Skip to content
ARGA Saudi Arabia

Privacy Policy

This is a working draft pending legal review. See docs/CONTENT-REVIEW.md.

This policy explains how ARGA Saudi Arabia processes personal data submitted through arga-arabia.com, in accordance with the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL).

Data we process

This site collects personal data only when you submit the contact form: your name, a contact detail (email or phone), country, the nature of your request, and the description of your matter that you provide.

The site does not use analytics, tracking, or advertising cookies, and does not collect personal data through any other means. The contact form does not accept file uploads.

Basis for processing

Data submitted through the contact form is processed on the basis of your consent, given when you submit the form, and ARGA Saudi Arabia's legitimate interest in responding to enquiries addressed to it.

How your data is used

Data submitted through the contact form is used solely to respond to your enquiry and, where you choose to proceed, to coordinate the advisory engagement that follows.

Data minimization

Only the fields necessary to respond to an enquiry are collected. No identity documents, case files, or other sensitive material are accepted through this form; where a matter requires sharing such material, a separate secure channel is arranged after initial contact.

Cross-border transfer

Form submissions are transmitted through a Cloudflare Workers service and delivered to ARGA Saudi Arabia via Telegram. Both providers may process data outside the Kingdom of Saudi Arabia as part of their infrastructure. Appropriate safeguards are applied to this transfer consistent with the PDPL's requirements for cross-border data transfer.

Retention

Enquiry data is retained only for as long as necessary to respond to the enquiry and, where an engagement follows, for the duration required by the engagement and applicable record-keeping obligations. Absent an ongoing engagement, ARGA Saudi Arabia retains enquiry data for 24 months from the date of last contact, after which it is deleted.

Your rights

Under the PDPL, you have the right to be informed of the basis and purpose of processing, to access your data, to request correction, to request destruction of your data (subject to legal exceptions), to withdraw consent, and to lodge a complaint with the Saudi Data & AI Authority (SDAIA). To exercise these rights, contact ARGA Saudi Arabia through the contact form.

Changes to this policy

This policy may be updated periodically. The version published on this page is the version in effect.