Privacy Policy

connectdots.digital ('Connect Dots', 'we', 'us', 'our') is a remote-first software studio, registered as a company in Saudi Arabia. We are the controller of the personal data described in this policy.

For any privacy question or request, contact hello@connectdots.digital. If you are in the EEA or UK and cannot resolve a concern with us, you also have the right to complain to your local data protection authority.

Information you give us: when you submit the contact form or email us, we receive the details you choose to share, typically your name, email address, company, chosen subject, and the contents of your message. Nothing beyond what you send is required.

Information collected automatically: this site is a set of static files served through a content delivery network. Our hosting and CDN infrastructure records standard request information such as your IP address, approximate location derived from it, browser and device type, referring page, the pages and files requested, and timestamps. These logs are used to operate, secure, and troubleshoot the site.

Data stored in your browser: we save your light or dark theme choice in your browser's local storage. It never leaves your device and is not used to identify or track you. Google Analytics sets its own first-party cookies, described below. We do not set advertising cookies.

Website analytics: we use Google Analytics 4 to understand how the site is used in aggregate, such as how many people visit, which pages they view, how they arrived (for example from a search engine), their approximate country and city, and their device and browser type. Google Analytics 4 does not log or store IP addresses. We do not use advertising pixels, session recording, or social media tracking, and we have not enabled Google Analytics advertising features.

To respond to your enquiry and follow up about a possible engagement.

To operate, maintain, secure, and improve the website, including detecting and preventing abuse.

To keep records of our communications and to comply with legal obligations.

We do not sell or rent your personal information, we do not share it for cross-context behavioural advertising, and we do not use it for automated decisions that produce legal or similarly significant effects.

Where the Saudi Personal Data Protection Law (Royal Decree No. M/19 of 1443H) applies, we process personal data on the basis of your consent, the performance of a contract or steps taken at your request, our legitimate interests, or compliance with a legal obligation.

Where the GDPR, UK GDPR, or similar laws apply, we rely on: your consent, which you give when you tick the consent box on the contact form and which you can withdraw at any time; our legitimate interests in operating, securing, and improving our site and in responding to business enquiries; and compliance with our legal obligations.

Where we rely on legitimate interests, we weigh them against your rights and freedoms and limit what we collect accordingly.

We use first-party cookies set by Google Analytics (named _ga and _ga_<ID>) to distinguish visitors and sessions for aggregate statistics. We do not use cookies for advertising. The only other client-side storage we use is a single local storage value that remembers your theme preference.

Your browser settings let you clear local storage and block cookies, and you can opt out of Google Analytics on all websites with Google's browser add-on at tools.google.com/dlpage/gaoptout. Doing so will not break the site, though it may reset your theme choice.

Hosting and content delivery: Amazon Web Services (Amazon S3 and Amazon CloudFront) stores and serves the site's files and processes request logs on our behalf.

Contact form delivery: Web3Forms (web3forms.com) receives contact form submissions and forwards them to our inbox. The information it processes is whatever you enter in the form.

Website analytics: Google LLC (Google Analytics 4) processes usage data collected on the site on our behalf, under Google's terms and data protection commitments. Learn more at policies.google.com/technologies/partner-sites.

Email: contact form submissions and direct emails are delivered to and stored in our business email mailbox.

Each of these providers processes data only to provide their service to us, under their own terms and applicable data protection commitments.

We share personal information with the service providers listed above so they can perform their function.

We may disclose information if required by law, to respond to a lawful request, or to protect the rights, safety, or property of Connect Dots, our clients, or the public.

If Connect Dots is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction and will remain subject to this policy or a policy at least as protective.

Contact submissions and related correspondence are kept for as long as needed to handle your request and for a reasonable period afterward for follow-up and record-keeping, then deleted or anonymised.

Server and CDN request logs are retained for a limited period for security and operational purposes and then rotated out. Google Analytics event data is retained for 2 months (Google's default setting) and then deleted automatically; aggregate reports are kept.

The site is served only over HTTPS, with security response headers and a content security policy set at the CDN. Access to the mailbox that receives contact submissions is restricted and protected by strong authentication.

No method of transmission or storage is completely secure, so while we use reasonable technical and organisational measures, we cannot guarantee absolute security.

We operate remotely and our service providers may process data in countries other than yours, including the United States and India. Where such transfers are subject to data protection law, we rely on appropriate safeguards such as the providers' standard contractual clauses or equivalent mechanisms.

Depending on where you live, you may have the right to access the personal data we hold about you, to correct or delete it, to restrict or object to certain processing, to receive it in a portable format, and to withdraw consent you previously gave.

Under the Saudi Personal Data Protection Law, you may request access to your data, its correction or deletion, restriction or a stop to processing, portability, and you may withdraw consent; you may also lodge a complaint with the Saudi Data & AI Authority (SDAIA).

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, the right to request deletion, the right to correct inaccurate information, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under California law.

To make a request, email hello@connectdots.digital. We will respond within the timeframe the applicable law requires and may first need to verify your identity.

This site is intended for a business audience and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy as our practices or the law change. The 'last updated' date above always reflects the current version. If we make a material change, we will highlight it on this page. Please review the policy periodically.

Questions, concerns, or requests about this policy or your data: hello@connectdots.digital. We are glad to help.