This Privacy Policy explains how [Company legal name] ("Innovant", "we", "us") collects, uses, and protects personal data when you use this website, in line with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and its Implementing Regulations.
Data controller
[Company legal name], Commercial Registration No. [CR number], [registered address], Riyadh, Saudi Arabia, is the controller responsible for your personal data. For any privacy matter you may contact our Data Protection Officer at [privacy@your-domain] or [phone].
Personal data we collect
Information you provide directly — such as your name, email, phone number, company, and the content of your message — when you request a consultation, submit a form, or contact us.
Technical data collected automatically, such as IP address, browser type, device information, and pages visited, through cookies and similar technologies. We do not knowingly collect sensitive personal data unless you choose to provide it for a specific service.
Purposes and lawful basis
We process personal data to respond to your enquiries and provide requested services; to operate, secure, and improve the website; and to comply with legal obligations. Our lawful bases under the PDPL include your consent, the performance of a contract (or steps taken at your request before a contract), our legitimate interests, and compliance with applicable law.
Cookies and similar technologies
We use strictly necessary cookies to run the website and, with your consent, analytics cookies to understand how it is used. You can manage non-essential cookies through the consent banner and your browser settings; declining them does not affect access to essential functionality.
Sharing your data
We share personal data only with service providers who process it on our behalf under written agreements, with government authorities where required by law, and with professional advisers — in each case limited to what is necessary. We do not sell personal data.
International transfers
Where personal data is transferred outside the Kingdom, we apply the safeguards required by the PDPL and its Implementing Regulations, transferring only where an adequate level of protection is ensured.
Data retention
We keep personal data only for as long as necessary for the purposes described above or as required by applicable law, after which it is securely deleted or anonymised.
Your rights under the PDPL
Subject to the conditions of the PDPL, you have the right to be informed about the processing of your data, to access it, to request its correction, to request its destruction, and to withdraw consent. To exercise any right, contact us using the details below; we will respond within the period required by law.
Data security
We apply appropriate organisational and technical measures to protect personal data against loss, misuse, and unauthorised access. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Children's privacy
This website is intended for businesses and professionals and is not directed at children. We do not knowingly collect personal data from children.
Changes to this policy
We may update this Privacy Policy from time to time. The current version and its effective date are published on this page.
Contact us
For any question about this Privacy Policy or your personal data, contact [Company legal name] at [privacy@your-domain], [phone], or [registered address], Riyadh, Saudi Arabia.
Last updated: [date]. This is a template; confirm with your legal adviser before publishing.