Privacy policy

This section will cover:

• The legal name of the entity operating Wahaj (Entaliq), its Commercial Registration number and national address.
• The contact channel for privacy requests, and the data protection officer if one is appointed.

This section will cover:

• Identity and contact: name, mobile number and email (optional).
• Property and location: city, district, national address, map coordinates, and roof details, photos and plans.
• Energy data: electricity bills and the values read from them, consumption data, and inverter production readings once connected.
• Project and service data: accepted quotations, payments, invoices, visit reports and photos, sign-off signatures and tickets.
• Technical data: usage logs and IP address, for security and abuse prevention.
• Payment card details are not stored by Wahaj; the licensed payment provider processes them directly.

This section will cover:

• Preparing your solar assessment and savings estimate.
• Sharing your request with qualified contractors and comparing their offers.
• Managing your project, payments, e-invoicing and after-sales services.
• Sending service notifications by WhatsApp, SMS and email.
• Optional processing that needs your separate consent: automatic bill reading, AI explanations and marketing messages.
• The legal basis for each purpose: consent, contract, legal obligation or legitimate interest.

This section will cover:

• Contractors: only city, system size and usage when you request offers; your name and address go to the contractor you select, after acceptance.
• Technicians, quality inspectors and maintenance providers assigned to your project.
• Only the financing partners you choose.
• Service providers that process data for us: hosting, licensed payment providers, messaging, maps and solar data, and the AI provider when you consent.
• Government authorities where the law requires it.
• Public share links, such as the system passport, do not show your personal data.

This section will cover:

• Where your data is hosted and processed.
• The safeguards for any transfer outside the Kingdom under the PDPL and its transfer regulation.

This section will cover:

• The retention period for each category, including electricity bills, production readings and project records.
• Records the law requires us to keep, such as tax invoices.
• How data is destroyed or anonymised when the period ends.

This section will cover:

• The rights to be informed, to access, to obtain a copy, to correct, to have data destroyed, and to withdraw consent.
• The response time for requests, and the right to complain to the Saudi Data & AI Authority (SDAIA).

This section will cover:

• Encryption, role-based access controls and audit logs.
• How security incidents are handled and how affected people are notified.

This section will cover:

• Wahaj uses essential cookies only: your sign-in session and your language preference.
• No third-party tracking or advertising tools are used.
• When you use the map to pin your location, Google Maps is loaded under its own policy.

This section will cover:

• The effective date and version, and how we tell you about material changes.

This section will cover:

• How to reach us about privacy questions and complaints.