Privacy Policy
1. About this policy
sra is a web-based queue management service operated by Sra Digital Services, Riyadh, Saudi Arabia. You join a queue from your browser, see your place in line, and get a message by SMS or WhatsApp when it is your turn.
This policy explains what personal data we collect, why, who we share it with, and what control you have. It covers the sra website at sraservices.co and the dashboard businesses use to run their queues. There is no sra mobile app — everything runs in your browser.
When you join a queue at a business, that business also receives your details and handles them under its own privacy policy.
2. What we collect
We collect only what we need to hold your place in line and tell you when it is ready.
| Data | Examples | When |
|---|---|---|
| Contact details | Name, mobile number, email | When you join a queue or create an account |
| Queue activity | Business you joined, ticket number, join and serve times, service selected, no-shows | Each time you join a queue |
| Messaging data | The mobile number your SMS and WhatsApp updates go to, and whether each message was delivered | When you opt in to updates |
| Browser and usage data | Browser type, operating system, IP address, pages viewed, error logs | Automatically while you use the site |
| Cookies | A session cookie that keeps you signed in and remembers your ticket | While you use the site |
| Location | Approximate location from your browser | Only if you allow it, to show nearby branches |
| Support messages | What you write to us and our replies | When you contact support |
We use cookies only to run the site, not for advertising. We do not collect payment card details.
3. Why we use it
- Place you in a queue and show your position and estimated wait
- Send you queue updates by SMS or WhatsApp, including your ticket confirmation and your turn alert
- Let the business identify you when you reach the counter
- Answer your support requests
- Measure wait times and no-show rates so we can improve the service
- Detect abuse, such as one person booking many fake tickets
- Meet legal, tax and regulatory obligations
We do not use your data for advertising, and we do not build marketing profiles from your queue history.
4. Our legal basis
We process personal data under the Saudi Personal Data Protection Law (PDPL) and its implementing regulations. We rely on your consent for SMS and WhatsApp messages, location and any marketing, and you can withdraw it at any time. We rely on the performance of our agreement with you to run the queue itself, and on our legitimate interests to keep the service secure and working well. Where a law requires us to keep records, we rely on that legal obligation.
6. How long we keep it
We keep your contact details for as long as your account is open, and delete them immediately once it is closed. Queue records are automatically stripped of your name and phone number 30 days after your visit ends (seated, no-show, or cancelled); the ticket and timing data may be kept afterwards, without anything that identifies you, for statistics. Message delivery logs and support messages are kept only as long as we need them to run the service, resolve your request, or meet our own record-keeping needs, and deleted after. We keep anything longer only where a law requires it.
7. Your rights
Under the PDPL you can ask us to show you the data we hold about you, correct anything wrong, delete it, or send you a copy in a readable format. You can also withdraw your consent at any time, including to stop SMS and WhatsApp updates, by emailing us.
Email contact@sraservices.co and we will respond within 15 days. If you are not satisfied, you may complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).
8. Security
We encrypt data in transit with TLS and at rest, limit staff access to those who need it, and review our systems regularly. No system is perfectly secure, so if a breach affects your data we will notify you and the relevant authority as the law requires.
9. Children
The service is intended for adults. We do not knowingly collect data from anyone under 18 without the consent of a parent or guardian. If you believe a child has given us data, email privacy@sraservices.co and we will delete it.
10. Where your data is stored
Our cloud hosting and database providers process and store your data outside Saudi Arabia, in Asia. WhatsApp messages are also delivered through Meta Platforms, which processes them outside Saudi Arabia. Any transfer abroad, by any of our providers, is made under the conditions the PDPL sets for cross-border transfers, and only with providers who offer an equivalent standard of protection.
11. Changes
We may update this policy. The date at the top always shows the current version. If a change materially affects you, we will tell you in the app or by email before it takes effect.
12. Contact us
sra Digital Services
Riyadh, Saudi Arabia
Email: contact@sraservices.co