This Privacy Policy explains how ADIBAN Holding ("ADIBAN", "we", "us") collects, uses, stores, shares and protects personal data when you visit adibangroup.com (or adibanholding.com) or contact us through it. It is written to meet the Saudi Personal Data Protection Law (PDPL) issued by Royal Decree M/19 and its Implementing Regulations, overseen by the Saudi Data & AI Authority (SDAIA).
1. Who is responsible for your data
ADIBAN Holding is the controller of the personal data described here. For any privacy question or request, contact us at info@adibanholding.com.
2. What we collect
- Contact form: your name, e-mail address, subject and message.
- Partnership form: company name, country, sector, website, contact person, e-mail, telephone, partnership details and your message.
- Documents you choose to upload with a partnership enquiry (PDF or Word), such as a company profile or catalogue.
- Technical and security data: IP address, browser type and the time of your request — needed to keep the site and our forms safe from abuse.
- Cookies: see our Cookie Policy. Analytics or marketing cookies are only used if you allow them.
We do not ask for sensitive data (such as health, religion or financial details) — please do not include it in messages or documents.
3. Why we use it and our legal basis
- To answer your message or enquiry and assess a possible business relationship — based on your consent, which you give by ticking the consent box before you submit a form.
- To protect the website and our forms against spam, fraud and attacks — based on our legitimate interest in operating a secure service.
- To meet legal obligations, for example if a competent authority lawfully requests information.
We do not sell personal data, and we do not use it for unrelated marketing or automated decision-making.
4. How we collect and store it
Data is collected only from what you type or upload into our forms and from your browser's normal connection to the site. It is stored in our protected website database and file storage, which only authorised ADIBAN staff can access after signing in. Uploaded documents are kept in private storage outside the public website and can only be downloaded by signed-in staff; every download is logged.
5. Who we share it with
- Our internal team who handle your request.
- Service providers acting on our behalf — our hosting provider (where the website and database run) and the e-mail services that deliver notifications of new enquiries to our team. They may only use the data to provide their service to us.
- Authorities, where the law requires it.
6. Transfers outside the Kingdom
Our website server is hosted in a data centre in the European Union, and our team may receive enquiry notifications through e-mail providers whose servers are located outside Saudi Arabia. Such transfers are limited to what is necessary for the purposes above and are made in line with the PDPL and its Regulation on Personal Data Transfer outside the Kingdom, with appropriate safeguards (encryption in transit, access control and contractual commitments by the providers).
7. How long we keep it
- Messages and partnership enquiries (and any attached document): for as long as needed to handle your request and any resulting business relationship, and in any case no longer than 24 months after our last contact with you, unless the law requires longer. They are then permanently deleted.
- IP addresses stored with a submission: automatically removed after 90 days.
- When a record is deleted, any attached document is deleted with it.
8. How we protect it
HTTPS encryption on every page, private storage for documents, file checks that reject unsafe files, signed-in and role-based access for staff, audit logs, brute-force and spam protection on our forms, and regular security updates.
9. Your rights under the PDPL
You have the right to:
- be informed about how your data is processed (this policy);
- access your personal data and obtain a copy of it in a readable format;
- ask us to correct, complete or update it;
- ask us to destroy it when it is no longer needed;
- withdraw your consent at any time (this does not affect processing that took place before).
To exercise any of these rights, e-mail info@adibanholding.com from the address you used, or tell us how we can verify your identity. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Saudi Data & AI Authority (SDAIA).
10. Children
This website is intended for businesses. We do not knowingly collect personal data from anyone under 18.
11. Changes to this policy
We may update this policy. The date at the top shows the latest version; important changes will be highlighted on this page.
12. Contact
ADIBAN Holding — info@adibanholding.com