Privacy policy

This policy explains how the website of MADA Al-Saudia for Trading and Development handles the personal data you send us through its contact form, and what the website records when you browse it.

Who we are

The website and your data are the responsibility of MADA Al-Saudia for Trading and Development, commercial registration 1010133137, 4534 Omar Ibn Abdulaziz Branch, Al Rabwah, Riyadh, Saudi Arabia. For questions about your data: contact@madaalsaudia.com.

What we collect

• Through the contact form: your name, email address, subject and message, which are required to send the form; and your mobile number and attached files, which are optional (up to 3 files in PDF, JPG, PNG, DOCX or XLSX format).
• Your consent to the processing of your message (the ticked consent box), the language of the page and the time your message was received.
• Technical data needed to run and protect the website: a session cookie and a cookie that protects forms against forged requests; the hosting server’s access logs (IP address, time, requested page and browser type); and a keyed hash of your IP address, used to limit repeated sending, without storing the address itself with your message.

Why we collect it and on what basis

Contact form messages and their attachments: we use them only to answer your enquiry. We do not use them for marketing or for any purpose incompatible with the purpose for which they were collected. We process them on the basis of your consent, which you give by ticking the consent box before sending.

Technical data: we use the session and form-protection cookies, access logs, the value derived from your IP address and backups to run the website, protect it from misuse and preserve its data. This processing is needed for the website to work and does not rely on the contact form consent.

The website uses no third-party advertising, analytics or tracking tools.

If the required fields are not filled in, or you do not consent to their processing, the form cannot send your message; you can then use the email address or phone number published on the contact page.

Who can see your data

Only authorised MADA staff: messages are shown inside the website’s content management system to administrator accounts, which sign in with a password and a verification code, and a notification of each message is emailed to the company address contact@madaalsaudia.com with its details and the number of attachments, but not the files themselves. The website, its database and the mailbox are hosted by a hosting service provider that processes the data on our behalf. The website does not send your data to anyone else.

Where it is stored and how it is protected

The data is stored on the hosting provider’s servers outside Saudi Arabia. The website is served over an encrypted connection (HTTPS), form data is stored encrypted in the database, and attachments are kept in a private folder that cannot be reached from the internet.

How long it is kept

• A message and its attachments are deleted from the website automatically 180 days after they were received, and earlier if you ask us.
• Email notifications stay in the company mailbox until the company deletes them.
• The website makes a backup every day and keeps the latest 14 on the server, so a deleted message can remain in these backups for up to about two weeks. The company may keep additional backups outside the server to restore the website, until it deletes them, and the hosting provider may keep backups under its own service.
• The session record expires after 120 minutes of inactivity, and access logs follow the hosting server’s settings. An internal audit log of operations (such as a message being received or deleted) is kept without the text of your message or your IP address.

Withdrawing your consent

You can withdraw your consent at any time by writing to contact@madaalsaudia.com. We then stop processing your message, delete it and its attachments from the website, and delete its notification from the company mailbox. Withdrawal does not affect processing carried out before it, and if you withdraw before we reply, we will not be able to answer your enquiry. Copies of the message in existing backups remain until those backups are deleted, as described under “How long it is kept”.

Cookies and visit statistics

The website uses only two necessary cookies: the session cookie and the form-protection cookie. Your browser keeps display preferences (such as light or dark mode) on your device only; they are not sent to the website. The website does not currently collect visit statistics; if that is switched on later, this policy will be updated to explain what is recorded.

Your rights

Under Saudi Arabia’s Personal Data Protection Law, you have the right to be informed about how your data is collected and processed; to access your data held by us; to ask for a copy of it in a readable and clear format; to ask for it to be corrected, completed or updated; to ask for it to be destroyed when it is no longer needed; and to withdraw your consent (see “Withdrawing your consent”) — under the conditions set by the law and its regulations. To exercise these rights or to ask about your data, write to contact@madaalsaudia.com.

Changes to this policy

When this policy changes, the “Last updated” date at the top of this page changes too.