Saud Soft logo Saud Soft Technical Services & Consulting
Contact Us
Protecting Your Data

Privacy Policy

This policy explains the type of data we collect through our website, why we collect it, how we protect it, and your rights regarding it, in line with the Personal Data Protection Law issued in Saudi Arabia.

Last updated: September 27, 2026 · This is an English translation provided for convenience — the Arabic original is the legally authoritative version in case of any discrepancy.

1 About the Company and Its Activities

"Saud Soft for Technical Services and Consulting" ("Saud Soft", "we", "us") is a Saudi business based in Dammam, Eastern Province, providing technical consulting, automation and digital transformation, landing page design and development, and IP PBX programming and management for small and medium businesses. This policy applies to our website saudsoft.com and any personal data we collect through it.

2 Contact Information

For any question regarding this policy or your personal data, you can reach us via:

3 Personal Data We Collect

We collect only three categories of data, and nothing beyond them:

  • Contact form data (entirely voluntary): your name, email address, phone number, requested service type, and your message. This data is only sent when you fill out the form and click submit — that is, with your explicit consent to collect it for the specific purpose of responding to your inquiry and providing the service you requested.
  • Necessary technical data logged automatically on our server: such as IP address, browser and device type, the page requested, and the time of the request. This data is technically necessary to operate and deliver the website to you and to protect it from misuse (such as rate-limiting to prevent spam). We do not link it to your personal identity, and it is logged regardless of your consent because it is necessary for the website to function.
  • Optional analytics data (with your consent only): once you give explicit consent via the preferences banner shown on your first visit, we enable Google Analytics (provided by Google LLC) to measure visits and general browsing behavior: the pages you visit, how long you stay, your device and browser type, and your approximate geographic region inferred from your IP address — without identifying you by name.

We do not display any advertising, and we do not sell or share your data for marketing purposes. Cookies used on the site fall into two types: a necessary technical cookie that protects the contact form from cross-site request forgery (CSRF) attacks, which operates regardless of your consent and is automatically deleted within an hour of being issued, and Google Analytics cookies, which are never enabled before your explicit consent. You can change your decision or withdraw your consent at any time from the "Privacy Preferences" link at the bottom of every page.

4 How and Why We Collect Data

We collect data in three ways: direct collection when you fill out the contact form on the website, indirect automatic collection from the web server while you browse the site (the necessary technical logs), and optional analytics collection via Google Analytics, which never begins until you give explicit consent.

The purpose of processing contact form data is solely to communicate with you, respond to your inquiry, and provide the service you requested. The purpose of Google Analytics data is to measure visit numbers, understand which pages are most visited, and see how long visitors stay, in order to improve the site's content and user experience. We do not use any of this data for advertising purposes, nor do we build profiles from it to make automated decisions about you. Google's processing of this data is governed by Google's own privacy policy, as an independent data processor.

5 How We Process Your Data

When you submit the contact form, your data is sent encrypted (HTTPS) to our server, which validates it and immediately forwards it to an internal automation system (n8n) that we operate ourselves. That system, in turn, sends an email to our team so we can respond to you, and saves a copy of your request in an internal log for follow-up and future reference. Your data is not stored anywhere else, and is not processed for any purpose other than those described above.

6 Sharing Data With Other Parties

We do not sell your personal data or share it with any party for marketing purposes. Contact form data is processed through an email service and a spreadsheet service, both belonging to Google (within Google Workspace), as technical service providers we use solely to manage our communication with you. We also use Google Analytics, with your consent only, to measure website visits — a service provided by the same company (Google LLC). This data may be processed on servers located outside Saudi Arabia, within Google's global infrastructure, which is subject to its own privacy and security safeguards. We do not share your data with any other local or international party without a legal basis or your explicit consent, except to the extent required by law or a competent official authority in Saudi Arabia.

7 Storage, Retention Period & Deletion

Contact form data is stored only for as long as necessary to fulfil the purpose of communicating with you — typically no longer than twelve months from the date of your last contact, unless a longer period is required by an applicable legal obligation or an active dispute. You may request deletion of your data at any time (see the next section). Technical logs (item 3) are retained for a limited period for purely operational security purposes, then automatically deleted or overwritten. We take reasonable security measures to protect your data in transit (HTTPS encryption) and during processing (access limited to authorized members of our team).

8 Your Rights Over Your Personal Data

Under the Saudi Personal Data Protection Law, you have the right to:

  • Be informed: know the legal basis and purpose for collecting your data.
  • Access: obtain a copy of the data we hold about you.
  • Portability: request that your data be transferred in a readable format to another party.
  • Correction: request correction of any inaccurate data.
  • Deletion: request deletion of your data once the purpose for collecting it has been fulfilled.
  • Withdraw consent: withdraw your consent to the processing of your data at any time, including disabling Google Analytics immediately via the "Privacy Preferences" link at the bottom of every page.
  • File a complaint: file a complaint regarding any alleged violation of your data rights.
  • Claim compensation: for any material or moral harm resulting from an actual violation of the law.

To exercise any of these rights, write to us at info@saudsoft.com. We will respond to your request within 30 days of receipt (extendable by a further 30 days, with notice to you and the reasons for the extension).

9 Filing Complaints

If you believe our processing of your data has not complied with this policy or with the Personal Data Protection Law, you may first contact us directly at info@saudsoft.com, and we will work to resolve your complaint as quickly as possible. You also have the right to file a complaint directly with the competent authority in Saudi Arabia, the Saudi Data & Artificial Intelligence Authority (SDAIA), via the National Data Protection Portal .

10 Accessing and Updating This Policy

We are committed to writing this policy in clear, non-misleading language that is easy to understand. We may update this policy from time to time to reflect changes in our practices or in applicable regulations, and we will publish any update on this page along with a revised "last updated" date above. We recommend reviewing this page from time to time.