Legal
Privacy policy
This policy is a working draft written against the Saudi Personal Data Protection Law. It must be reviewed by a qualified adviser and completed with the operator's details before launch.
Last checked
Placeholder notice: the controller identity below is unfilled. Until it names a real business with a real address and contact point, this policy is not fit to publish.
Who controls your data
The controller is [OPERATOR LEGAL NAME — REQUIRED BEFORE LAUNCH], commercial registration [COMMERCIAL REGISTRATION NUMBER — REQUIRED BEFORE LAUNCH], [REGISTERED ADDRESS — REQUIRED BEFORE LAUNCH]. Data protection enquiries: [CONTACT EMAIL — REQUIRED BEFORE LAUNCH].
The law this is written against
Saudi Arabia's Personal Data Protection Law (PDPL) and its implementing regulations, supervised by the Saudi Data and Artificial Intelligence Authority (SDAIA). Where a visitor is in another jurisdiction, that jurisdiction's law may also apply. A qualified adviser must confirm both positions before launch.
What we collect
- Quote form: city, entity type, foreign ownership percentage, number of foreign employees, your name, and an email address or WhatsApp number.
- Consultant form: firm name, commercial registration number, cities covered, contact name and contact method.
- Nothing else. This site runs no advertising, no analytics tags and no third-party tracking scripts. It sets no cookies of its own.
Why we collect it, and on what basis
Only to pass your request to setup consultants who can quote on it, on the basis of the consent you give with the tick box on the form. You can withdraw that consent at any time, and withdrawal does not affect anything already done on the basis of it.
Who receives it
Setup consultants selected for your request, and the form processor that delivers the submission. Your details are not sold, not published, and not passed to anyone else. If a transfer outside the Kingdom is involved, the conditions in the PDPL for transfers apply and must be documented before launch.
How long it is kept
[RETENTION PERIOD — TO BE SET BEFORE LAUNCH]. Enquiry data should be kept no longer than is necessary for the introduction and any dispute about it, then deleted.
Your rights
Under the PDPL you may ask to see the personal data held about you, ask for it to be corrected or destroyed, ask for it to be transferred, and withdraw your consent. Write to [CONTACT EMAIL — REQUIRED BEFORE LAUNCH]. If you are not satisfied with the response, you may complain to the competent supervisory authority.
Security
Submissions are sent over an encrypted connection to the configured form endpoint. The site itself is static and stores nothing.
Changes
This policy was last updated on .