Privacy Policy
This Privacy Policy describes how Di-wrapp, operated by Distin-Gui Group, collects, uses, stores, and protects personal data when you access our website, submit inquiries, register for an account, apply as a Media Owner, or interact with our out-of-home (OOH) and digital out-of-home (DOOH) advertising marketplace.
1. Who We Are and Scope
Di-wrapp is a multi-country out-of-home (OOH) and digital out-of-home (DOOH) advertising marketplace operated by Distin-Gui Group, headquartered in Riyadh, Kingdom of Saudi Arabia. We connect advertisers looking to book high-impact advertising spaces and digital screens with Media Owners who own or operate media inventory.
This Privacy Policy applies to personal information collected through the Di-wrapp website (diwrapp.com), partner and vendor onboarding portals, contact forms, and related online communication channels. This document serves as a draft for legal review prior to full commercial availability.
2. Personal Data We Collect
We collect only the personal data reasonably necessary to provide our digital marketplace services, respond to commercial inquiries, and manage supplier applications. The types of data we collect include:
A. Data You Provide Directly to Us
- Contact and Inquiry Information: When you fill out our contact form or request information, we collect your full name, email address, international country calling code, phone number, subject, and the contents of your message.
- Media Owner and Supplier Onboarding Data: When applying to list advertising inventory on our marketplace as a Media Owner, we collect your organization name, legal ownership structure (e.g. corporate or individual), official website, company bio, uploaded brand logos and company profile documents, advertising inventory specifications (quantities, formats, operating countries, and cities), primary contact person name, job title, work email, and direct phone number.
- User Account Information: When registering an account, we collect your name, email address, password, and designated role (advertiser or Media Owner). During our current pre-launch stage, account creation flows are stored locally in your browser session for preview purposes and redirect to platform launch notices.
- Business and Billing Details (Forward-Looking): As commercial booking and wallet capabilities become live, we will collect authorized invoicing contacts, commercial registration copies, and transaction records required for billing compliance.
B. Data Collected Automatically
- Approximate Geolocation (Country Level): When your browser connects to our edge infrastructure on Vercel, incoming request headers are used in volatile memory to detect your two-letter country code (for example: SA, AE, SD, US, GB). We do not record your precise GPS coordinates, nor do we retain full raw IP addresses in application databases.
- Device and Technical Metadata: Standard HTTP network request headers, including browser type, operating system, referrer URL, preferred language, and client timestamp.
- Local Storage and Cookies: We store your interface preferences (such as light or dark theme mode) in your browser’s localStorage, and store your detected country code and session status in strictly necessary first-party cookies.
3. How We Use Your Personal Data
We use the personal information collected on our website and marketplace strictly for legitimate operational purposes, including:
- Processing and evaluating Media Owner onboarding applications and verifying advertising inventory eligibility.
- Responding promptly to customer service requests, partnership inquiries, and platform feedback.
- Delivering localized marketplace content, regional currency indicators, and language preferences (English or Arabic).
- Facilitating advertiser campaign bookings, advertising inventory reservations, and automated campaign proofs upon full platform rollout.
- Ensuring platform security, investigating unauthorized activity, preventing fraudulent bookings, and maintaining system integrity.
- Fulfilling accounting, tax, and reporting obligations under applicable corporate laws.
4. Sharing and Disclosure of Information
Di-wrapp does not sell, rent, or trade your personal data to third parties for independent marketing purposes. We share your information solely under the following limited circumstances:
- Cloud Infrastructure & Hosting Providers: We host our web application on Vercel Inc. and deploy our API backend on secure enterprise cloud servers. These service providers act strictly as data processors under contractual confidentiality and data security obligations.
- Advertisers and Media Owners: When an advertiser confirms a campaign booking, essential business contact and operational details may be shared with the Media Owner to ensure campaign execution, creative validation, and proof of display.
