Alpha Consulting ("Alpha", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit alphaconsultancy.sa, contact us, or use our services.
We process personal data in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia (Royal Decree No. M/19 dated 9/2/1443H), as amended, and its Implementing Regulations (together, the "PDPL"). By using this website or submitting your data to us, you acknowledge the practices described in this Policy.
1. Data controller
Alpha Consulting is the data controller responsible for your personal data. Our registered address is Salama Tower (Southbound Madinah Road), Al Salamah District, Jeddah, Saudi Arabia.
For any privacy matter, including exercising your rights, you can reach us at hello@alphaconsultancy.sa.
2. Personal data we collect
We collect and process the following categories of personal data:
- Identity and contact data you provide, such as your name, company, work email, and phone number when you complete our contact form or correspond with us.
- Enquiry content, the details of your message and the services you express interest in.
- Technical and usage data, collected automatically through cookies and analytics, including your IP address, browser and device type, pages viewed, and how you interact with the site.
3. How we collect your data
We collect data directly from you when you submit a form or contact us; automatically through cookies and analytics tools when you browse the site; and, where relevant, from your communications with our team.
4. Why we process your data
We use personal data for the following purposes:
- To respond to your enquiries and provide the information or consultation you request.
- To provide, administer, and improve our services and our engagement with you.
- To operate, secure, and improve the website and understand how it is used.
- To comply with legal, regulatory, and accounting obligations in the Kingdom of Saudi Arabia.
5. Legal basis under the PDPL
We rely on one or more of the following legal bases to process your personal data: your consent (which you may withdraw at any time); the performance of a contract with you or steps taken at your request before entering into a contract; our legitimate interests, provided these do not override your rights; and compliance with a legal obligation.
6. Cookies and analytics
We use strictly necessary cookies required to operate the website. With your consent, we also use Google Analytics, a web-analytics service provided by Google, to understand how visitors use the site so we can improve it.
Analytics cookies are only set after you provide consent through our cookie banner. You can change or withdraw your choice at any time using the "Cookie preferences" link in the footer, or by adjusting your browser settings.
7. Third parties who process your data
We share personal data only with trusted service providers who process it on our behalf and under our instructions. These currently include:
- Google, for website analytics (Google Analytics).
- n8n, a workflow-automation tool we use to route, manage, and respond to enquiries submitted through our forms.
- Email and communication providers, used to receive and respond to your enquiries.
8. International transfers of data
Some of our service providers may process personal data on servers located outside the Kingdom of Saudi Arabia. Where personal data is transferred outside the Kingdom, we take steps to ensure an appropriate level of protection and to meet the conditions for cross-border transfer required under the PDPL and its Implementing Regulations.
9. Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements. When data is no longer required, we securely delete or anonymise it.
10. Your rights under the PDPL
Subject to the PDPL, you have the right to:
- Be informed about how your personal data is collected and used.
- Access the personal data we hold about you.
- Request a copy of your personal data in a readable format.
- Request the correction of inaccurate or incomplete personal data.
- Request the destruction of your personal data where it is no longer required.
- Withdraw your consent to processing at any time, without affecting prior lawful processing.
11. Exercising your rights
To exercise any of these rights, contact us at hello@alphaconsultancy.sa. We will respond to your request within the timeframes required by the PDPL. We may need to verify your identity before acting on a request.
12. Data security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or alteration. While we work to safeguard your data, no method of transmission over the internet is completely secure.
13. Children's data
This website is intended for businesses and professionals and is not directed at children. We do not knowingly collect personal data from children.
14. Complaints
If you have concerns about how we handle your personal data, we encourage you to contact us first. You also have the right to lodge a complaint with the competent supervisory authority in the Kingdom of Saudi Arabia, the Saudi Data & AI Authority (SDAIA).
15. Changes to this Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the effective date shown above.
16. Contact us
If you have any questions about this Privacy Policy or our data practices, please contact us at hello@alphaconsultancy.sa or by post at Salama Tower (Southbound Madinah Road), Al Salamah District, Jeddah, Saudi Arabia.