Privacy policy

Foundry Arabia runs this website and decides how the personal data it collects is used. We are a business setup firm in Saudi Arabia.

Our office is at Building 2468, King Khalid Road, Al Tubayshi District, Dammam 32233. For any privacy question, email info@foundryarabia.com.

We collect only what you type or choose in the form, plus how you reached it. That means:

If you message us on WhatsApp, call or email us, we keep what you send and your number or address, to reply to you.

WhatsApp messages pass through WhatsApp, a Meta service, under its own privacy policy. The WhatsApp link adds the title of the page you were on to your message.

Our review form asks for your name, your review and a rating. Your company, role and email are optional.

We read every review to improve our work. We publish a review only if you allow it, and only in the way you chose: with your name and company, or without your name.

You can ask us to change or remove a published review at any time by emailing info@foundryarabia.com.

We do not save your IP address with your enquiry. To limit repeated submissions, our server keeps only a scrambled (hashed) form of it in temporary memory. That is cleared at the next submission after one minute, or when the server restarts.

The form has no file uploads. Please do not send passport copies or other documents until we ask for them as part of an engagement.

Our hosting provider, Vercel, records each visit in its server logs, including your IP address, browser type and the pages you open. We use these logs to keep the site secure and working.

The site keeps one small record in your browser's local storage. Apart from the Google Analytics cookies described below, it sets no cookies.

That record notes how you first reached the site: the landing page, the address of the referring page, any campaign tags and the time. It stays in your browser and reaches us only if you send the form.

The record, named fa_first_touch, has no automatic expiry. On your first visit more than 30 days after it was made, the site replaces it with a new one. You can delete it at any time by clearing this site's data in your browser.

We use Google Analytics to count visits and see how people use the site. It sets its own cookies, named _ga and _ga_ followed by an ID, which last up to two years. It also receives the service, timeline and multiple-choice answers you pick in the form. It never receives your name, email, phone number or the details you type. You can block its cookies in your browser settings.

We use your enquiry for three purposes:

We rely on your consent when you send the form, to reply to you and prepare a quote. You can withdraw it at any time by emailing us.

When you withdraw consent, we stop using your data, except records the law requires us to keep.

We keep the first-visit record and run Google Analytics on the basis of our legitimate interest in knowing which pages help visitors. Clearing or blocking this site's data in your browser removes or prevents the first-visit record. To stop Google Analytics, use Google's opt-out browser add-on (tools.google.com/dlpage/gaoptout) or a content blocker.

We do not sell personal data. We do not send you marketing messages unless you ask for them.

A few service providers handle your data on our behalf. They run the site, deliver your enquiry to our team and measure how the site is used:

Your enquiry is processed and stored outside Saudi Arabia, mainly in the United States, by Vercel, Google and Resend.

If an enquiry cannot be delivered, a copy stays in our hosting provider's error log until that log expires, so it is not lost.

We share your enquiry with no one else unless the law requires it. If you become a client, we share with government bodies only the data needed to complete your filings.

If an enquiry does not lead to an engagement, we delete it once we no longer need it. At the latest, we delete it 24 months after our last contact with you.

Client records are kept for as long as Saudi law requires, then deleted.

The first-visit record stays in your browser until you clear it, or until the site replaces it as described above.

When we delete an enquiry, we remove it from our inbox and our enquiry log. The site sends enquiries over encrypted connections (HTTPS), and only our team can open them.

Saudi Arabia's Personal Data Protection Law gives you these rights over the personal data we hold about you:

These rights apply within the limits the law sets. For example, we may need to keep some records when another law requires it.

You can also complain to the Saudi Data and AI Authority (SDAIA) through its Data Governance Platform, dgp.sdaia.gov.sa. Complaints are generally due within 90 days of the incident.

Email info@foundryarabia.com and tell us which right you want to use.

We may ask you to confirm your identity first, so that we never hand your data to someone else.

We reply within 30 days. If a request needs longer, we tell you why before the 30 days end and finish within a further 30 days.

We update this policy when the site or the way we handle data changes. The date on this page shows the latest version.

If we make a significant change, we say so on this page.