Last updated: 25 September 2026

1. Information you give us

• Contact form: your name, company, email, phone number (optional), subject and message.
• Customer account: your name, company, email address, mobile number (optional) and password. Passwords are stored only as a secure one-way hash; we can never read them.
• Two-step login (optional): if you turn it on, we store the setup key for your authenticator app and your backup codes (backup codes are hashed), or send one-time codes to your email.

2. Information collected automatically

To protect your account and to answer messages properly, we record the following when you send a message, create an account, log in, fail a log-in attempt or reset your password:

• your IP address and the approximate city and country it belongs to (not your exact location; we never use GPS);
• device type, operating system and browser, as reported by your browser;
• screen size, browser language and time zone;
• the date and time of the event.

We cannot see and do not collect your device’s MAC address, contacts, files or any other data on your device.

3. Cookies

• Session cookie (DSITSESS): keeps you logged in; it is deleted when you log out or close the browser.
• Device cookie (dsit_dev): a random identifier that lets us recognise a browser you have used before, so we can warn you by email when your account is used from a new device. It is kept for up to 2 years.

We do not use advertising or tracking cookies.

4. Why we use your information

• to reply to your enquiries and provide quotations and services;
• to create and manage your customer account and give you access to downloads;
• to keep accounts secure: verifying your email, two-step login, spotting suspicious log-ins and sending “new login” alerts;
• to meet our legal obligations.

We rely on your consent (when you send a message or create an account), on performing our services to you, and on our legitimate interest in keeping the website and your account secure. We do not sell your data or use it for advertising.

5. Who we share it with

Only with service providers that help us run the website, and only what they need:

• Hostinger: hosts the website and its database;
• Titan Email: delivers our emails (verification codes, alerts and replies);
• FreeIPAPI: receives only your IP address to return an approximate city and country. No name, email or other detail is sent.

Some of these providers may process data outside Saudi Arabia. We may also disclose information when required by law.

6. How long we keep it

• Security records (login history and email logs): deleted automatically after 12 months.
• Contact messages: kept while needed to handle your enquiry and our business relationship.
• Account data: kept while your account is active; deleted on request.

7. Your rights

You may ask us to tell you what data we hold about you, give you a copy, correct it, or delete it, and you may withdraw your consent at any time. You also have the right to complain to the Saudi Data & AI Authority (SDAIA). To make a request, email info@dsit-ksa.com.

8. Security

The website uses HTTPS encryption, hashed passwords, optional two-step login, limits on repeated code requests, and restricted administrator access protected by an authenticator app.

9. Contact us

Digital Supply for IT (DSIT), Riyadh, Saudi Arabia
Email: info@dsit-ksa.com · Phone: +966 11 471 6332

We may update this policy from time to time; the date at the top shows the latest version.