Saudi company formation and business setup support for founders and companies worldwideWorldwide consultation • International document coordination • We reply within one working day
Privacy & Data Protection

Your information, handled with care.

This Privacy Policy explains what personal information Saudi Company Formation may collect, why we use it, how we protect it, when it may be shared, and the choices available to you when you visit our website, contact our team, or use our services.

About this Privacy Policy

Saudi Company Formation (“we”, “us”, “our” or “the Company”) operates saudiacompanyformation.com and provides business, advisory and professional services in the Kingdom of Saudi Arabia. This policy explains how we handle personal information when you browse our website, make an enquiry, share documents with us, attend a meeting, or use one of our services.

01
What we receive

Information we collect

The information we collect depends on how you interact with us and which services you ask us to support.

Information you provide directly

This may include your name, email address, phone number, company information, nationality, documents needed for licensing, visa or compliance work, and other information you choose to share through forms, email or meetings.

Information collected automatically

When you use our website, we may receive technical information such as your IP address, browser type, device details, pages visited, cookie data and website analytics.

Information from third parties

Where needed to provide a service, we may receive relevant information from government authorities, banks or professional partners involved in the service process.

Documents related to your service

Some company formation and compliance services require supporting documents. We use those documents only for the relevant service, regulatory or operational purpose described in this policy.

02
Why we need it

How we use your information

We use personal information to communicate with you, deliver the services you request and manage the steps needed to support your Saudi business setup or ongoing compliance.

  • Respond to enquiries and provide requested professional services.
  • Process licensing, registration, visa and compliance-related applications.
  • Prepare or submit documentation to relevant Saudi authorities.
  • Support banking or financing introductions where this forms part of the requested service.
  • Improve our services, website experience and website performance.
  • Meet applicable Saudi legal and regulatory obligations.
  • Send marketing communications where you have consented to receive them. You can withdraw that consent at any time.
03
Why processing is permitted

Legal basis for processing

Consent

You may voluntarily provide personal information or give permission for optional processing.

Contractual necessity

We may need to process information to provide the service you have requested from us.

Legal obligation

We may process information where required to comply with Saudi law, including relevant PDPL, AML and commercial requirements.

Legitimate interest

We may use information where reasonably necessary to operate securely and improve our services, provided this does not override your rights.

04
Website experience

Cookies and tracking

We use cookies and similar technologies to support website functionality, understand how the website is used and remember certain preferences. You can disable cookies through your browser settings, although some website features may not work as intended if you do.

05
Who may receive it

How we share your information

We may share relevant information only where it is needed to provide a service, meet a legal obligation or support a requested process.

  • Government authorities: for licensing, visa and compliance processes.
  • Banks and financial institutions: for account opening or financing-related support.
  • Service providers: including IT, hosting and analytics providers that are expected to handle information confidentially.
  • Legal requirements: where disclosure is required by applicable law or a valid court order.
We do not sell or trade your personal data.
06
Protection measures

Data security

We use technical and organisational safeguards designed to protect personal information, including restricted access, secure storage and encryption where appropriate. No website, storage platform or transmission method can be guaranteed to be completely secure, so absolute security cannot be promised.

07
How long we keep it

Data retention

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected or for an applicable legal or regulatory requirement.

  • To complete or support the services you requested.
  • To meet Saudi legal and regulatory requirements.
  • To resolve disputes or enforce agreements where necessary.

When the relevant retention period ends, information is securely deleted or anonymised as appropriate.

08
Your control

Your rights under Saudi PDPL

Subject to applicable law and any legal obligations that may apply, you may have the following rights in relation to your personal information.

AccessAsk for a copy of the personal information we hold about you.
CorrectionAsk us to correct information that is inaccurate or incomplete.
DeletionRequest deletion of personal information, subject to legal or regulatory retention requirements.
RestrictionAsk us to limit certain processing in circumstances where that right applies.
Withdraw consentWithdraw consent for marketing or other optional processing that depends on your consent.
ComplaintRaise a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA).
09
Cross-border processing

International data transfers

Where personal information is processed outside the Kingdom of Saudi Arabia, such as through certain cloud-hosting arrangements, we take steps intended to ensure appropriate safeguards consistent with applicable PDPL requirements.

10
Age-related protection

Children’s privacy

Our services are intended for adults. We do not knowingly collect personal information from minors. If we become aware that information from a minor has been collected, we will take steps to delete it.

11
If an incident occurs

Data breach notification

If a personal data breach occurs and notification is required under applicable PDPL requirements, we will notify SDAIA and, where required, inform affected individuals promptly.

12
Keeping this page current

Changes to this Privacy Policy

We may update this Privacy Policy when our services, practices or applicable legal requirements change. The latest version will be published on this page together with a revised date.

Need clarification?

Talk to our team about your information.

If you have a privacy-related question connected to an enquiry or service, contact Saudi Company Formation and we will help you understand the next step.

Visit Saudi Company Formation