Privacy policy

EASPM is a platform operated by Étharien Advisors, commercial registration 4030289347, Jeddah, Kingdom of Saudi Arabia. Étharien Advisors is the data controller for personal data collected through www.easpm.com.

Contact: info@etharien.com, +966 50 531 0460.

This policy covers www.easpm.com. It does not cover the EASPM platform environments operated for subscribing entities: in those, the entity is the controller of its own data and Étharien Advisors acts on its instructions under the signed agreement. It also does not cover etharien.com, which has its own policy. It does cover the Étharien Academy account we create when we approve a request for access to the EASPM Master Course made on this site.

When you read the site: we do not ask who you are, but some technical information about your device and connection is processed. The web server keeps no log of the pages you request. Our own analytics, which run on the same server, record the web address of each page viewed, including any parameters in it, the page's title and the time of the visit; which files are downloaded, whether a video is played and whether the language is switched; the web address of the page that referred the visit, including its parameters; the browser, operating system, device type, screen size and language; and an approximate location (country, region and city) worked out from the connection. They store no IP address, set no cookie, hold no name or contact details, and do not follow anyone across other sites. On the seven pages that carry a form (Contact, Request a demo, Partner application, Knowledge centre, Support, Platform tour and Graduate Program), the anti-spam check provided by Cloudflare starts as soon as the page opens, whether or not you submit anything, and Cloudflare receives what section 6 describes.

When you submit an enquiry form, and only then, we collect what you type: your name, work email address, mobile number, the entity you represent, your role, the type of entity, and anything you write in the free text fields. A demonstration request also records your preferred language and whether you agree to be contacted on WhatsApp, and a partner application records details of the applying company, such as its legal name in Arabic and English, commercial registration number, country, city, size and years in operation. We also record the page you submitted from, any campaign parameters in that page's web address, the wording of the consent statement you agreed to and the time you agreed to it. A partner applicant may attach a document, which we store. When you send a form, your device's IP address is used to check that the request did not come from a machine and to limit repeated submissions; it is held only in the server's working memory and is not stored with your enquiry.

When you send a support request, it becomes a support ticket in our customer relationship system, linked to your contact record there: the one with exactly your email address or, if there is none, a new one with your name, email address and entity. No login is created. The confirmation with the ticket number comes from support@etharien.com, your replies to it are added to the ticket, and if you have an Étharien Academy account the ticket also appears there, and only there: other people from your organisation do not see it in their accounts, and you do not see theirs in yours. The email goes to the address you type; if it is mistyped and belongs to someone else, they receive the confirmation with a link to your request, and it also appears in their Academy account if they have one.

When you ask for access to the EASPM Master Course, the request also records the course language you choose. It becomes a ticket in our customer relationship system, linked to your contact record there: the one with exactly your email address or, if there is none, a new one created when you send the request, with your name, email address and preferred language, under a separate record named after your entity. The confirmation with the ticket number comes from support@etharien.com. In your Academy account you see only the requests linked to your own contact record, the one with your email address. If we approve the request, we give that record an Étharien Academy login protected by a password you set yourself and, if it had no login before, set its preferred language to the course language you chose; the Academy keeps your progress through the course and your quiz results.

When you apply to the EASPM Graduate Program, we collect what you enter on the application form: your name, email address, mobile number, degree and major, graduation year, the course language you choose, your LinkedIn profile address if you give it, and your CV. We also record your acknowledgement that the program is non-binding, the page you applied from, the wording of the consent statement you agreed to and the time you agreed to it. Your application becomes an applicant record in the recruitment part of our customer relationship system, with your CV attached, linked to your contact record there: the one with exactly your email address or, if there is none, a new one with your name, email address, mobile number and preferred language. The confirmation comes from support@etharien.com. While you take part, the record also holds the stage of the program you have reached and our notes on your application, your use case and your assessment. If you are accepted, we give your contact record an Étharien Academy login and enrol you in the course, as described above. Please do not put in your CV anything this policy says we do not collect, such as a national identity number.

We do not collect national identity numbers, health data, biometric data, financial account data, or any other sensitive category, and you should not send them to us through this site.

To answer your enquiry, arrange a demonstration, assess a partnership application, provide support, send you a file you asked for on the Knowledge centre or Platform tour page and contact you about it and about EASPM, consider a request for access to the EASPM Master Course, confirm it to you and, once it is approved, give you an Étharien Academy login, enrol you in the course and keep your progress, consider an application to the EASPM Graduate Program, run the program with you and decide whether to nominate you, contact you on WhatsApp where you agreed to it, keep a record of the consent you gave, protect the forms from automated abuse, and understand how the site is used through the analytics described in section 3. We do not use it for advertising and we do not sell it.

Your consent, given by ticking the box on the form, which is never ticked in advance. For an existing customer, the performance of the agreement between us. Where the law requires us to keep or disclose something, that obligation. For the analytics described in section 3 and the anti-spam check on the pages that carry a form, both of which run without any form being submitted, our legitimate interest in keeping the site secure and working and in understanding how it is used.

