Last updated: September 30, 2026
1Introduction and scope
CAP Recycling is committed to protecting the personal data of visitors to its website and users of its platform. This policy explains the data we collect or process when you visit the website or use the platform and related services. It applies across all customers and their users; the policy content does not change by tenant.
The platform serves multiple organizations. An organization determines the purposes for data it enters about its employees, drivers, customers, or suppliers. CAP Recycling processes that data to provide the platform and under its agreement with the organization, unless a different arrangement or legal obligation applies. This policy does not make CAP Recycling the controller of every record entered by an organization.
2Data we collect
If you contact us through a contact form, we may collect your name, email address, phone number, organization name, and message.
When you use the platform, we may process account, contact, sign-in, permission, and organization details, and information entered by an organization or its users about employees, drivers, customers, suppliers, vehicles, branches, requests, deliveries, and trips. Depending on the enabled feature, this may include identity numbers, financial details, or vehicle location data. We may also record technical information needed to operate and secure the service, such as sign-in, device, browser, and error logs.
We collect data from you, an authorized organization administrator, or systems and devices connected by the organization. Do not submit sensitive data unless a specific feature requires it and you are authorized to do so.
3How we use data and legal basis
We use data to operate the website and platform; create and verify accounts and manage permissions; provide organization workflows; respond to inquiries; provide support; maintain and secure the service; troubleshoot and prevent misuse; improve the service when measurement tools are enabled; and meet legal and contractual obligations.
Where applicable, processing follows the Saudi Personal Data Protection Law and its regulations, using the appropriate legal basis for each purpose, such as performing a contract or providing the service, consent where required, a legal obligation, or another lawful basis. Merely using the website does not constitute consent to every type of processing.
4Data sharing and processing locations
We do not sell or rent personal data. We may make it available to authorized users in the organization, providers supporting hosting, storage, security, communications, maps, or analytics when those services are used, and competent authorities when legally required. Access is limited to what is needed for the purpose. Sharing organization data is subject to our agreement with that organization.
Hosting or processing takes place in: [List the actual countries and locations]. Any transfer of personal data outside Saudi Arabia will follow applicable Saudi legal requirements.
5Cookies
We may use essential cookies for sign-in, sessions, website security, and user preferences. Optional measurement tools may be used when enabled. You can manage cookies in your browser settings; disabling essential cookies may prevent some platform functions from working.
6Data security and retention
We apply appropriate technical and organizational measures to protect data from unauthorized access, use, alteration, or disclosure. No electronic system can be guaranteed completely secure.
We retain data for as long as needed for the purposes described and in accordance with retention schedules, agreements, and legal obligations. Retention periods by data category: [List actual periods or the criteria used to determine them]. When the purpose or period ends, we destroy the data or remove identifying details unless retention is legally required or needed to protect legal rights.
7Your rights and requests
Where the Saudi Personal Data Protection Law applies, you may request information about and access to your data, obtain a copy, request correction, completion, or updating, request destruction where legally available, and withdraw consent when consent is the legal basis, subject to legal exceptions. If your organization entered data and controls its purposes, contact the relevant organization administrator. You may contact us for help or to make a request about your account data. We may verify your identity before processing a request.
8Changes and contact
We may update this policy when our services or legal requirements change. The latest version and its update date will be published on this page.
Privacy questions and requests: info@cap-me.com
Phone: +966 55 309 9832