Privacy Policy

Last updated: 1 October 2026

1) Who We Are

LTECH Luxury Technology (“LTECH,” “we,” “our,” or “us”) is a company established in the
Kingdom of Saudi Arabia that operates the website ltech.sa (the “Site”). LTECH is the controller of
the personal data described in this Privacy Policy. We are committed to protecting your privacy and handling your personal data transparently
and lawfully in accordance with the Personal Data Protection Law (“PDPL”) of the Kingdom of Saudi Arabia, its Implementing Regulations,
the Regulation on Personal Data Transfer outside the Kingdom, and the rules issued by the Saudi Data & AI Authority (“SDAIA”).

2) Scope of This Policy

This Privacy Policy explains what personal data we collect, how and why we collect it, the legal basis for processing it, how we store,
share, and destroy it, and the rights you have. It applies to personal data collected through the Site, our online forms, our services,
customer support, and communications with us.

3) Information We Collect

3.1 Information You Provide to Us

• Contact & request forms: name, email address, phone number, company name, and the content of your message or request (for example, requests for quotations or compliance services).
• Account & profile data: name, email address, phone number, password, company and job title.
• Orders & billing: billing and delivery addresses, invoicing details, order history. Payment card details are processed directly by our payment providers.
• Support & communications: messages, attachments, survey responses, and feedback.
• Job applications & vendors: CVs, qualifications, proposals, and references (where applicable).

Fields marked as required in our forms are necessary to respond to your request or provide the service; if you do not provide them, we may
not be able to do so. All other fields are optional. Please do not provide sensitive data (such as health, religious belief, or criminal records
data) unless we specifically request it and it is necessary for the stated purpose.

3.2 Information Collected Automatically

• Device & usage: IP address, browser type, device identifiers, pages viewed, time spent, referring/exit pages, and general location (city/country level).
• Cookies & similar technologies: see Cookies & Tracking Technologies.

3.3 Information From Third Parties

• Payment processors & logistics partners for transaction status and delivery updates.
• Analytics and advertising partners for aggregated audience insights and ad performance, subject to your cookie consent.
• Fraud prevention & verification services where necessary to protect users and our business.

4) How We Use Your Information

• Respond to your enquiries, requests for quotations, and service requests.
• Provide, operate, and improve the Site, products, and services.
• Process orders, payments, deliveries, returns, and customer support requests.
• Send service notices (e.g., order confirmations, policy updates) and, with your consent, marketing communications.
• Monitor usage, perform analytics, and improve security and performance.
• Detect, prevent, and investigate fraud, abuse, and violations of our Terms of Use.
• Comply with our legal and regulatory obligations and protect our rights.

We collect only the personal data that is necessary for these purposes, and we will not process it for a purpose that is incompatible with
the purpose for which it was collected. If we need to use your personal data for a new purpose, we will inform you and, where required, obtain
your consent.

5) Legal Bases for Processing

In accordance with the PDPL, we process personal data on one or more of the following legal bases:

• Consent: for example, for marketing communications and non-essential cookies. You may withdraw your consent at any time.
• Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into one.
• Legal obligation: where processing is required to comply with laws and regulations in force in the Kingdom.
• Legitimate interest: for example, securing the Site, preventing fraud, and improving our services, provided that this does not prejudice your rights and interests and does not involve sensitive data.

6) Cookies & Tracking Technologies

We use cookies, pixels, and similar technologies to operate the Site, remember your preferences, analyze traffic, and
measure the effectiveness of campaigns.

• Strictly Necessary: essential for core functionality and security. These do not require consent.
• Performance/Analytics: help us understand how the Site is used and improve it.
• Functionality: remember choices (e.g., language, region).
• Advertising: personalize ads and measure their performance.

We set non-essential cookies (performance, functionality, and advertising) only after obtaining your consent through our cookie banner.
You can change or withdraw your consent at any time through the cookie preferences on the Site or your browser settings. Some features may not
function properly if you disable certain cookies.

7) Analytics, Advertising & Social Features

Subject to your consent, we may use analytics tools to measure Site usage and performance and advertising partners to deliver or
measure ads. These partners may set their own cookies or use identifiers in accordance with their own policies, and may process data
outside the Kingdom as described in Section 10. You may opt out at any time through our cookie preferences or your browser or device settings.

