Privacy policy.

Home / Privacy

What data we collect, why, and how you control it, under Saudi PDPL and the GDPR.

Effective: 25 August 2026 · Version 1.1

1. Who we are

canasa is a Canadian–Saudi industrial recycling company registered in Dammam, Saudi Arabia. For any privacy question, contact us at info@canasa.co.

2. Data we collect

• Contact details you send via our quote form, WhatsApp, or email: name, phone, email, city, material type, weight, photos. Delivered to our mailbox and kept only as long as the enquiry needs.
• Job applications sent through the careers page: name, contact details, experience and your CV. Kept for up to 12 months in case a matching role opens, deleted sooner on request to careers@canasa.co.
• Usage statistics via Cloudflare Web Analytics, which is cookieless and aggregated: pages viewed, device type, approximate country. It cannot identify you, and we do not track individuals across the web.
• Operational records for customer contracts: weigh tickets, invoices, reports. Retained for 10 years per Saudi tax and accounting requirements.

3. Why we collect it

• To respond to quote requests, applications and enquiries.
• To deliver contracts (scheduling, pickup, weigh-out, payment, reporting).
• To meet legal obligations: tax, accounting, material shipment records.
• To understand which pages are useful, in aggregate only.

4. Who we share it with

We share your data only with: (a) service providers who operate our infrastructure (Cloudflare hosting; Resend, which delivers form submissions to our mailbox; Microsoft 365, where our mail lives); (b) Saudi government regulators where legally required; (c) accountants and auditors under confidentiality. We do not sell your data. Ever.

5. Your rights

Under Saudi PDPL and GDPR, you have the right to: access the data we hold on you, request correction or deletion, object to processing, port your data. To exercise these rights, email info@canasa.co. We respond within 30 days.

6. Cookies

canasa.co sets no cookies. Our traffic statistics come from Cloudflare Web Analytics, which works without cookies and without tracking individuals. If we ever introduce cookies that need your consent, we will ask first, not assume.

7. Where data is stored

Our website infrastructure runs on Cloudflare’s globally distributed network. Email lives in Microsoft 365. Operational customer records are stored on servers in Saudi Arabia and the EU under standard GDPR transfer safeguards.

8. Updates

If we materially update this policy, we post a notice on the site for 30 days. The current version is dated at the top.