Privacy Policy

1. Introduction and scope

Unified Modern Intelligence (UMI) respects the privacy of visitors to its website and representatives of businesses who contact UMI or request a demo.

This Privacy Policy explains how UMI collects Personal Data through umi.com.sa, contact forms and demo requests, how we use, store, protect and share it when necessary, and the rights available to Data Subjects.

This policy applies to the public corporate website and its forms. Personal Data processed within UMI products on behalf of contracted customers may instead be governed by the applicable service agreement or data-processing agreement, depending on the relationship and role of each party.

2. Controller

For Personal Data collected directly by UMI through the website and Request Demo form, Unified Modern Intelligence (UMI) acts as the Controller that determines the purposes and means of processing unless a specific context states otherwise.

3. Personal Data we collect

We may collect information you provide directly, including:

  • full name;
  • mobile number;
  • work email address;
  • company name;
  • job title, where requested;
  • industry;
  • area of interest or solution you want to learn about;
  • information entered in free-text fields;
  • selected language and the page or route from which the request was submitted; and
  • campaign information associated with the visit, such as UTM source, medium, campaign and content, where available.

Depending on enabled production settings, technical systems may also process:

  • IP address or technical information derived from it to the extent processed by a service provider;
  • device type, operating system and browser;
  • pages viewed and visit time;
  • referring domain or source;
  • approximate country or region; and
  • basic interaction events such as CTA clicks and successful Request Demo submissions.

The public UMI website does not ask you to submit health or medical information, patient data, payment-card information or other Sensitive Data. Please do not enter such information in free-text fields or the Request Demo form.

4. Required and optional fields

To receive and follow up a demo request, name, mobile number, work email and company name are required where the form marks them as mandatory.

Job title, industry, area of interest, message and other additional fields are optional unless the form states otherwise.

If required information is not provided, we may be unable to receive or follow up your request.

5. How we collect Personal Data

We collect Personal Data:

  • directly from you when you submit a Request Demo or contact us;
  • automatically from your browser or device according to enabled privacy and analytics settings; and
  • through campaign or referral information associated with the link that brought you to the website, where available.

6. Purposes and legal bases

We process Personal Data only as reasonably necessary to:

  • receive and respond to demo requests;
  • understand your organization’s needs and route your inquiry appropriately;
  • respond to inquiries and follow up on commercial contact initiated by you;
  • maintain internal records of contact requests and reduce accidental duplicates;
  • operate and secure the website and detect errors or abuse;
  • measure website performance and understand page usage;
  • measure core events such as CTA clicks and Request Demo submissions; and
  • comply with legal obligations and protect lawful rights or legitimate interests where permitted.

Depending on the purpose and nature of the data, UMI may rely on one or more lawful bases recognized under applicable Saudi law, including:

  • your consent where consent is required;
  • taking steps at your request in connection with a demo request, inquiry or potential contractual relationship;
  • compliance with a legal obligation; and
  • UMI’s legitimate interests where the processing is reasonably expected, does not involve Sensitive Data and does not override your rights and interests.

Where processing relies on consent, you may withdraw that consent at any time in accordance with applicable requirements without affecting processing lawfully carried out before withdrawal.

7. Direct marketing

Submitting a demo request or inquiry does not automatically subscribe you to general marketing communications.

UMI will use Personal Data for electronic direct marketing only where the required lawful basis is available, including consent where required. Direct marketing will identify UMI clearly, provide an easy and free method to opt out, and stop without undue delay after an opt-out request.

If the website later includes an option to receive updates or offers, that choice will be separate, clear and not pre-selected.

8. Cookies and analytics

UMI uses two analytics services:

Vercel Web Analytics

Used to measure visits, pages, referral sources, devices and events in a privacy-focused manner. Vercel Web Analytics does not rely on cookies to track a visitor across websites and uses an anonymized derived visitor identifier that resets daily.

Google Analytics 4 (GA4)

Used to measure users, sessions, pages, traffic acquisition and core conversion events. GA4 may use first-party cookies such as `_ga` and `_ga_<container-id>` when Google Analytics is enabled.

UMI does not currently use Google advertising features, remarketing or personalized advertising on the website unless this notice is updated and the required controls and consents are implemented.

