Privacy Policy

ToDoOps respects your privacy. This policy explains how we handle information when you use todoops.sa, enquire about Odoo implementation, customization or support, or request a result from our website calculators.

Information you provide

Depending on the form, information includes your name, company name, email address, phone number, country calling code and the message or business needs you choose to share. You may voluntarily provide further details, such as your job title or business activity. Forms identify required and optional fields. Email may be optional in some enquiry forms; requesting a calculator result requires both an email address and a phone number.

Calculators also use the inputs you provide about your proposed system or business, such as user and branch counts, required applications, time, expenses and improvement assumptions. When you request a result, we associate those inputs, the resulting estimate and the enquiry reference with your contact details. Please do not submit employee or customer records, passwords, or sensitive information unnecessary for your request.

An enquiry may also include its submission page, form language, traffic source, campaign information and advertising click identifiers, where available, to help us understand its source and measure website performance.

Why we use this information

We use enquiry information to respond to you, understand your business needs, discuss Odoo implementation, customization or support, deliver your requested estimate, follow up on the enquiry, resolve delivery problems and improve our service. Calculator results are reference estimates based on inputs and assumptions, not binding quotations or guaranteed savings.

Submitting a service enquiry or requesting a calculator result is not, by itself, consent to advertising personalization or to linking your contact details with browsing activity for advertising. Any separate use of contact information for customer advertising matching requires the appropriate disclosure and legal basis or consent.

How enquiries and results are delivered

We use Web3Forms to receive contact forms and calculator enquiries and deliver them to us. It processes the information you submit, including calculator inputs and the result summary where relevant. The provider also processes information to operate the service and prevent spam under its privacy policy.

When you request a calculator result, EmailJS and our connected company Google email service send a message to the email address you entered. It contains the estimate, its inputs and references, and your enquiry details. A fixed internal copy of that same message goes to contact@todoops.sa and management@todoops.sa for follow-up. These copies do not subscribe you to a marketing list.

Our two EmailJS result templates are configured not to save customer parameter values in template request history. EmailJS still processes information needed to send messages and may retain operational or security metadata under its policy. Messages delivered to mailboxes remain subject to mailbox management and retention; this template setting does not delete company emails or your copy.

The system uses the email address you enter without first verifying your ownership of it, so please check it carefully. Acceptance by the email service does not guarantee inbox delivery. If the result does not arrive, check your spam folder or contact us with your enquiry reference, if available.

Form protection with reCAPTCHA

We use Google reCAPTCHA v2 to protect calculator result delivery from automated abuse. At the verification step, your browser connects to Google, which may process technical information such as your IP address, browser and device information, and verification interactions to assess the request. Google's Privacy Policy and Terms of Service apply. This verification does not establish ownership of an email address or phone number.

Website analytics, cookies and advertising

We use Google Analytics 4, Google Tag Manager and Google Ads to understand website use, measure advertising and conversions, and improve our services. We may also use remarketing to show ToDoOps ads to previous visitors. Visit information may include pages viewed, traffic source and campaign, clicks, scrolling and form interactions, browser and device type, approximate location, and cookies or other online identifiers.

Google may use cookies and identifiers for analytics and advertising, and may show ads on Google Search, YouTube, its advertising network and other supported services. Google Signals is enabled in our GA4 settings; where the necessary conditions and consents are met, Google may associate visit information with the account information of users who have agreed to this association. Advertising audiences are subject to their configured membership periods and settings; joining an audience does not guarantee that an ad will be shown.

The measurement events we have prepared for the two calculators do not include your name, email, phone number, calculation inputs or results. Enquiry information sent to our team is distinct from website-use measurement events. See how Google uses information from sites that use its services.

We also use Meta Pixel, Microsoft UET and LinkedIn Insight Tag to measure website visits, advertising performance and actions such as phone or WhatsApp link clicks and accepted enquiries. These providers may receive technical information such as your IP address, browser details, cookies and the page you visit. We do not copy your name, email address, phone number, form contents or messages into the measurement event parameters we send. Contact clicks and accepted enquiries are reported separately: a click does not confirm a completed call, conversation or sale. Automatic Advanced Matching and CRM data uploads to Meta are not enabled in this integration.

Understanding website use with Microsoft Clarity

When Microsoft Clarity is activated on the website, its purpose is to understand clicks, scrolling, navigation and usability problems through heatmaps and session replay. We have prepared strict masking settings and masking of form and calculator elements and their data to limit the exposure of customer content in recordings. Masking does not stop all processing of visit or interaction information.

Clarity recording has not been activated on the live website as part of the setup covered by this draft. Activation requires a review of masking and consent handling. When activated, information is processed under the Microsoft Privacy Statement and the consent choices implemented on the website.

Your consent and advertising choices

Where consent is required, analytics, advertising and session recording processing must follow your consent choices. Simply visiting the website or submitting an enquiry is not affirmative consent to those purposes. This policy does not replace a required consent mechanism.

You can manage personalized ads in Google My Ad Center, manage Google My Activity, control cookies in your browser, or use the Google Analytics opt-out add-on in supported browsers. These controls affect different processing; disabling personalized ads does not necessarily stop analytics or non-personalized ads. Blocking certain cookies or protection tools may affect website functions.

Sharing and processing outside Saudi Arabia

We do not sell your personal data. ToDoOps handles enquiries internally, while form, email, verification and analytics providers process information needed for their functions as described above. Some information may be processed outside Saudi Arabia, depending on the providers' operating locations. Their policies describe their processing in more detail. We may also need to disclose information where an applicable legal obligation requires it.

Protection and retention

We handle enquiry information confidentially and work to limit unauthorized access. Internet transmission cannot be guaranteed to be completely secure. We retain information as needed to respond to your request, provide the service or conduct relevant follow-up, taking account of deletion requests and applicable legal obligations. Mailbox retention differs from the retention of form information, operational records and provider analytics; there is no single deletion period applying to every copy.

Our current GA4 settings retain event data for two months and user data associated with cookies or identifiers for 14 months, with user retention reset when new activity starts. These periods do not apply to most aggregate reports and do not mean that emails or service enquiries are deleted on the same schedule.

Privacy requests and contact

You can contact us to ask about your data, request access, correction or deletion, or withdraw previously given consent where processing relies on it, subject to applicable law. We may need suitable information to verify the requester and protect their data. Email contact@todoops.sa. Please do not send identity documents or sensitive information before we explain why it is needed and how it will be handled.

Draft date: 11 October 2026. We review this policy when our practices change. It does not replace any separate consent required for a particular use.