Privacy Policy

Metal Palm is the brand used by Al Nakhla Maadenia Trading Est., operating in Saudi Arabia. We supply aluminium hardware, architectural fittings, and door and window accessories to fabricators, contractors, developers, and business customers.

Depending on how you use our website, we may collect:

• Account details: name, email, phone number, password, and optional company name.
• Enquiries: product questions, quotation requests, and project requirements you submit.
• Technical information: IP address, browser details, security logs, and website error records where generated by our systems.
• Communications: information you share through email, phone, WhatsApp, or other contact channels.

Passwords are stored as hashes rather than as plain-text passwords. Company name is optional during registration.

We use information as necessary to:

• Create and manage customer accounts.
• Authenticate users and maintain login sessions.
• Respond to product enquiries and quotation requests.
• Provide product information and technical resources.
• Maintain website security and troubleshoot issues.
• Meet applicable legal and regulatory obligations.

We process personal information on a basis permitted by applicable law, depending on the purpose and circumstances. Where consent is required, we will request it for the specified purpose. We aim to collect only information appropriate to that purpose.

Our website uses an authentication cookie to support customer and administrator login sessions. This cookie is configured for HTTP-only access, secure HTTPS use in production, and a maximum age of seven days.

Essential authentication cookies help the website function. They do not automatically reveal a visitor's name, email, or phone number.

If analytics or advertising technologies are introduced, we will review applicable privacy requirements and implement appropriate consent controls before activating them where required.

We do not sell personal information. Information may be processed by service providers supporting our website and business, including hosting, database, file storage, and communication providers.

Information may also be disclosed where required or permitted by law. We aim to limit disclosures to what is necessary for the relevant purpose.

We use technical and organizational measures intended to protect personal information against unauthorized access, loss, or misuse. Our service providers may process information in different locations. Any transfer of personal data outside Saudi Arabia must be assessed and handled in accordance with applicable Saudi data protection requirements.

We retain personal information for as long as reasonably necessary for its intended purpose, subject to applicable legal and recordkeeping requirements. When information is no longer needed and no lawful retention requirement applies, we will take appropriate steps to delete or dispose of it.

Subject to applicable law, you may be entitled to request access to your personal information, obtain a copy, correct inaccurate details, or request destruction of information where the legal conditions are met.

Contact us using the details below. We may need to verify your identity before responding and will handle requests according to applicable requirements.

Our website may link to services such as WhatsApp and social media platforms. Those services operate under their own privacy policies. Review their policies before providing information directly to them.

We may update this policy when our services, data practices, or legal requirements change. Any updated version will be published on this page.