Legal
Privacy Policy
Effective Date / Last Updated:
First: Introduction
Nerva was established, operated by Business Nerve Information Systems Technology Company (a single-person company), under Commercial Registration No. (4030450868), and Tax Registration No. (311163615200003), on 24/01/2022 G, corresponding to 21 Jumada al-Akhirah 1443 AH.
Nerva provides ERP implementation services, Odoo services, and digital transformation services for companies and business clients.
Nerva pays great attention to protecting the privacy and confidentiality of the personal data of its website users, as well as its digital channels and platforms. Out of its awareness of the importance of data and the necessity of preserving the privacy of its owners, this policy has been prepared to enable the user to understand the nature of the data collected, the purposes of its processing, their rights related to it, and how to exercise those rights.
A user's access to the website or their use of any of Nerva's official channels constitutes an acknowledgment that they have read and understood this policy. Consent is not considered a basis for processing except in cases where the law requires obtaining it.
Second: Contact Information
Website
nerva.co
The company
Nerva, operated by Business Nerve Information Systems Technology Company (a single-person company)
Commercial Register Number
4030450868
Address
3310 Habib Muhammad Mahmoud, 6358 Al Khalidiyyah Dist., 23421, Jeddah, Kingdom of Saudi Arabia
info@nerva.co
Phone number
+966 920 031 275
Third: Policy Scope
This policy explains how Nerva, operated by Business Nerve Information Systems Technology Company (a single-member company) (hereinafter referred to as "Nerva", "we", or "us"), collects, uses, stores, protects, and retains personal data provided through the website nerva.co (the "Website").
This policy applies only to website visitors and prospective business clients who interact with the website, or submit their data through contact or inquiry forms, or via the WhatsApp number published on the website.
This policy does not apply to contracted customer data, accounting records, invoices, payroll files, tax documents, ERP system data, or any information processed after contracting; as such data is subject to the relevant service delivery agreements, confidentiality terms, and their associated information and data protection controls.
Fourth: Data Controller
For the purposes of this policy and relevant personal data protection requirements, the data controller for the personal data collected through the website is Nerva, operated by Business Nerve for Information Systems Technology (a single-member company).
Fifth: The personal data we collect
Data provided directly by the user: such as name, company name, phone number, email, organization size, service of interest, message or inquiry content, and any other data provided by the user of their own free will through the available communication channels.
Indirectly collected data: such as technical data and essential cookies collected when visiting the website, as described in this policy.
Access to users' data and information is restricted to authorized employees at Nerva, and for purposes necessitated by the nature of their work and the relevant regulations.
Sixth: Technical data that is collected automatically
Since the website operates using standard website and server technologies, some technical data may be collected automatically when a visitor accesses the site. This data may include the Internet Protocol (IP) address, browser and device type, operating system, date and time of access, pages visited, server logs, and any similar technical information necessary for operating, securing, diagnosing faults, and monitoring the performance of the website.
Nerva does not currently use third-party analytics tools, advertising pixels, behavioral tracking tools, or non-essential marketing cookies. The website may use essential technical cookies or similar technologies when they are necessary for core functionality, security, language and session management, or for operating forms.
Seventh: Purposes of data processing and the legal basis
Responding to inquiries, questions, and requests submitted via the website.
Communicating with potential business customers regarding Nerva services related to their interests or requests.
Assessing service requirements and preparing appropriate responses, proposals, or consultative follow-ups.
Managing potential clients and business opportunities within internal customer relationship management (CRM) systems.
Sending service updates, newsletters, marketing communications, or business development follow-ups, where legally permitted.
Maintaining the security, integrity, and proper operation of the website.
Complying with applicable legal and regulatory requirements.
Personal data is processed for specific and legitimate purposes, in compliance with the Personal Data Protection Law in the Kingdom of Saudi Arabia, its implementing regulations, and relevant regulations. Depending on the case, processing may be based on the consent of the data subject, taking steps at their request prior to entering into a contractual relationship, fulfilling statutory obligations, or pursuing legitimate interests that do not conflict with their fundamental rights and interests.
Eighth: Customer Management, Storage, and Access Control Systems
Information provided through contact or inquiry forms on the website, or via the WhatsApp number published on the site, is stored within secure cloud-based systems used by Nerva for customer and business relationship management.
Access to personal data is restricted to authorized Nerva employees whose nature of work requires access to it for business, sales, consulting, operational, compliance, or administrative purposes.
Nerva applies reasonable organizational, technical, and administrative measures designed to protect personal data from unauthorized access, loss, misuse, alteration, or disclosure.
Ninth: Marketing Communications
Nerva may use the contact information provided through the website to follow up with potential business clients and communicate with them regarding Nerva's services. These communications may occur via email, phone calls, WhatsApp, SMS, newsletters, or social media messages.
Marketing emails may contain an unsubscribe option, allowing recipients to stop receiving future marketing emails. Visitors can also contact Nerva via info@nerva.co to request that their contact details not be used for marketing purposes, subject to any applicable regulatory requirements.
Tenth: Disclosure of Personal Data
Nerva does not sell personal data, nor does it disclose website visitor or prospective customer data to third parties for their independent marketing purposes.
Nerva may disclose personal data whenever required by regulations, rules, legal proceedings, court orders, or requests from competent government or regulatory authorities.
Personal data may also be processed within the secure technical systems used for hosting, customer relationship management, and business operations, in accordance with appropriate confidentiality and security controls.
Eleventh: Data retention and destruction period
Nerva retains personal data for the period necessary to achieve the purposes for which it was collected, or to meet relevant statutory, contractual, or operational requirements. When it is no longer needed, reasonable measures are taken to securely destroy it or anonymize it, unless there is a statutory justification requiring its retention for a longer period.
Twelfth: Data Security
Nerva takes reasonable measures to protect personal data collected through the website. These measures may include restricting access, using secure cloud-based systems, internal access controls, administrative procedures, and other appropriate safeguards.
No website, server, or electronic communication method can be guaranteed to be completely secure; therefore, visitors should avoid sending unnecessary or sensitive information through the website's public forms.
Thirteenth: Rights of Personal Data Subjects
1. The Right to Know: Knowledge of the methods of data collection, the legal basis for its processing, how it is used, stored, and destroyed, and the entities with which it may be shared.
2. Right of access: Request to view their personal data held by Nerva.
3. Right to data portability: Obtaining a copy of their personal data in a clear and readable format, in accordance with the regulatory controls.
4. Right to rectification, completion, or update: Request the correction and updating of inaccurate, incorrect, or incomplete data.
5. Right to Erasure: To request the destruction of his/her personal data in cases permitted by the law, unless there is a legal or contractual justification requiring its retention.
6. Right to withdraw consent: Withdrawal of consent to processing at any time when consent is the legal basis for processing, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise any of your statutory rights, please contact us via email at info@nerva.co. Nerva may request reasonable information to verify the applicant's identity before processing it.
Fourteenth: Data of children and minors
The website is intended for business and corporate clients. Nerva does not knowingly collect personal data from children or minors under the age of 18 through the website. If Nerva becomes aware that personal data of a minor has been submitted through the website without proper authorization, it will take reasonable steps to delete it whenever required.
Fifteenth: Privacy Policy Updates
Nerva may review and update this policy from time to time to reflect changes in its practices, website functionality, regulatory requirements, or processing purposes. The updated version will be posted on the website with an indication of the effective date or the date of the last update.
Sixteenth: Complaints and Inquiries
In case of any complaint or inquiry regarding this policy or the method of handling personal data, please contact the Data Privacy and Compliance team at Nerva via email: info@nerva.co.