Privacy Policy & Noticeسياسة وإشعار الخصوصية

1. Who this notice covers

This notice explains how PrivacyOne (“we”, “us”) handles personal data collected through this marketing website, theprivacyone.com. It is written to the Kingdom of Saudi Arabia’s Personal Data Protection Law (PDPL) and its Implementing Regulation, enforced by the Saudi Data & AI Authority (SDAIA).

It applies to visitors to this website and to people who contact us or request a demonstration. It does not govern the PrivacyOne platform itself when operated by a customer inside their own environment — in that case the customer is the data controller and their own privacy notice applies.

PrivacyOne is a Saudi-made platform, built in Riyadh. This website runs on infrastructure under our control and sets no third-party advertising or analytics trackers.

2. What we collect

We keep collection deliberately narrow. We collect only what a business website needs to answer an enquiry.

• Information you give us. When you use the demo-request or contact form, we collect the name, work email, organisation and the message you choose to send. These fields are submitted through your own email client — the form composes a message to info@theprivacyone.com and does not post your details to a server on this site.
• Language preference. Your choice of Arabic or English is stored locally in your browser so the site remembers it. It never leaves your device.
• Basic technical data. Like any website served over the internet, our web server processes the IP address and request metadata needed to deliver pages and keep the service secure. This is standard connection data, not a behavioural profile.

We do not use advertising cookies, cross-site trackers, session replay, fingerprinting, or third-party analytics on this website.

3. Legal basis for processing

Under the PDPL, we process the limited personal data above on the following bases:

Where the PDPL requires consent for a specific purpose, we ask for it before that processing begins, and you may withdraw it at any time.

4. How we use it

We use the information you provide only to reply to you, arrange and run a requested demonstration, and keep a record of our correspondence. We do not sell personal data, and we do not share it with advertisers or data brokers.

5. Who we share it with

We keep the circle small and named:

• Our own team, in Riyadh, who handle your enquiry.
• Email delivery, because your message reaches us as email. Your own email provider and ours transmit it in the ordinary course.
• Where the law requires, such as a lawful request from a competent authority in the Kingdom.

We do not transfer this website’s enquiry data outside the Kingdom for our own purposes. Where any cross-border transfer were ever necessary, it would be assessed for an adequate level of protection and appropriate safeguards as the PDPL requires (Art. 29).

6. How long we keep it

We keep enquiry correspondence for as long as needed to deal with your request and for a reasonable period afterwards to maintain a record of the relationship, then delete it. Connection and security logs are kept for a short operational window and rotated.

This mirrors how the PrivacyOne platform itself works: retention is scheduled, and disposal is recorded (PDPL Art. 18).

7. Your rights

The PDPL gives you strong rights over your personal data. You may:

• Be informed about how your data is processed — which is the purpose of this notice.
• Access the personal data we hold about you.
• Request correction of data that is inaccurate or incomplete.
• Request destruction of your data where it is no longer needed.
• Withdraw consent where processing relies on it.

To exercise any of these, email info@theprivacyone.com. We will respond within the statutory window. If you believe your rights have not been respected, you may raise the matter with SDAIA.

8. How we protect it

This website is served only over encrypted HTTPS, carries a strict Content-Security-Policy and the full set of modern security headers, and loads no third-party scripts. Access to enquiry correspondence is limited to the team members who need it.

9. Children

This website is aimed at organisations and their professional staff. It is not directed at children, and we do not knowingly collect their personal data.

10. Changes to this notice

We may update this notice as our practices or the law evolve. The effective date at the top of the page shows when it last changed. Material changes will be reflected here.

11. How to reach us

For any privacy question, or to exercise your rights, contact us:

PrivacyOne · Riyadh, Saudi Arabia · info@theprivacyone.com