Privacy Policy

Who we are

The controller of the personal data described here is TQN Systems, Riyadh, Kingdom of Saudi Arabia. For any privacy question or request, write to us at the email address on our contact page.

What we collect

When you submit the enquiry form, we collect what you type and a small amount of context about the visit.

• From you: name, company, work email, mobile number, the practice you are interested in, and an optional message.
• Meeting preferences you choose: service, meeting format, requested time and site city; and your sector and need, if you choose to share them.
• From the visit: the page URL the form was sent from, the site language, the referring page, campaign (UTM) parameters, and the time of submission.

Why we use it and on what basis

We use enquiry data for one purpose: to respond to your enquiry and arrange an assessment. We do not use it for anything incompatible with that purpose.

The legal basis is your consent under Article 5 of the PDPL, given when you submit the form. The visit context (page, language, referrer, campaign parameters and time) is processed on the basis of our legitimate interest under Article 6(4) of the PDPL: routing your enquiry correctly and knowing which pages and campaigns bring enquiries. That interest does not override your rights, and none of this data is sensitive data.

If an enquiry becomes a business relationship, data needed for it is then processed under the agreement we sign with your organisation.

WhatsApp and meeting requests

The WhatsApp button opens WhatsApp. Anything you send there is handled under the messaging service's own terms and privacy policy, as well as by us as the recipient of your message.

The booking form on this site sends us a meeting request. It does not use an outside scheduling service: the time you choose is a request, which we confirm or rearrange with you by email or WhatsApp.

Cookies, local storage and analytics

Analytics load only after you accept them in the cookie banner. If you decline or make no choice, no analytics run.

Two strictly necessary entries are stored in your browser. A local storage entry records your cookie choice so the banner does not reappear on every page. A session storage entry keeps campaign (UTM) parameters for the current visit so they can travel with an enquiry; it is cleared when the browser session ends.

You can withdraw consent at any time. Use the “Cookie settings” link in the footer to reopen the banner and change your choice, or clear this site's stored data in your browser. Withdrawal stops analytics from that point on.

Who receives your data

We do not sell personal data. Enquiry data is shared only with service providers that process it on our behalf and under our instructions, each bound by contract to protect it:

• an email delivery provider, which delivers the enquiry to our team;
• a customer relationship management (CRM) system, which holds the enquiry and our follow-up;
• a hosting provider, which runs this website.

Where your data is stored

We store and process personal data in line with the PDPL. Where a provider stores or processes data outside the Kingdom, the transfer is made only for a purpose permitted by Article 29 of the PDPL and under its conditions: the transfer must not prejudice national security or the Kingdom's vital interests, the data must receive a level of protection not lower than the PDPL provides, and only the minimum data needed may be transferred. We also apply the Regulation on Personal Data Transfer outside the Kingdom issued by the Saudi Data and AI Authority (SDAIA), including its safeguards and risk assessment where it requires them.

Official texts: the PDPL at https://laws.boe.gov.sa/BoeLaws/Laws/LawDetails/b7cfae89-828e-4994-b167-adaa00e37188/1 and the Implementing Regulations and transfer regulation at https://dgp.sdaia.gov.sa/wps/portal/pdp/knowledgecenter

How long we keep it

We keep enquiry data for as long as it is needed for your enquiry and any business relationship that follows. Our policy is to keep it for up to 24 months after the last contact with you, unless a contract or a legal obligation requires longer. After that, we destroy it.

Your rights

Under Articles 4 and 5 of the PDPL, and as set out in the Implementing Regulations, you have the right:

• to be informed of the legal basis and purpose for collecting your data;
• to access your personal data that we hold;
• to obtain a copy of it in a readable and clear format;
• to request correction, completion or updating of it;
• to request destruction of it once it is no longer needed;
• to withdraw your consent at any time.

How to use your rights

Send your request to the email address on our contact page. We may ask you to confirm your identity before acting on it, and we respond within the period set by the Implementing Regulations.

If you are not satisfied with our response, you may lodge a complaint with the competent authority, SDAIA, under Article 34 of the PDPL: https://dgp.sdaia.gov.sa/wps/portal/pdp/services/reportscomplaints

Security

We apply organisational and technical measures to protect personal data against loss, misuse and unauthorised access, and require the same of the providers listed above.

Children

This website is for business enquiries and is not directed at children. We do not knowingly collect personal data from anyone under 18.

Changes to this policy

We will update this policy when our processing changes. The date at the top shows the latest version.