import type { Metadata } from "next";
import PageHero from "@/components/site/PageHero";
import { Reveal } from "@/components/motion/Reveal";

export const metadata: Metadata = {
  title: "Privacy Notice",
  description:
    "How Vira Information Technology Co. collects, uses, and protects personal data under the Saudi Personal Data Protection Law (PDPL).",
  alternates: { canonical: "/privacy" },
};

const SECTIONS = [
  {
    h: "Who we are",
    p: "Vira Information Technology Co. (“vira”, “we”) is a technology services company headquartered in Makkah, Saudi Arabia, with branches in Jeddah, Riyadh, and Dammam. For personal data submitted through this website, vira acts as the data controller under the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations, supervised by the Saudi Data & AI Authority (SDAIA).",
  },
  {
    h: "What we collect, and why",
    p: "When you contact us we collect the details you choose to share — name, work email, company, phone, and the content of your message — to respond to your inquiry, prepare proposals, and manage our business relationship. Client-portal accounts additionally store service, ticket, and invoice records needed to deliver contracted services. We do not sell personal data, and we do not use it for unrelated marketing without your consent.",
  },
  {
    h: "Legal basis",
    p: "We process inquiry data on the basis of your consent expressed by submitting the form, and contract-related data as necessary to perform our agreements with you. Where the law requires records to be kept — for example invoicing under Saudi tax regulations — we retain them for the mandated period.",
  },
  {
    h: "Where your data lives",
    p: "Our systems for client and inquiry data are hosted in the Kingdom of Saudi Arabia. If a cross-border transfer is ever required, it is carried out only as the PDPL's transfer provisions permit, with appropriate safeguards documented.",
  },
  {
    h: "How long we keep it",
    p: "Inquiry records are retained for up to 24 months from last contact, then deleted or anonymized. Contractual and financial records are retained for the periods Saudi law requires. You may ask us to delete inquiry data earlier at any time.",
  },
  {
    h: "Your rights",
    p: "Under the PDPL you may request access to your personal data, correction of inaccurate data, deletion where the law allows, and withdrawal of consent for consent-based processing. Write to privacy@vira.sa and we will respond within the statutory timeframe. You also have the right to lodge a complaint with the competent authority.",
  },
  {
    h: "Security",
    p: "Personal data is protected by the same controls we sell: encryption in transit and at rest, role-based access, logging, and a breach-response plan. In the event of a personal-data breach that risks your rights, we notify the regulator and affected individuals as the PDPL requires.",
  },
  {
    h: "Contact",
    p: "Questions about this notice or your data: privacy@vira.sa · Vira Information Technology Co., King Abdul Aziz Road, Al Aziziyah District, Makkah 24243, Saudi Arabia.",
  },
];

export default function PrivacyPage() {
  return (
    <>
      <PageHero
        eyebrow="Privacy"
        titleLines={["Privacy notice."]}
        lede="How we collect, use, and protect personal data — written to be read, and aligned with the Saudi Personal Data Protection Law. Last updated July 2026."
      />
      <section className="weave-light on-light py-[clamp(4rem,8vw,7rem)]">
        <div className="mx-auto w-full max-w-[820px] px-5 md:px-10">
          {SECTIONS.map((s, i) => (
            <Reveal key={s.h} delay={Math.min(i * 0.03, 0.15)} className={i > 0 ? "mt-10" : ""}>
              <h2 className="text-xl font-semibold text-lhi">{s.h}</h2>
              <p className="mt-3 text-[1rem] leading-[1.75] text-lmid">{s.p}</p>
            </Reveal>
          ))}
        </div>
      </section>
    </>
  );
}