• Odoo S.A.: our customer relationship system, where enquiries are stored. It also holds Étharien Academy accounts and sends, from support@etharien.com, the confirmations of support and course access requests with their ticket numbers, our replies to them, and the Academy's account and course invitation emails.
• Microsoft: Étharien Advisors' Microsoft 365 service, which sends the confirmations of the site's other forms, and of a support or course access request when our customer relationship system cannot take it, and the notification emails, and holds the team's copy of each notification. Emails you send to support@etharien.com also pass through Microsoft 365 on their way to your request.
• Cloudflare: the anti-spam check on the forms, which receives the IP address of the requesting device, the description its browser gives of itself (its User-Agent), a technical fingerprint of its encrypted connection, and the identifier of this site's check together with the site's address, in order to tell a person from a machine. Cloudflare also uses this information, as a controller in its own right, to improve that check.
• WhatsApp: the messaging service provided by WhatsApp LLC, part of Meta, through which our team may contact you if you agreed to it on the form. Its service receives your mobile number and the messages exchanged with you.
• LightNode: the provider of our virtual server in Riyadh, Kingdom of Saudi Arabia, which hosts the site and its analytics, each enquiry until it has been delivered to our customer relationship system and mailbox, documents attached to partner applications, and the nightly backups of the server's databases.

We do not sell personal data and we do not share it for anyone else's marketing.

This website, its analytics and any document attached to a partner application are hosted inside the Kingdom, on our server in Riyadh.

Enquiries submitted through this site are different, and we state it plainly. They are stored in our customer relationship system, which is hosted inside the Kingdom, but whose provider replicates its backups to data centres in Europe and Canada; that replication is part of the provider's service and we cannot switch it off. An Étharien Academy account is held in the same system, on the same terms. The notification of your enquiry, which contains the details you submitted, is held, like any email sent to us, in Étharien Advisors' Microsoft 365 mailbox, which Microsoft currently stores in Europe without committing to keep it there. The confirmation of a support or course access request is normally sent by our customer relationship system, and a copy is kept with the request there; if that system cannot take the request, the confirmation passes through the same Microsoft service instead. The confirmation of any other form passes through that service too, and no copy of it is kept in the mailbox it is sent from. If you agree to be contacted on WhatsApp, WhatsApp's service receives your mobile number and the messages exchanged with you, and may process them outside the Kingdom. The anti-spam check is carried out by Cloudflare as soon as a page that carries a form opens, before anything is submitted; Cloudflare's terms for the check do not say where the data it receives is processed, so it may be processed outside the Kingdom.

A CV sent with an application to the Graduate Program is held on our Riyadh server only until it has been passed to our customer relationship system, normally within minutes, and is then deleted from the server. In that system it is held on the same terms as an enquiry, including the backups in Europe and Canada.

By submitting a form you consent to the transfers described above of your enquiry, of an application to the Graduate Program and its CV, of the contact record and entity record a support or course access request creates, and of any Academy login an approved request creates. If you would rather your details did not leave the Kingdom, call us on +966 50 531 0460 instead, and we will handle your enquiry outside those systems. If you have already opened a page that carries a form, the anti-spam check will have run all the same, because it runs when such a page opens.

An enquiry is kept while we are in contact with you about it and for 24 months after our last contact, after which it is deleted. Where a commercial relationship follows, the record is kept for as long as that relationship lasts and for the period the law requires afterwards. Note that our customer relationship provider may retain deleted records in its backups for up to twelve months. The same period, 24 months after our last contact, applies to the notification of your enquiry held in our Microsoft 365 mailbox. A document attached to a partner application is kept on our Riyadh server and deleted 24 months after it was sent. Cloudflare's terms for the anti-spam check state no period for which Cloudflare keeps what the check receives. Messages exchanged with you on WhatsApp are kept on our team's phones for the same 24 months and then deleted. An Étharien Academy account, with your progress and quiz results, is kept while you use it and deleted 24 months after your last sign-in, or sooner if you ask us. An application to the Graduate Program, with its CV and our notes, is kept for 24 months after the end of the intake you applied to, and then deleted. If you are nominated and you join our team, or a placement with a client follows, it is kept for as long as that relationship lasts and for the period the law requires afterwards.

Analytics records are kept for 24 months and then deleted. They contain no name, contact details or IP address.

Under the Personal Data Protection Law you may ask us to tell you what personal data we hold about you, give you a copy of it, correct it, delete it, or stop processing it; and you may withdraw a consent you gave, at any time, without affecting anything done before you withdrew it.

Write to info@etharien.com. We answer within 30 days. If you are not satisfied, you may complain to the Saudi Data and Artificial Intelligence Authority.

The site is served only over an encrypted connection. Access to the customer relationship system is limited to the people who need it, and the account the website itself uses has restricted permissions. It is used only to record enquiries, either as a new record or by adding to an earlier enquiry sent through this site from the same email address, and it cannot read our contact records. When it records a support or course access request, a rule inside the customer relationship system, not the website's account, links the request to the contact with exactly that email address, or creates one. Backups of the databases on our own server are taken nightly and kept for fourteen days; backups of our customer relationship system are kept by its provider, as section 8 explains.

No system is perfectly secure. If a breach affects your personal data we will notify you and the authority as the law requires.

This site sets no cookies of its own and no advertising cookies. The analytics described in section 3 use no cookies. The anti-spam check on the forms is provided by Cloudflare and runs only on pages that carry a form; what it collects is set out in section 6.

The site is addressed to organisations and is not intended for anyone under 18. We do not knowingly collect data about children.

We will publish any change on this page with a new date. Where a change materially affects how we handle data you have already given us, we will tell you.

Étharien Advisors, Jeddah, Kingdom of Saudi Arabia. CR 4030289347. info@etharien.com · +966 50 531 0460

This policy is published in Arabic and in English. In the event of any conflict between the two, the Arabic version prevails.