Privacy Policy

In short:Hyyat Host is responsible for your data.

1. 1.1Hyyat Host, based in Riyadh, Saudi Arabia, is responsible for processing the personal data collected through hyyat.com, the client area at hyyatdomain.com and our official channels.
2. 1.2This policy applies to site visitors, our clients and anyone who contacts us.

In short:Account, billing and technical usage data.

1. 2.1Account data: name, email, mobile number, address, and organization name if any.
2. 2.2Billing data: invoices and payment history. Card details are processed directly by payment gateways, and we do not store full card numbers.
3. 2.3Domain data: the domain owner and contact details required by registries.
4. 2.4Communication data: the content of tickets, messages and conversations with us.
5. 2.5Technical data: IP address, browser type, login records, pages you visit, and cookies.
6. 2.6Hosted content: what you upload to our services belongs to you, and we access it only to provide the service, address a security risk, or by legal order.

In short:To provide and protect the service and to contact you.

1. 3.1Creating your account and providing, activating and renewing the services you order.
2. 3.2Issuing invoices, collecting payments and preventing fraud.
3. 3.3Registering and managing domains with registries.
4. 3.4Technical support and necessary notices (invoices, renewals, security and changes to terms).
5. 3.5Protecting our services and clients, and complying with the law and official requests.
6. 3.6Improving the site and services. Marketing messages are sent only with your consent, and you can stop them at any time.

In short:Only parties needed for the service; we do not sell your data.

1. 4.1We do not sell, rent or trade your personal data.
2. 4.2We share it only as needed with: payment gateways, domain registrars and registries (including ICANN and the Saudi Network Information Center), the data centers and infrastructure providers our services run on, and email and license providers.
3. 4.3We disclose data to competent authorities when lawfully required, and inform you where the law allows.

In short:Some of our servers and providers are outside the Kingdom.

1. 5.1Some of our services run on servers in Germany, Finland and the United States, and some data may be processed by providers outside the Kingdom.
2. 5.2We transfer data outside the Kingdom only as needed to provide the service, to parties applying an appropriate level of data protection, and as the law permits.
3. 5.3Any service whose page explicitly states that its servers are inside the Kingdom keeps its content data on those servers.

In short:While your account exists, then as the law requires.

1. 6.1We keep your account data while the account exists; after closure, we keep invoices and financial records for the period required by law.
2. 6.2Hosted content is deleted after the service ends, under each service's agreement.
3. 6.3Technical logs are kept for limited periods for security and troubleshooting.

In short:Reasonable technical and organizational measures.

1. 7.1We use encrypted connections (HTTPS), firewalls, restricted access permissions and system monitoring.
2. 7.2Only team members who need your data for their work can access it.
3. 7.3No system is completely secure; if an incident affects your data, we inform you and the competent authorities as the law requires.

In short:To run the site and measure visits.

1. 8.1We use cookies necessary to run the site and the client area (such as login, the order cart and language).
2. 8.2We use Google Analytics to measure visits and improve the site. For visitors from the European Union, the European Economic Area, the United Kingdom and Switzerland, it runs only after they agree in the cookie banner. You can change your choice at any time from Cookie settings, or delete cookies in your browser settings. These are the cookies we use:

   Cookie	Provider	Purpose	Duration
   PHPSESSID	Hyyat Host	Site browsing session (necessary)	Until the browser closes
   WHMCS…	Hyyat Host	Client area login and order cart (necessary)	Until the browser closes
   hy_consent	Hyyat Host	Stores your cookie banner choice (necessary)	6 months
   _GRECAPTCHA	Google reCAPTCHA	Protects forms from spam (necessary)	6 months
   _ga and _ga_*	Google Analytics	Measures visits (with consent for European visitors)	2 years

3. 8.3Content embedded from other sites (such as videos) may collect data under those sites' policies.

In short:Access, correction, deletion and withdrawing consent.

1. 9.1You have the right to know how we process your data, to access it and get a copy, to correct or update it, to request its deletion unless the law requires us to keep it, and to withdraw consent for what is based on consent, such as marketing messages.
2. 9.2Submit your request through a ticket from your account or by contacting us, and we respond within 30 days. We may ask for proof of identity.
3. 9.3If you are not satisfied with our response, you have the right to complain to the authority responsible for personal data protection in Saudi Arabia.

In short:We announce any material change.

1. 10.1We may update this policy, publishing the new version with its date and emailing you about material changes.