention schedules are as follows:

• Active client data: Retained for the duration of the contractual relationship and for a period of five (5) years thereafter, to meet our obligations under commercial and tax law in Kuwait and other operating jurisdictions.
• Prospective client enquiry data: Retained for up to two (2) years from the date of the last meaningful interaction, unless you request earlier deletion or withdraw consent.
• Website analytics data: Retained in Google Analytics for fourteen (14) months, after which it is automatically deleted per our account configuration.
• Server access logs: Retained for ninety (90) days for security and diagnostic purposes.
• Study in Malaysia student records: Retained for five (5) years following the completion of the placement engagement or the student's graduation, whichever is later, in accordance with Malaysian education regulations.
• Financial records (invoices, receipts, contracts): Retained for ten (10) years in accordance with Kuwaiti Commercial Companies Law requirements.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with an individual.

8. Your Rights

Subject to applicable law and the specific jurisdiction in which you are located, you may have the following rights in relation to your personal data:

8.1 Right of Access

You have the right to request a copy of the personal data we hold about you, together with information about how it is being processed. We will respond to verified access requests within thirty (30) calendar days.

8.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it promptly.

8.3 Right to Erasure ("Right to be Forgotten")

You may request that we delete your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis for processing exists; (c) you object to processing and we have no overriding legitimate grounds; or (d) the data has been unlawfully processed. This right is subject to applicable retention obligations; we cannot erase data that we are legally required to retain.

8.4 Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.

8.5 Right to Object

You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims. You may object to direct marketing at any time without providing any reason.

8.6 Right to Restriction of Processing

You may request that we restrict the processing of your data in certain circumstances, for example while we investigate an accuracy dispute or pending the outcome of an objection.

8.7 How to Exercise Your Rights

To exercise any of the rights listed above, please contact us using the details in Section 11. We will need to verify your identity before processing any rights request. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee.

9. International Data Transfers

Tech Vision Era operates internationally with personnel and infrastructure located across multiple countries. As a result, your personal data may be processed in jurisdictions outside your country of residence, including:

• Kuwait: Our registered headquarters and primary legal entity;
• Saudi Arabia & UAE: Regional operations and client project delivery;
• Malaysia: Our Southeast Asian operations hub and Study in Malaysia service centre;
• Canada: Remote technical team members who may access project data.

Not all countries outside the European Economic Area (EEA) are deemed to offer an equivalent level of data protection. Where we transfer personal data internationally, we implement appropriate safeguards, which may include: standard contractual clauses approved by a relevant supervisory authority; binding corporate rules; or reliance on an applicable adequacy decision. Where transfers are made on the basis of consent, that consent explicitly covers the cross-border transfer.

For clients in Saudi Arabia, cross-border transfers are made in accordance with the implementing regulations under the PDPL, which require that the recipient country provides an adequate level of protection or that contractual safeguards are in place.

10. Children's Privacy

Our website and commercial services are directed at businesses and adults aged 18 years and over. We do not knowingly collect or solicit personal data from children under the age of 18. If you are a parent or guardian and believe that your child has provided personal data to us, please contact us immediately at hello@techvisionera.com and we will take prompt steps to delete that information.

The Study in Malaysia service may involve students who are between 17 and 18 years of age. In such cases, we require parental or guardian consent before processing the student's personal data, and we apply enhanced care to the handling of such records.

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data we hold about you, please contact our data officer using the details below:

We aim to respond to all privacy enquiries within 72 hours. For formal rights requests, we will respond within the 30-day statutory period.

If you are located in Saudi Arabia and are not satisfied with our response, you may refer a complaint to the National Data Management Office (NDMO). If you are located in Malaysia, you may refer a complaint to the Department of Personal Data Protection (JPDP). If you are located in the EEA, you may contact your local data protection authority.

12. Changes to This Policy

We review this Privacy Policy periodically to ensure it remains accurate, complete, and compliant with applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where required by law or where changes are particularly significant, we will provide you with direct notice via email or a prominent banner on our website.

We encourage you to review this policy each time you visit our website or engage our services. Your continued use of our services after any changes come into effect constitutes your acknowledgement of the updated policy.

Older versions of this Privacy Policy are available upon request by emailing hello@techvisionera.com.