01Scope of the Privacy Policy
This policy applies to data collected through the Website, contact and quotation forms, any newsletter, communication by email, phone, or messaging applications, collaboration or recruitment requests, cookies, and usage analytics. It does not apply to external websites or services linked from the Website.
02Data we may collect
We seek to collect only the minimum data necessary for the specified processing purpose.
- Name, organization or company name, and job title.
- Phone number, email address, and city or country.
- Event or project type, date, location, and estimated budget if provided.
- Request details, messages, files, and attachments.
- Recruitment application data and résumés.
- IP address, device type, browser, and operating system.
- Pages visited, visit duration, and traffic source.
03How data is collected
We may receive your data directly through contact, quotation, recruitment, and newsletter forms, emails, and messaging applications, or automatically through cookies, analytics tools, server logs, and security technologies. We may also receive it from a project partner or an organization you represent when necessary for communication or delivery.
04Purposes for using data
We do not use personal contact details to send marketing materials without appropriate consent and a clear means of unsubscribing.
- Responding to inquiries and communicating about services.
- Preparing quotations and technical proposals and assessing project needs.
- Managing relationships with clients, partners, and suppliers and performing contracts.
- Processing recruitment and collaboration requests.
- Improving the Website, measuring performance, and analyzing visits.
- Protecting the Website against fraud, intrusion, and unlawful use.
- Complying with regulatory or judicial requirements.
- Sending news and marketing offers after obtaining your consent.
05Legal basis for processing data
Processing takes place where an appropriate legal basis exists, such as your consent, pre-contractual steps, contract performance, compliance with a legal obligation, protection of vital interests, or a legitimate interest that does not conflict with your rights. You may withdraw consent without affecting the lawfulness of prior processing.
08Transfer of data outside the Kingdom
Some technical or hosting services may require data to be processed by providers outside the Kingdom of Saudi Arabia. Where this occurs, we take appropriate measures to ensure adequate protection and limit the transfer to what is necessary under applicable regulations.
09Data retention
We retain data for the period necessary for the purpose for which it was collected or as required by regulations and contracts. Once the purpose ends, it is securely deleted, destroyed, or anonymized unless there is a lawful basis for longer retention.
- Contact inquiries and quotation requests.
- Contracts, correspondence, and financial documents.
- Recruitment applications.
- Technical and security records.
10Data protection
We take reasonable organizational, administrative, and technical measures to protect data against unauthorized access, disclosure, alteration, loss, damage, or leakage. Absolute security of electronic transmission or storage cannot be guaranteed. If a potentially harmful incident occurs, we follow applicable notification and remediation requirements.
11Your data rights
Requests to exercise rights are processed within the legally prescribed period. We may request information to verify identity and protect data against unauthorized access.
- Knowing the legal basis and purpose for collecting your data.
- Accessing your data and obtaining a clear copy.
- Correcting inaccurate data, updating it, and completing missing information.
- Requesting destruction of data where permitted by law.
- Withdrawing consent where it is the basis for processing.
- Objecting to or filing a complaint about processing.
12Children's data
Our services are primarily intended for organizations and adults. We do not knowingly collect children's data without parental consent or another lawful basis. If such data is found to have been collected unlawfully, we take appropriate steps to delete it.
13External website links
The Website may include links to third-party platforms or websites. We are not responsible for their privacy practices or content and recommend reading their policies before providing any data.
14Updates to the Privacy Policy
This policy may be amended to develop services or reflect regulatory or technical changes. The updated version will be published on this page with its latest revision date.
15Contact us
Rayhan Al Tamayuz Establishment
Email: info@rayhan-group.com
Phone number: +966 506590300
Title: Riyadh, Kingdom of Saudi Arabia
Website: https://rayhan-group.com