Privacy Policy

Saudi Digitalization ICT (“we”, “us”, “our”) operates https://saudidict.com. This Privacy Policy explains what personal information we collect when you use this website, how we use it, and the choices you have. We respect your privacy and are committed to processing personal data in line with the Kingdom of Saudi Arabia’s Personal Data Protection Law (PDPL) and good international practice.

1. Who we are

Saudi Digitalization ICT is an information technology solutions provider headquartered in Riyadh, Saudi Arabia. We can be contacted at info@saudidict.com or at the address listed at the bottom of every page on this site.

2. Personal information we collect

We only collect personal information you give us, plus the limited technical data that any modern website receives from your browser.

• Contact form submissions. When you use the form on /contact we collect your name, email address, and the message you send. You may optionally provide your company, phone number, and a subject.
• Technical and connection data. Like every site, our hosting provider receives your IP address, browser user-agent, the page you requested, and the timestamp. This is used for delivery, security (e.g. blocking abuse), and aggregate performance monitoring.
• Cookies and similar storage. This site uses Google Analytics 4, which sets cookies (including _ga and _ga_*) to distinguish visitors and measure usage. We also store a small flag in your browser to remember your cookie-consent choice. You can refuse or withdraw consent at any time via the cookie banner or the Google Analytics opt-out add-on linked in section 4.

3. Why we use it (lawful basis)

• To respond to your enquiry and provide the services you ask about — based on our legitimate interest in operating our business and, where applicable, the steps necessary to enter into a contract with you.
• To keep this site online and secure — based on our legitimate interest in protecting our infrastructure and visitors.
• To comply with legal obligations when we have to retain certain records.
• With your consent, where consent is the right basis (for example, if we add analytics or marketing communications in the future).

4. Who we share it with

We do not sell personal information. We share it only with service providers that help us operate this site and respond to you, under contractual confidentiality and data-protection obligations:

• Cloudflare, Inc. — content delivery, DNS, security, and hosting of this website.
• Web3Forms — used to deliver messages submitted through the contact form to our inbox. Web3Forms processes your submission and forwards it to us; it does not retain message content beyond the time needed to deliver.
• Cloudflare Turnstile — provides bot protection on the contact form. Turnstile may collect technical signals about your browser (e.g. user-agent, IP) to distinguish humans from automated traffic. No tracking cookies are set.
• Google Analytics 4 (Google LLC) — we use Google Analytics to understand how visitors use this site (pages visited, session duration, referral source). Google Analytics sets cookies and collects IP addresses; we have enabled IP anonymisation so full IP addresses are never stored. Data is processed by Google LLC in the United States under Standard Contractual Clauses. You can opt out using the Google Analytics opt-out browser add-on.
• Professional advisers — accountants, legal advisers, and auditors, on a need-to-know basis.

We may also disclose personal data when required by law, court order, or competent regulator.

5. International transfers

Some of our service providers process data outside the Kingdom of Saudi Arabia. Where this happens, we rely on safeguards permitted under PDPL Article 29 — such as adequacy decisions, standard contractual clauses, or your explicit consent where required — to make sure your data continues to receive an appropriate level of protection.

6. How long we keep it

• Contact form submissions are kept for as long as we are actively in conversation with you, plus a reasonable period afterwards for record-keeping — typically up to 24 months from your last interaction with us.
• Server access logs retained by our hosting provider follow that provider’s standard retention (commonly 30 days to 6 months).
• We delete or anonymise personal information when it is no longer needed for the purposes for which it was collected.

7. How we protect it

We use HTTPS across the entire site, security headers (HSTS, CSP, X-Frame-Options), encrypted secret storage at our hosting provider, and least-privilege access for the small team that handles enquiries. We review and improve these controls on an ongoing basis.

8. Your rights

Under PDPL and equivalent regimes, you may:

• Ask to be informed about what personal data we hold about you.
• Request a copy of that data.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete data we no longer have a lawful basis to keep.
• Withdraw consent for any processing that relies on your consent.
• Object to processing based on legitimate interest.
• Lodge a complaint with the Saudi Data & AI Authority (SDAIA).

To exercise these rights, write to us at info@saudidict.com. We will respond within the period set by applicable law.

9. Children

This website is intended for business audiences and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information through this site, please contact us so we can remove it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “last updated” date at the top of this page. Material changes will be highlighted on the site.

11. Contact

For any privacy questions, please contact us at info@saudidict.com or write to: Riverwalk, Al Hussein Ibn Ali, At Taawun, Riyadh 12475, KSA.