1. Who we are
DIVERSE (“DIVERSE”, “we”, “us” or “our”) is a digital agency providing website development, app development, social media marketing and search engine optimisation (SEO) services to businesses in the Kingdom of Saudi Arabia.
This website (the “Website”) is operated by [Company legal name], Commercial Registration No. [Commercial Registration No.], whose registered address is [Registered address]. For the purposes of the Personal Data Protection Law of the Kingdom of Saudi Arabia (the “PDPL”) and its implementing regulations, [Company legal name] is the controller responsible for the personal data described in this Privacy Policy (the “Policy”).
2. Scope of this Policy
This Policy explains how we collect, use, store, share and protect personal data when you visit the Website or submit an enquiry through our contact or free-consultation forms. It also describes the rights available to you under the PDPL.
This Policy applies only to the Website. Personal data that we process while delivering a project for a client is governed by the written proposal or agreement for that project and any related data protection terms.
The Website is intended for businesses and their representatives. It is not directed at children, and we do not knowingly collect personal data from children through our forms.
3. Personal data we collect
The Website collects personal data only through its contact and free-consultation forms. You do not need to create an account to use the Website.
Information you provide
When you submit a form, we collect:
- Full name
- Email address
- Phone or WhatsApp number
- Company name
- Service of interest (for example, website development, app development, social media marketing or SEO)
- Estimated budget (optional)
- Project description, including any information you choose to include in it
- Preferred language
- Consent confirmation, recording that you agreed to the processing of your personal data as described in this Policy
Information recorded with your submission
When a form is submitted, the Website also records:
- Date and time of submission
- A hashed value of your IP address, used to detect spam and limit repeated submissions (we store only the hashed value, not your raw IP address)
- Your browser's user-agent, which is technical information describing your browser type and version and your device's operating system
Information about other people
Please provide only the information needed for your enquiry. If you include personal data about other individuals (for example, a colleague you would like us to contact), you confirm that you are authorised to share it with us. Please do not include sensitive personal data (such as health information) or other confidential personal information, such as identity document or bank account details, in your project description.
4. How we use your personal data
We use the personal data described above for the following purposes:
- To respond to your enquiry and communicate with you by email, phone or WhatsApp, according to the contact details you provide
- To understand your requirements and prepare proposals or quotations
- To schedule and hold consultations
- To protect the Website against spam, abuse and repeated or automated submissions
- To keep records of enquiries and communications for business administration and to meet our legal obligations
We will not use your personal data for purposes that are incompatible with those listed above. If we wish to use it for a new purpose, we will inform you and, where required by law, obtain your consent.
5. Legal basis for processing
We process your personal data in accordance with the PDPL and its implementing regulations. Depending on the circumstances, and to the extent permitted by the PDPL, we rely on one or more of the following:
- Your consent, which you confirm when you submit a form
- An agreement to which you are, or are about to become, a party, including steps taken at your request before entering into it, such as preparing a proposal
- Compliance with legal obligations that apply to us
- Our legitimate interests, such as keeping the Website secure and preventing spam and abuse, where permitted by the PDPL and provided that those interests do not prejudice your rights and interests
You may withdraw your consent at any time (see Section 11). Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
6. Cookies
Cookies are small text files that your browser stores on your device. The Website uses a limited number of cookies:
- Language preference cookie (functional): stores the display language you choose for the Website (bilingual, English or Arabic) so that the Website can remember and apply your preference.
- Administration area session cookies: used only to keep authorised DIVERSE staff signed in to the Website's administration area. They are not used to track visitors.
We do not use advertising or marketing cookies, and we do not use cookies to build profiles of visitors.
The Website does not currently use analytics cookies. If we introduce analytics tools in the future, we will update this Policy and, where required, request your consent before any such cookies are set.
You can manage or delete cookies through your browser settings. If you block the language preference cookie, the Website will continue to work, but your language preference may not be remembered.
7. How we share your personal data
We do not sell or rent your personal data. We share it only as described below:
- The DIVERSE team: enquiry details are sent by email to authorised members of our team so that they can respond to you.
- Service providers: we use third-party providers to operate the Website and handle our communications. These may include website hosting, email delivery and, if enabled in the future, analytics services. They process personal data on our behalf and only as needed to provide their services to us.
- Competent authorities: where disclosure is required by applicable laws or regulations, or by an order of a competent authority or court.
If we communicate with you through WhatsApp or another third-party messaging service, that service processes your data under its own terms and privacy policy.
8. Where your data is stored
Personal data submitted through the forms is stored in the Website's database with our hosting provider, and is also sent by email to our team.
Some of our service providers may store or process data outside the Kingdom of Saudi Arabia. Where personal data is transferred or processed outside the Kingdom, this will take place only in accordance with the requirements of the PDPL and its implementing regulations governing such transfers.
9. How long we keep your data
We keep enquiry records for [Retention period] from our last communication with you, unless a longer period is required by law or is necessary to establish, exercise or defend legal claims. If your enquiry leads to a project, the relevant records may be kept in accordance with the agreement for that project and our legal obligations.
When personal data is no longer needed, we destroy it or remove anything that identifies you so that it can no longer be linked to you.
10. How we protect your data
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. These include storing a hashed value of your IP address instead of the raw address, and restricting access to the Website's administration area to authorised staff.
However, no method of transmission over the internet or of electronic storage is completely secure, and we cannot guarantee absolute security. Where required by the PDPL, we will notify the competent authority and affected individuals of any personal data breach.
11. Your rights
Subject to the conditions and exceptions set out in the PDPL and its implementing regulations, you have the right to:
- Be informed about how and why your personal data is collected and processed, which this Policy is intended to provide
- Access the personal data we hold about you and obtain a copy of it
- Request correction of personal data that is inaccurate, incomplete or out of date
- Request deletion or destruction of your personal data in the circumstances provided for by law
- Withdraw your consent to processing at any time, without affecting the lawfulness of processing carried out before the withdrawal
- Lodge a complaint with the competent authority, the Saudi Data and Artificial Intelligence Authority (SDAIA)
To exercise any of these rights, please contact us at [Contact email]. We may need to verify your identity before responding, and we will respond within the period required by applicable law. Please note that if you withdraw your consent, we may be unable to respond to or continue handling your enquiry. We encourage you to contact us first so that we can try to resolve any concern directly.
12. Changes to this Policy
We may update this Policy from time to time, for example to reflect changes to the Website, our service providers or applicable law. The updated version will be published on this page with a revised “Last updated” date. Where changes are significant, we will take reasonable steps to bring them to your attention.
This Policy is available in Arabic and English. If there is any inconsistency between the two versions, the [Prevailing language] version shall prevail.
13. Contact us
If you have any questions about this Policy or how we handle your personal data, please contact us using the details below:
- Company: [Company legal name]
- Commercial Registration No.: [Commercial Registration No.]
- Address: [Registered address]
- Email: [Contact email]