Privacy policy

Effective and last updated: 5 August 2026

This policy explains how Mahana, available at mahna4u.com, handles personal data when you browse the site, use its tools, or contact us. We aim to collect only what is necessary, use it for clear purposes, and apply suitable safeguards under applicable Saudi law, including the Personal Data Protection Law and its Implementing Regulations.

Controller and contact: Mahana. For privacy questions and requests, email mihnah111@gmail.com or use the contact form.

1. Scope

This policy covers website pages, browser-based career tools, the contact form, and technical or advertising services enabled on the site. External websites linked from Mahana are governed by their own policies.

2. Data we may process

  • Data you submit: name, email, subject, and message when you use the contact form. These details are optional until you choose to contact us, but are needed to receive and answer the request.
  • Tool data: some tools process text in your browser. They may use sessionStorage for the current session, automatically retain non-sensitive preferences such as favourites and recent tools, or store a draft when you choose to save it. Platform-managed local data expires within 30 days and can be cleared from the tools interface. Do not enter identity numbers, financial details, confidential employer material, or other sensitive data.
  • Technical data: hosting and security services may process request logs, IP address, browser type, requested pages, and request time to operate and protect the service and prevent abuse.
  • Cookie and consent data: cookie choices and analytics or advertising data when those services are enabled and the required consent has been obtained.

3. Purposes and legal basis

  • Operating the site and tools and performing the action a visitor requests.
  • Receiving and answering contact messages.
  • Protecting the site, preventing automated abuse, diagnosing faults, and maintaining service integrity.
  • Measuring performance and improving content when analytics is enabled.
  • Displaying and measuring advertising when Google AdSense or another advertising service is enabled.
  • Meeting a legal obligation or protecting lawful rights and interests to the extent permitted.

The applicable basis may be performing a requested service, consent, a legal requirement, or a legitimate interest that does not override your rights. You can withdraw consent-based choices through the consent interface or by contacting us.

4. Cookies and Google AdSense

Google and other vendors may use cookies to serve ads based on visits to this or other sites, where permitted. Google's advertising cookies allow Google and its partners to serve and measure ads. Visitors can manage personalised advertising through Google Ads Settings.

For visitors in the European Economic Area, United Kingdom, or Switzerland, a consent management platform that meets Google's requirements must run before non-essential advertising or storage technology is loaded. See the cookie policy.

5. Disclosure and service providers

We do not sell personal data. Hosting, email, security, consent, analytics, and advertising providers may process only the data necessary for an enabled service. Disclosure may also occur to meet a lawful request from a competent authority. A provider may process data outside Saudi Arabia; applicable transfer requirements must be considered where this occurs.

6. Retention and disposal

  • Session data normally ends when the session closes or browser data is cleared.
  • Data you choose to store locally remains under your control and can be removed through the tool or browser settings.
  • Contact messages may remain in the mailbox long enough to answer and follow up, then be deleted or archived for a lawful operational need.
  • Security logs are retained for a limited period appropriate to fault and abuse investigation, then deleted or anonymised when no longer needed.

7. Your rights

Subject to the Saudi Personal Data Protection Law and its limitations, you may have rights to be informed, access your data, receive a readable copy, request correction or completion, request destruction when its conditions apply, and withdraw consent where consent is the basis.

Email mihnah111@gmail.com with a description of the request and enough information to verify identity without sending sensitive documents unless they are lawfully necessary. Requests are handled without unjustified delay, generally within 30 days, with an extension only where the regulations permit and with notice of the reason.

8. Security

We use HTTPS, request validation, rate limits, and data minimisation. No electronic method is absolutely secure, so do not enter highly sensitive information in tools or contact messages.

9. Children

The site provides general career content and is not designed to collect children's data. If data relating to a person who lacks legal capacity is received without an appropriate basis, we take suitable action under applicable law.

10. Automated outputs

Tools may produce automated drafts or guidance estimates. They do not make hiring or legally binding decisions, and Mahana does not use them to make a decision with legal effect about a visitor.

11. Changes and complaints

We update this page when processing changes or a material service is added. The latest date appears above. Contact us first with a question, objection, or complaint; you may also use the official channels of the Saudi authority responsible for personal-data protection.

12. Regulatory references