Privacy Policy

01Who is responsible for your data

The World Manufacturing Innovation Exhibition & Conference (WMIEC) is organised by ALOTHMANIYA COMPANY FOR MANUFACTURING, a single-person company registered in the Kingdom of Saudi Arabia and based in Riyadh. The company is the controller of the personal data processed through this platform.

Email

info@wmiec.com.sa

Telephone

0537816888

Address

Riyadh, Kingdom of Saudi Arabia

02What we collect

We collect what you give us, and what running the event requires. The list below is complete as the platform works today:

• Account data: your email address, your phone number if you add one, a hashed password we cannot read, your preferred language, and your two-factor settings if you enable them.
• Your profile: your name in Arabic and English, job title, organisation, nationality, country and city, and a photograph if you upload one.
• Sign-in sessions: device type and name, browser identifier, IP address and last-used time — so you can see your sessions and end any of them, and so we can detect unauthorised access.
• An internal identifier for your account, created at registration, carried on every request you make and present on your badge.
• Your event registration and its status, your answers to whatever questions the organiser adds to the registration form, your badge and its code, and check-in and check-out records at the gates including rejected attempts.
• What you save and choose inside the app: the sessions you added to your schedule, the read state of your notifications, and your per-channel notification preferences. These are stored on our servers rather than on your device, so they follow you between devices.
• Your device's notification token, its platform and its name — only after you allow notifications.
• Your consent record: what you agreed to, when, in which language, against which version of this policy, and the IP address at the time. That record is evidence for you as much as for us.
• What you send us voluntarily: contact messages, newsletter subscriptions, and exhibitor, sponsor and speaker applications with whatever you attach to them.
• Aggregate usage events — which screen was opened and which action taken — collected only after you consent to it, and never leaving our own servers.

03Why we process it

Each purpose stands on its own basis, and we keep them separate deliberately so you can accept some and refuse others without losing the service:

Account and registration

Creating your account, registering you for the event and issuing your badge. The service cannot be provided without it.

Event operations

Gate entry, your schedule, and operational notices about a session or a change that affects you.

Marketing communications

The newsletter and news of future editions. On your consent alone, withdrawable at any time.

Partner data sharing

Passing your details to an exhibitor or sponsor. Never happens without a separate, explicit consent.

Photography and media

Use of photographs or footage taken at the event. Also a separate consent.

04What we do not collect, and do not do

This section describes what the code does, not what we intend:

• The mobile app requests one permission only: notifications. Camera and location permissions are explicitly blocked in the build configuration, so no library can add them back.
• We do not track your location, and we do not access your contacts, your photos or your files.
• The app contains no third-party advertising, tracking, attribution or analytics SDK. Our usage measurement is entirely first-party.
• We use no advertising or tracking cookies. The website keeps your preferences and session in your own browser, and the app keeps sign-in tokens in the device secure store.
• We do not sell, rent or trade your personal data. We have not and will not.

05Who we share with

We share the minimum necessary, and only with the following:

• Service providers acting on our instructions: server hosting, and email and SMS delivery. None of them may use your data for their own purposes.
• Apple's and Google's notification services, to deliver a notification to your device. They receive the notification and your device token, not the contents of your account.
• Exhibitors and sponsors — and nothing reaches them except what you explicitly agreed to share, such as letting them scan your badge at their stand.
• Official authorities, where a law in force in the Kingdom or a judicial order requires it.

06How long we keep it

We keep each class of data for as long as the purpose it was collected for requires, after which it is deleted or anonymised.

The platform classifies data into defined classes — identity, sign-in sessions, one-time codes, consent records, registrations, badges, attendance, gate scans, partner applications, notifications, contact messages and audit logs — and each class has a period the organiser approves. Automatic deletion does not run against any class before its period is approved.

Some records outlive your account because a law requires them to — accounting records and event entry logs among them. Those are separated from your identity rather than deleted.

07Your rights, and how to use them

Under the Personal Data Protection Law of the Kingdom of Saudi Arabia you may know what we hold about you, obtain a copy of it, correct it, ask for it to be deleted, and withdraw any consent you gave.

You do not need to write to us to do it: the platform implements three requests directly from your account — export your data, correct it, and delete your account. Open «My account» then «Data requests» in the app or on the site. You receive a reference number, follow the request to completion, and an export arrives as a time-limited download.

If you would rather write, or wish to complain, the email above is the address. You may also complain to the competent data protection authority in the Kingdom.

08How we protect it

• Passwords are stored hashed. We cannot read them or recover them — which is why we reset a password rather than send it to you.
• Two-factor authentication is available on every account, and attempts are locked after a number of consecutive failures.
• Sign-in sessions are time-limited and rotated, and you can end any session from any device.
• Every connection to the platform is encrypted in transit, and the app keeps sign-in tokens in the operating system secure store.
• Every administrative access to personal data is written to an audit log that cannot be edited.

09Children

The platform is aimed at professional attendees, is not directed at children, and we do not knowingly collect their data. If we learn that an account belongs to a child under sixteen, we delete the account and its data. If you are a parent or guardian and believe this has happened, write to the address above.

10Changes to this policy

We may update this policy as the platform changes. Each version carries the date published at the top of this page, and your consent record stores the version you agreed to. Where a change is material and affects your data, we tell you before it takes effect, by email or by an in-app notice — we do not silently change the basis you agreed to.