The short version
- We collect only what we need to carry out, record and bill your service.
- We never sell your data or use it for advertising.
- Card details go straight to Tap Payments. We never see your full card number.
- You can ask to see, correct or delete your data at any time, and we reply within 30 days.
- We handle your data in line with the Saudi Personal Data Protection Law (PDPL).
This document is also published in Arabic. If the two versions differ, the Arabic version applies.
1.Who we are
This policy explains how PrimeLynx Global Company ("we") handles personal data when you use the PrimeFix website or app, or receive our services. We are responsible for that data as the controller under the Personal Data Protection Law and its Implementing Regulations.
2.What we collect
| Type of data | Examples |
|---|---|
| Account details | Name, email, phone number and role. Your password is stored only as a secure hash. |
| Site and billing details | Company name, site addresses, National Address, VAT and Commercial Registration numbers. |
| Job records | Service requests, photos, diagnosis notes, quotations, completion reports and signatures. |
| Location | A technician’s location when they check in at a site, and a site’s map pin if you add one. Collected only while the app is in use. |
| Payment records | Invoice amounts, payment status and the reference Tap Payments sends us. Never your card number. |
| Technician bank details | Bank name, IBAN and account holder name, used only to pay technicians for their work. |
| Device and security data | App version, device type, language, notification token, sign-in times and IP address. |
| Messages | What you send us through the contact form, by email or by phone. |
3.Why we use it
- to create and protect your account;
- to schedule visits, send technicians and keep you updated on each job;
- to issue quotations and VAT invoices and to take payments, as ZATCA rules require;
- to pay technicians for completed work;
- to answer your questions and handle complaints;
- to prevent fraud and keep the portal secure;
- to meet our legal obligations.
We rely on the contract between us, our legal obligations and our legitimate interest in running a safe service. Where we need your consent, such as for location access or push notifications, we ask first, and you can withdraw it at any time in your device settings.
Our staff can use an AI writing tool (Google Gemini) to turn a job’s notes into a clear technical report. The tool receives the job details, which can include your name and site address, but never your password or payment information. Every report is reviewed by our team before it is issued.
5.Data stored outside Saudi Arabia
Some of the providers above store or process data outside the Kingdom. We transfer personal data abroad only as the PDPL and the Regulation on Personal Data Transfer outside the Kingdom allow, with safeguards such as contractual commitments, and only the minimum needed for the purpose.
6.How long we keep it
- Account details: for as long as your account is open. After you close it, we delete or anonymise them within 90 days.
- Invoices, payments and the job records behind them: for as long as Saudi tax and commercial record-keeping rules require, which can be up to 10 years.
- Security logs: up to 12 months.
7.How we protect it
- Every connection to the portal is encrypted (HTTPS).
- Passwords are stored as one-way hashes, never in readable form.
- Access is limited by role: a client sees only their own records, and a technician sees only the jobs assigned to them.
- Sign-in is protected against repeated password guessing, and sensitive actions such as payments and account changes are recorded in an audit log.
If a data breach puts your information at risk, we will notify the Saudi Data and AI Authority (SDAIA) within 72 hours and tell you without undue delay, as the PDPL requires.
8.Your rights
Under the PDPL you have the right:
- to know how your data is used, which is what this policy is for;
- to get a copy of your data in a readable format;
- to have inaccurate or incomplete data corrected;
- to have data deleted once we no longer need to keep it;
- to withdraw any consent you have given us.
To make a request, email info@primelynxglobal.com from the address on your account. We may ask you to confirm your identity first, and we will reply within 30 days. If you are not satisfied with our answer, you can complain to SDAIA.
10.Children
The portal is for adults and businesses. We do not knowingly collect personal data from anyone under 18.
11.Changes to this policy
We will publish any update on this page with its effective date. If a change affects how we use your data in a significant way, we will tell you by email or in the app before it takes effect.
12.Contact us
PrimeLynx Global Company
- Email: info@primelynxglobal.com
- Phone: +966 56 769 3142
- Address: 2091 Makkah Almukarama Branch, Al Sulaimaniyah District, Riyadh 12621, Kingdom of Saudi Arabia