1. Introduction & Contracting Parties

Welcome to "Lamsa", an advanced cloud digital platform owned by Lamsa Smart Information Technology Est. in the Kingdom of Saudi Arabia, specializing in interactive reputation management, customer ratings, and Near Field Communication (NFC) solutions for businesses and commercial establishments.

This document constitutes a legally binding contract between Lamsa Platform ("Platform") and the registered commercial entity or its authorized representative ("Merchant" or "Subscriber"), as well as any customer or visitor interacting with the service.

2. Nature of Service & NFC Contactless Smart Cards

The Platform enables commercial establishments to connect their physical branches with NFC and QR Code smart cards to facilitate customer reviews on Google Maps, while offering an encrypted, private direct feedback channel to the store owner. The smart cards are governed by the following rules:

• Specific Use License: The Platform grants the Merchant a limited license to utilize smart cards programmed exclusively for their authorized branches. A single card may not be linked to multiple establishments or unauthorized branches without prior approval.
• Prohibition of Tampering & Reprogramming: Attempting to tamper with card programming, reprogram cards with external links outside Lamsa, or decompile the platform's cryptographic registration algorithms is strictly prohibited.
• Physical Wear & Card Loss: Smart cards are electronic hardware. The merchant is solely responsible for protecting them from mechanical damage, fluids, or field misuse. Replacement cards are subject to approved replacement fees.

3. Merchant & Authorized Representative Obligations

The Merchant and authorized representatives commit to the following:

• Accuracy of Information: Providing truthful, up-to-date information regarding trade name, Commercial Registration (CR) or Freelance Document, contact numbers, operational cities, and Google Maps review links for each branch.
• Credential Confidentiality: The owner bears full responsibility for maintaining the strict confidentiality of passwords, verification codes, and all activities conducted through their dashboard.
• Prohibition of Fraudulent Practices: Utilizing the platform or cards for misleading consumer activities, generating fabricated reviews, or attempting to circumvent E-Commerce and Consumer Protection laws in the Kingdom is strictly forbidden.

4. Legal Disclaimer Regarding Google Maps Services & Policies

• No Guarantee of Specific Results: The Platform does not guarantee an increase in ratings to any specific star rating or metric; customer feedback depends wholly on actual consumer experience, satisfaction, and independent free will.
• Consumer Autonomy: The Platform does not intercept, filter, or suppress negative reviews; directing the customer to Google Maps is based entirely on their unconstrained choice.
• Immunity from Third-Party Actions: Lamsa disclaims all liability for any account suspension by Google, automated removal of reviews by Google's spam filters, or policy and URL updates enacted by Google.

5. Subscriptions, Payment Clearance & Grace Periods

• Pricing & Currency: Monthly or annual subscription fees and additional NFC card charges are determined according to the official rates published on the dashboard, denominated in Saudi Riyals (SAR).
• Verification & Approval: Subscription renewals and card requests undergo financial audit and clearance by platform management based on official bank statements and verification of received funds.
• Grace Period: The Platform grants a temporary grace period upon subscription expiry to ensure uninterrupted business continuity. If outstanding amounts remain unpaid after the grace period, Lamsa reserves the right to temporarily pause services until dues are settled.
• Refund Policy: Due to the customized nature of programmed NFC hardware and digitally activated services, fees for programmed cards and active subscription durations are non-refundable once activated.

6. Prohibition of Defamation & Anti-Cybercrime Compliance

All transactions and communications across the Platform are strictly governed by the Saudi Anti-Cybercrime Law (Royal Decree No. M/17):

7. Intellectual Property & Governing Jurisdiction

Intellectual Property: Lamsa Smart Information Technology Est. retains all proprietary intellectual property rights, trademarks, designs, and source code of the Platform. Copying, scraping, or reverse engineering is prohibited without prior written consent. The Merchant retains full ownership of their registered trademark and logo.

Governing Law: This agreement is governed by and construed in accordance with the laws and regulations of the Kingdom of Saudi Arabia. The competent courts in the City of Riyadh hold exclusive jurisdiction over any disputes arising from this agreement.

1. Compliance with the Saudi Personal Data Protection Law (PDPL)

Lamsa adheres to the highest legal and security standards for personal data privacy, in full compliance with the Personal Data Protection Law (PDPL) enacted by Royal Decree No. (M/19) and its executive regulations issued by the Saudi Data & Artificial Intelligence Authority (SDAIA).

2. Data Categories Collected & Processing Purposes

Data collection is strictly limited to the minimum necessary to provide the service:

• Merchant Account Data: Business name, commercial category, owner name, contact mobile number (used for sign-in and support), and branch identifiers for account administration, billing, and operational communication.
• Direct Feedback Records: When a customer submits direct feedback, we collect rating stars, category selection, and comments. These records are strictly private and confidential, never published publicly.
• Optional Customer Contact Details: If a customer optionally provides their mobile number in the feedback form, it is used exclusively by store management to resolve their grievance directly.
• Technical & Security Telemetry: IP addresses, browser agents, and scan timestamps collected solely to secure accounts, prevent cyberattacks, and ensure compliance with National Cybersecurity Authority (NCA) standards.

3. Feedback Confidentiality & Encryption (Security & Encryption)

The Platform implements state-of-the-art cryptographic safeguards to ensure absolute data privacy:

• In-Transit & At-Rest Encryption: All data transmissions are encrypted via TLS 1.3 with 256-bit strength. Passwords, feedback records, and sensitive tokens are cryptographically secured using accredited algorithms.
• Exclusive Owner Access: Decryption and access to private customer feedback is restricted solely to the authorized store owner through the authenticated portal.
• Strict Prohibition on Selling Data: Lamsa unconditionally pledges never to sell, rent, monetize, or disclose personal or commercial data to any third party for marketing or advertising under any circumstance.

4. Data Subject Rights Under PDPL

Pursuant to the Saudi Personal Data Protection Law, every data subject is entitled to the following statutory rights:

• Right to be Informed: To understand the legal basis and purpose behind the collection and processing of their personal data.
• Right of Access: To request access to and obtain a copy of their personal data maintained on the Platform.
• Right to Rectification: To request correction, completion, or updating of any inaccurate or outdated personal data.
• Right to Erasure / Destruction: To request destruction or erasure of personal data when processing purposes conclude or consent is withdrawn, subject to statutory retention obligations.

5. Data Protection Officer (DPO) & Regulatory Contact Channels

To exercise your statutory data rights, or to submit inquiries and complaints regarding privacy and data processing, please contact our Compliance & Privacy team directly:

All formal regulatory requests regarding personal data protection are answered within statutory timelines mandated by SDAIA regulations.