8) Payments

Payments are processed by third-party payment service providers licensed or authorized in accordance with the requirements of the Saudi Central
Bank (SAMA), where applicable. We do not store full payment card numbers on our servers. Payment providers handle your payment data in accordance
with their own privacy policies and applicable security standards (e.g., PCI DSS).

9) How We Share Information

• Service providers & vendors: IT hosting, email, customer support, analytics, payment processing, and logistics/couriers, who process personal data on our behalf under written agreements and only according to our instructions.
• Technology partners: manufacturers or vendors of products and licenses you request from us, to the extent necessary to fulfil your order (for example, license registration).
• Government & regulatory authorities: where required by law, a court order, or a request from a competent authority in the Kingdom.
• Business transfers: as part of a merger, acquisition, restructuring, or asset sale, subject to the recipient protecting your personal data in accordance with this Policy and the PDPL.
• With your consent: or at your direction.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

10) Transfers Outside the Kingdom

Some of our service providers (for example, cloud hosting, email, and analytics providers) may process personal data outside the Kingdom of
Saudi Arabia. We transfer personal data outside the Kingdom only in accordance with the PDPL and the Regulation on Personal Data Transfer outside
the Kingdom, for example, to countries with an adequate level of protection or subject to appropriate safeguards such as standard contractual
clauses approved by SDAIA, and only to the minimum extent necessary for the purpose of the transfer.

11) Data Storage, Retention & Destruction

We store personal data electronically in secure systems operated by us or our service providers. We retain personal data only for as long as
necessary to fulfil the purposes described in this Policy, or for any longer period required by the laws and regulations in force in the Kingdom
(for example, accounting, tax, and commercial record-keeping requirements) or necessary to establish, exercise, or defend legal claims. Once the
retention period ends, we securely destroy the personal data or anonymize it so that it can no longer identify you.

12) Security

We apply appropriate administrative, technical, and organizational measures to protect personal data against unauthorized access, disclosure,
alteration, or destruction, taking into account applicable cybersecurity requirements in the Kingdom. No method of transmission or storage is 100%
secure; therefore, we cannot guarantee absolute security. If a personal data breach occurs, we will notify SDAIA and, where the breach is likely to
cause harm to you, notify you, within the timeframes required by the PDPL and its Implementing Regulations.

13) Children’s Privacy

The Site is intended for individuals aged eighteen (18) or over and for businesses. We do not knowingly collect personal data from persons who
lack full legal capacity without the consent of their legal guardian. If you believe a minor has provided personal data to us, please contact us
and we will destroy it.

14) Your Rights & Choices

Under the PDPL, you have the right to:

• Be informed of how and why your personal data is collected and processed, and the legal basis for doing so.
• Access your personal data and obtain a copy of it in a readable and clear format.
• Request correction, completion, or updating of inaccurate or incomplete personal data.
• Request destruction of your personal data when it is no longer needed, subject to our legal retention obligations.
• Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, contact us at info@ltech.sa. We may request information to verify your identity
and will respond within thirty (30) days, or within any other period permitted under the PDPL Implementing Regulations. If you are not satisfied
with our response, you have the right to lodge a complaint with SDAIA, the competent authority in the Kingdom of Saudi Arabia.

15) Marketing Communications

We send marketing or promotional messages by email, SMS, or other personal communication channels only with your prior consent. Every marketing
message includes a simple way to unsubscribe, and you may also withdraw your consent at any time by contacting us. We may still send you
non-promotional communications, such as service or transactional messages.

16) Do Not Track

Some browsers offer “Do Not Track” (DNT) signals. Because there is no industry standard for DNT, we currently do not respond to such signals.
You can manage cookie-based tracking via our cookie preferences and your browser settings.

17) Third-Party Websites

Our Site may link to third-party websites or services. We are not responsible for the privacy practices of those third parties.
We encourage you to review their privacy policies.

18) Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable laws. The updated version will be indicated
by a revised “Last updated” date at the top of this page and becomes effective upon posting. Where a change is material, we will notify you through
the Site or by email, and where the change requires your consent, we will obtain it before applying the change to your personal data.

19) Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: