Legal
Privacy Policy
Draft — pending legal review
This policy is awaiting review by a KSA-qualified legal adviser and still contains details to be confirmed. It is published for transparency and is not yet final. For any privacy question in the meantime, contact info@strategios.sa.
Last updated: [DATE]
1. Who we are
Strategios Digital Enablement ("Strategios", "we", "us") is a consultancy registered in the
Kingdom of Saudi Arabia, with offices in Riyadh. We operate the website strategios.sa.
For any question about this policy or your personal data, contact us at info@strategios.sa.
Registered entity: [FULL LEGAL NAME] · Commercial Registration No. [CR NUMBER] Registered address: [ADDRESS], Riyadh, Kingdom of Saudi Arabia
2. What this policy covers
This policy explains what personal data we collect through this website, why we collect it, how we use it, and the rights available to you. It applies to this website only. Personal data processed within a client engagement is governed by the contract for that engagement.
3. What we collect
Information you give us. When you submit our contact form, we collect your name, work email address, organisation name, and the content of your message. These are the only fields we ask for.
Information collected automatically. When you visit the site, we may collect limited technical information such as the pages viewed, approximate region, referring source, browser type, and device category. [ADJUST TO MATCH THE ANALYTICS TOOL SELECTED.]
What we do not collect. We do not collect payment information through this website. We do not knowingly collect data from children. We do not buy personal data from third parties for marketing.
4. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Respond to your enquiry | Necessary to take steps at your request prior to entering a contract |
| Maintain a record of business correspondence | Our legitimate business interest |
| Understand which pages are useful and improve the site | Our legitimate business interest, using aggregate data |
| Meet legal, regulatory, or tax obligations | Compliance with a legal obligation |
We do not use your data for automated decision-making that produces legal effects, and we do not sell your personal data.
5. Marketing
If you contact us, we will reply to your enquiry. We will not add you to a marketing list without your consent. Where you do consent, you can withdraw it at any time by replying to any message or writing to info@strategios.sa.
6. Who we share it with
We share personal data only where necessary, and only with:
- Service providers who help us operate this website and our email — for example hosting, form processing, and email delivery. They act on our instructions and may not use your data for their own purposes. [LIST THE ACTUAL PROVIDERS ONCE SELECTED.]
- Professional advisers such as lawyers or auditors, where required.
- Authorities, where we are legally required to disclose.
We do not sell, rent, or trade personal data.
7. International transfers
[COMPLETE ONCE HOSTING AND TOOLING ARE CONFIRMED.]
Where personal data is transferred outside the Kingdom of Saudi Arabia, we take steps to ensure it receives an appropriate level of protection, consistent with the requirements of the Saudi Personal Data Protection Law and its Implementing Regulations.
⚠️ Drafting note: this clause must state the reality accurately. If the site, form handler, or analytics are hosted outside KSA, that is a cross-border transfer and must be disclosed plainly. Do not publish a generic reassurance that does not match the actual setup.
8. How long we keep it
We keep enquiry correspondence for [RETENTION PERIOD — e.g. 24 months] from our last substantive contact with you, after which it is deleted or anonymised, unless we are required to retain it for legal or contractual reasons.
9. How we protect it
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including access controls, encryption in transit, and restricted internal access on a need-to-know basis. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
10. Your rights
Subject to applicable law, you have the right to:
- Be informed about how your personal data is collected and used
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data, where there is no lawful reason for us to keep it
- Object to or restrict certain processing
- Withdraw consent at any time, where processing is based on consent
- Request a copy of your data in a readable format
To exercise any of these, write to info@strategios.sa. We will respond within the period required by applicable law. If you are not satisfied with our response, you may lodge a complaint with the competent supervisory authority in the Kingdom of Saudi Arabia.
11. Cookies and similar technologies
[COMPLETE ONCE ANALYTICS IS SELECTED.]
If a cookieless analytics tool is used, the following applies:
This website uses privacy-respecting analytics that do not set cookies, do not track you across other websites, and do not collect personally identifiable information. We use it only to understand which pages are useful in aggregate. No consent banner is required because no personal data is stored on your device for this purpose.
If a cookie-based tool is used instead, this section must be expanded into a full cookie notice listing each cookie, its purpose, and its duration — and the site will require a compliant consent banner with a genuine reject option.
12. Third-party links
Our site links to third-party sites, including LinkedIn. We are not responsible for their privacy practices. Review their policies before providing personal data.
13. Changes
We may update this policy from time to time. The current version is always published on this page with the date it was last updated. Material changes will be made clear.
14. Contact
Questions, requests, or complaints: info@strategios.sa Strategios Digital Enablement, Riyadh, Kingdom of Saudi Arabia.