See the Cookie & Analytics Notice for more detail.

9. Service providers and disclosures

UMI may use technology providers as necessary to operate the website and its functions, including, depending on production configuration:

  • Vercel for hosting, deployment and Web Analytics;
  • Supabase for storage and management of demo-request data;
  • Sanity for website content management; and
  • Google Analytics 4 for website measurement and traffic analysis.

UMI may also use email, notification or security providers where necessary.

UMI does not sell or rent Personal Data.

Personal Data may be disclosed to a competent authority where required by applicable law or a lawful order.

10. Processing or transfers outside Saudi Arabia

Some technology providers may process data or technical information using systems or data centers located outside the Kingdom of Saudi Arabia.

Where this involves a transfer or disclosure of Personal Data outside the Kingdom, UMI will handle the transfer in accordance with the Saudi Personal Data Protection Law and the Regulation on Personal Data Transfer Outside the Kingdom, including data minimization and applicable safeguards and procedures.

11. Retention

UMI retains Personal Data only for as long as reasonably necessary for the purpose for which it was collected.

For the public website, UMI adopts the following periods:

  • Request Demo and commercial contact data: up to 24 months after the last interaction, unless a contractual relationship begins or a legal requirement requires a different period.
  • Security and technical error logs under UMI’s control: up to 12 months, unless an incident or legal requirement requires longer retention.
  • Google Analytics 4 user-level and event data: configured for 14 months.
  • Vercel Web Analytics: the daily visitor identifier is discarded after 24 hours and analytics reporting data is aggregated and anonymized; reporting availability is subject to the active Vercel configuration and plan.

Specific information may be kept longer where required by law or necessary to establish, exercise or defend legal rights.

12. Destruction or anonymization

When the purpose and retention period end, UMI takes reasonable measures to delete Personal Data from active systems or anonymize it so it can no longer be linked to the Data Subject.

Limited copies may remain temporarily in backups or recovery logs managed by service providers until those copies age out under the relevant retention cycle and are not used for new operational purposes.

13. Security

UMI applies reasonable technical and organizational measures designed to protect Personal Data against unauthorized access, loss, alteration or unlawful disclosure. Measures may include:

  • access controls based on business need;
  • encrypted connections where available;
  • secure environment-variable and production-secret management;
  • appropriate database and production-service permissions; and
  • security and error monitoring and incident response appropriate to the circumstances.

No method of electronic transmission or storage can guarantee absolute security.

14. Your rights

Subject to the Saudi Personal Data Protection Law, its Implementing Regulations and applicable lawful exceptions, you may have the right to:

  • be informed of the lawful basis and purpose for collecting your Personal Data;
  • access your Personal Data;
  • request a readable and clear copy;
  • request correction, completion or updating;
  • request destruction where the legal conditions are met;
  • withdraw consent where consent is the lawful basis; and
  • submit a complaint regarding processing.

Rights requests may be submitted to Hello@umi.com.sa.

UMI will act on a valid rights request without delay and within 30 days of receipt. Where permitted by the Regulations, this period may be extended by no more than an additional 30 days, with advance notice and reasons for the extension.

UMI may request appropriate information to verify the requester’s identity before fulfilling a request.

15. Complaints

You may contact UMI first at Hello@umi.com.sa so we can address a privacy concern.

You may also use the complaint channels made available by the competent Saudi data-protection authority in accordance with applicable law.

16. Third-party links

The website may contain links to websites or services not operated by UMI. Those services are governed by their own policies, and UMI does not control their privacy practices.

17. Children

The website is intended for businesses and professionals and is not directed to children. UMI does not knowingly collect Personal Data from persons under 18 through the public website.

If we become aware that a child’s Personal Data has been collected without an appropriate lawful basis, we will take appropriate action.

18. Changes to this policy

UMI may update this policy when services, technologies or legal requirements change. The latest update date appears at the top of the page.

Where a change is material to how Personal Data is processed, UMI will take an appropriate step to highlight the update or obtain new consent where required.

19. Contact

Unified Modern Intelligence (UMI)

Kingdom of Saudi Arabia

Email: Hello@umi.com.sa

Website: https://umi.com.sa