- Legal and Regulatory Authorities: We may disclose personal data if required by binding subpoena, court order, or official governmental directive issued by a competent court or regulatory body under applicable law.
- Corporate Reorganization: In the event of a merger, acquisition, corporate restructuring, or asset transfer involving Distin-Gui Group, customer information may be transferred as an operational business asset subject to this Privacy Policy.
5. International Data Transfers
Di-wrapp operates as a regional and cross-border digital marketplace. While our operational headquarters is in Riyadh, Saudi Arabia, our cloud edge servers and technical infrastructure may process data across multiple geographic regions where our hosting providers maintain enterprise data centers.
Whenever personal data is transferred across international borders, we ensure adequate contractual, organizational, and technical safeguards are maintained pursuant to applicable data protection laws.
6. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was gathered, including responding to inquiries, reviewing Media Owner inventory, providing customer support, and complying with statutory record-keeping rules.
[TO CONFIRM: [TO CONFIRM: Duration of active account plus 3 years after account closure, or as required by applicable law]]. Once the applicable retention window expires, personal records are permanently deleted, overwritten, or irreversibly anonymized.
7. Information Security
We implement commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration. These measures include encrypted communications (HTTPS/TLS 1.3), edge network security firewalls, strict role-based data access controls, and parameterized database queries.
However, no method of transmission over the Internet or electronic storage is completely impenetrable. While we strive to protect your personal information, we cannot guarantee absolute, unconditional security.
8. Your Rights and How to Exercise Them
Subject to applicable data protection laws in your jurisdiction, you may have legal rights regarding your personal information, including:
- Right to Access: You may request confirmation of whether we process your data and receive an accessible copy.
- Right to Rectification: You may request the correction of inaccurate, incomplete, or outdated personal details.
- Right to Destruction / Erasure: You may request the deletion of your personal records where no overriding legal or regulatory obligation requires retention.
- Right to Withdraw Consent: Where data processing relies on your consent, you may withdraw it at any time with future effect.
- Right to Object / Restrict: You may object to specific processing activities conducted on the basis of legitimate business interest.
To exercise any of these statutory rights, please submit a written request to our privacy team at [TO CONFIRM: privacy@di-wrapp.com]. We will review and respond to verified requests within the statutory timeframe mandated by applicable regulations.
9. Children's Privacy
Di-wrapp is a professional business-to-business (B2B) digital advertising marketplace intended solely for commercial entities and individuals who have reached the age of legal majority (18 years of age). We do not knowingly solicit or collect personal information from minors. If you believe a minor has submitted personal data to us, please notify us immediately so we can promptly delete the record.
11. Changes to This Privacy Policy
We may periodically update this Privacy Policy to reflect platform enhancements, operational modifications, or changes in applicable data protection laws. When revisions are published, we will update the "Last Updated" date at the top of this document. We encourage you to review this page regularly to stay informed about our data protection practices.
12. Contact Information
If you have questions, comments, or formal requests regarding this Privacy Policy or Di-wrapp’s data handling practices, please contact our legal and privacy team:
- Company: [TO CONFIRM: Distin-Gui Information Technology Company / Di-wrapp Co.] (Distin-Gui Group)
- Headquarters (HQ): Laysen Valley - Um Al Hamam District, Building 13, Riyadh 123229, Saudi Arabia
- UAE Office: Dubai International Airport, 104-021, Dubai 221112, United Arab Emirates
- LB Office: Al Hamra Main Street, 5th Floor, Beirut, Lebanon
- Commercial Registration: [TO CONFIRM: Saudi Commercial Registration (CR) Number]
- Privacy & Legal Inquiries: [TO CONFIRM: privacy@di-wrapp.com] / [TO CONFIRM: legal@di-wrapp.com]
- General Inquiries: info@di-wrapp.com
- Telephone: +966 50 572 2153
Need to get in Touch?
Have questions about how we handle your personal data, or wish to exercise your data subject rights? Our team is here to assist you.
Contact Us