PRIVACY POLICY

Axadata ("we", "our", or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard personal data when you visit our website at axadata.com, engage with our services, or otherwise interact with us. We operate in accordance with applicable data protection legislation, including the Saudi Personal Data Protection Law (PDPL) and, where applicable, the European Union General Data Protection Regulation (GDPR) and other regional privacy frameworks across the MENA region and globally. By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

Axadata is the data controller responsible for your personal information. If you have any questions or concerns regarding how we process your data, you may contact our Data Protection Officer at: Email: info@axadata.com Phone: +966 50 930 99 00 Address: Riyadh, Saudi Arabia

We may collect and process the following categories of personal data: Identity & Contact Data: Full name, email address, telephone number, company name, job title, and country of residence, provided when you submit our contact form, request a consultation, or enter into a business relationship with us. Usage Data: IP address, browser type and version, pages visited, time and date of access, and referring URLs, collected automatically through cookies and analytics tools when you browse our website. Communications Data: Records of correspondence when you contact us by email, telephone, or our website contact form. Business & Professional Data: Information shared during consultations, proposals, or project engagements, including data architecture requirements and organisational context, to the extent necessary to deliver our services. We do not collect sensitive personal data (such as health, biometric, or financial data) unless explicitly required for a specific engagement and with your prior written consent.

We process personal data on the following lawful bases and for the following purposes: Contractual Necessity: To deliver data intelligence, engineering, analytics, and advisory services you have engaged us for; to manage our client relationship; and to fulfil contractual obligations. Legitimate Interests: To respond to enquiries submitted through our contact form; to improve our website and service offerings; to prevent fraud and ensure network and information security; and to conduct business development activities where you have a reasonable expectation of contact. Legal Obligation: To comply with applicable laws and regulations, including tax, accounting, anti-money laundering, and cybersecurity requirements. Consent: To send marketing communications, industry updates, or event invitations where you have opted in. You may withdraw consent at any time by contacting us at info@axadata.com.

We do not sell, rent, or trade your personal information. We may share data only in the following circumstances: Service Providers: Trusted third-party vendors who assist in operating our website, delivering services, or managing communications (e.g. cloud hosting providers, email delivery platforms, analytics tools). All service providers are contractually bound to process data only on our instructions and in accordance with applicable data protection law. Professional Advisers: Lawyers, auditors, accountants, and insurers in the course of their professional services, subject to confidentiality obligations. Regulatory & Legal Authorities: Where required by law, court order, or government authority, including regulators in Saudi Arabia and other applicable jurisdictions. Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent data protection safeguards. All international transfers of personal data are conducted in accordance with applicable cross-border data transfer requirements, including appropriate safeguards such as standard contractual clauses.

We retain personal data only for as long as is necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required or permitted by law. Contact and enquiry records are typically retained for 3 years from the date of last contact. Client engagement records are retained for 7 years following the conclusion of a project, in line with statutory accounting and legal requirements. Website usage data collected through analytics tools is retained for 26 months. Upon expiry of applicable retention periods, personal data is securely deleted or anonymised.

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and understand user behaviour. Essential Cookies: Required for the website to function correctly. These cannot be disabled. Analytics Cookies: Help us understand how visitors interact with our website (e.g. pages visited, time spent). This data is aggregated and anonymised. You may control cookie preferences through your browser settings. Please note that disabling certain cookies may affect website functionality. Where required by applicable law, we will seek your consent before placing non-essential cookies.

Subject to applicable law, you may have the following rights in relation to your personal data: Right of Access: To request a copy of the personal data we hold about you. Right to Rectification: To request correction of inaccurate or incomplete data. Right to Erasure: To request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Right to Restriction: To request that we restrict processing of your data in certain circumstances. Right to Data Portability: To receive your data in a structured, commonly used, machine-readable format. Right to Object: To object to processing based on legitimate interests or for direct marketing purposes. Right to Withdraw Consent: Where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing. To exercise any of these rights, please contact us at info@axadata.com. We will respond within the timeframe required by applicable law (typically 30 days). You also have the right to lodge a complaint with your local data protection supervisory authority.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include encryption in transit and at rest, access controls, and regular security assessments. While we take data security seriously, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to protecting your data to the highest practicable standard.

Our website may contain links to third-party websites, platforms, or resources. This Privacy Policy applies solely to information collected by Axadata. We are not responsible for the privacy practices or content of third-party websites and encourage you to review their privacy policies before providing any personal data.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us: Email: info@axadata.com Phone: +966 50 930 99 00 Address: Riyadh, Saudi Arabia