Privacy Policy

1. Data Controller

The data controller responsible for your personal data is ClickFix, operating in the Kingdom of Saudi Arabia. Our designated Data Protection Officer (DPO) can be reached at dpo@clickfix.me for any privacy-related requests or concerns.

2. Personal Data We Collect

We collect personal data in the following categories when you use the Platform:

We collect this data through: (a) information you provide directly when registering or booking; (b) automated technologies such as cookies, pixels, and mobile SDKs; and (c) third-party partners as described in Section 5.

3. How We Use Your Personal Data

3.1 Service Delivery (Contractual Necessity)

• To process and fulfill your service bookings.
• To match you with an available, vetted Provider and share your first name and service address with them.
• To process payments and issue VAT invoices.
• To enable real-time service tracking within the app.
• To communicate booking confirmations, updates, and support responses.

3.2 Safety and Trust

• To verify account identity and prevent fraud.
• To ensure the safety of Customers and Providers.
• To investigate and resolve disputes or claims under the Happiness Guarantee.

3.3 Platform Improvement (Legitimate Interests)

• To analyze usage patterns and improve app features, performance, and user experience.
• To conduct internal research, analytics, and service quality audits.

3.4 Marketing and Advertising (Consent / Legitimate Interests)

• To display personalized advertisements promoting ClickFix across third-party networks (Google Ads, Meta/Facebook Ads, Snapchat Ads, and others).
• To measure the effectiveness of our advertising campaigns and attribute app downloads to specific campaigns using Mobile Measurement Partners (MMPs) such as AppsFlyer or Adjust.
• To send you promotional emails, SMS notifications, or push notifications about new features and exclusive offers — only where you have provided explicit consent.

3.5 Legal Compliance

• To comply with applicable laws and regulations of the Kingdom of Saudi Arabia, including PDPL, VAT/tax laws, and any lawful requests by governmental authorities.
• To retain financial and transactional records for the periods required by Saudi law.

4. Marketing and Promotional Communications

With your explicit consent, ClickFix may contact you with newsletters, promotional offers, and service updates via email, SMS, or push notification.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email.
• Replying "STOP" to any marketing SMS.
• Updating your communication preferences in the app settings under Profile > Notifications.

Opting out of marketing communications does not affect transactional messages related to your bookings (e.g., booking confirmations, service updates, support replies), which are necessary for service delivery.

We may share your Identity Data, Location Data, and Technical Data with our corporate affiliates, subsidiaries, or parent companies for operational and marketing purposes. All such entities are bound by this Privacy Policy and comply with Saudi PDPL.

5. Third-Party Analytics, Cookies, and Mobile Measurement Partners

Our website and mobile application use third-party analytics tools, tracking cookies, web beacons, and Mobile Measurement Partners (MMPs) to help us understand usage patterns, measure marketing effectiveness, and optimize your experience. These include:

• Google Analytics and Google Tag Manager — for website traffic analysis.
• Firebase — for mobile app analytics and crash reporting.
• Meta Pixel — for ad conversion tracking and audience targeting on Facebook and Instagram.
• AppsFlyer or Adjust (where deployed) — for attribution of app downloads and installs to advertising campaigns.

These platforms collect pseudonymous technical identifiers such as browsing patterns, IP addresses, device types, and mobile advertising identifiers (Apple IDFA or Google Advertising ID). This data is processed securely and used solely to enhance platform functionality and advertising efficiency.

5.1 Cookies on the Website

Our website uses the following types of cookies:

• Strictly Necessary Cookies: Required for the website to function (cannot be disabled).
• Analytics Cookies: Help us understand how visitors use the website (e.g., Google Analytics).
• Marketing Cookies: Used to deliver relevant advertisements and track campaign performance (e.g., Meta Pixel, Google Tag).

On your first visit to clickfix.me, a Cookie Consent Banner will appear asking for your consent to non-essential cookies. You may withdraw consent at any time by adjusting your preferences via the consent banner or your browser settings.

6. Data Sharing and Disclosure

ClickFix does not sell your personal data. We share your data only in the following limited circumstances:

• With Providers: We share your first name and service address (but not phone number or email) with the Provider assigned to your booking.
• With Payment Processors: We share necessary transaction data with our secure payment processing partner(s) to facilitate payments.
• With Analytics and Advertising Partners: As described in Section 5, we share pseudonymous technical data with analytics and advertising platforms.
• With Affiliates: We may share data with corporate affiliates or subsidiaries bound by this Privacy Policy, for operational and marketing purposes.
• For Legal Compliance: We may disclose data when required by law, court order, or a competent governmental authority in the Kingdom of Saudi Arabia.
• In Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specifically:

• Account and identity data: Retained for the duration of your active account, plus 3 years after closure (or as required by Saudi law).
• Transaction and financial records: Retained for a minimum of 10 years in accordance with Saudi accounting and VAT regulations.
• Marketing consent records: Retained for the duration of the consent period, plus 2 years.
• Technical and usage data: Retained for up to 24 months.

Upon expiry of the applicable retention period, your data will be securely deleted or irreversibly anonymized.

8. Data Security

ClickFix implements industry-standard technical and organizational security measures to protect your personal data, including:

• Encryption of data in transit (TLS/HTTPS) and at rest.
• Role-based access controls limiting employee access to data on a need-to-know basis.
• Regular security audits and vulnerability assessments.
• A documented data breach response plan compliant with PDPL notification requirements.

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. In the event of a data breach that poses significant risk to your rights, we will notify you and the relevant Saudi authority in accordance with PDPL requirements.

9. Account Deletion and Your Data Rights

Under the Saudi Personal Data Protection Law (PDPL), you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of any inaccurate or incomplete data.
• Right to Erasure (Deletion): Request deletion of your personal data, subject to legal retention requirements.
• Right to Data Portability: Request a machine-readable copy of your data for transfer to another service.
• Right to Withdraw Consent: Withdraw consent for marketing communications or data processing based on consent, at any time.
• Right to Object: Object to processing based on legitimate interests in certain circumstances.

To exercise any of these rights, or to submit an account deletion request, you may:

• Submit the request directly within the ClickFix app under Settings > Profile > Delete Account.
• Email our Data Protection Officer at dpo@clickfix.me.

Upon identity verification, we will process your request within the timeframes required by PDPL. Deletion will result in permanent removal or complete anonymization of your data across our systems, except where retention is mandated by the laws of the Kingdom of Saudi Arabia (such as financial or tax records).

10. Children's Privacy

The ClickFix Platform is not directed at individuals under the age of 18. We do not knowingly ollect personal data from minors. If we become aware that we have inadvertently collected data from a person under 18, we will take immediate steps to delete that data. If you believe a minor has submitted data through our Platform, please contact us at dpo@clickfix.me.

11. Third-Party Links

The Platform may contain links to third-party websites or services. ClickFix is not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

12. Cross-Border Data Transfers

Some of our third-party analytics and advertising partners may process your data outside the Kingdom of Saudi Arabia. In such cases, ClickFix ensures that appropriate safeguards are in place in accordance with PDPL requirements for cross-border data transfers, including contractual protections and compliance with NDMO guidance.

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. Material changes will be communicated via in-app notification or email. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

14. Contact and Data Protection Officer

For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, please contact:

You also have the right to lodge a complaint with the National Data Management Office (NDMO) or any other competent supervisory authority in the Kingdom of Saudi Arabia if you believe your data rights have been violated.