- We collect only what you give us through the contact form and direct channels, plus limited technical data.
- We use it to answer you, schedule demos, run and secure the website, and measure our advertising.
- We never sell personal data. We share it only with the service providers listed in this policy.
- Some providers operate outside Saudi Arabia. Transfers follow the PDPL and its Data Transfer Regulations.
- You can ask to access, correct or delete your data at any time by emailing abdulmalikalrifaee@outlook.com.
- The Arabic version of this policy is the authoritative text.
Who we are
This policy is issued by [Registered company name], trading as emerge AI systems (“emerge”, “we”, “us”). We are the controller of the personal data described here, within the meaning of the Personal Data Protection Law issued by Royal Decree M/19 (the “PDPL”) and its Implementing Regulations, supervised by the Saudi Data & AI Authority (SDAIA).
| Item | Detail |
|---|---|
| Registered name | [Registered company name] |
| Commercial registration | [CR number] |
| VAT number | 314227590500003 |
| Registered address | [Street address], Al Khobar, Eastern Province, Kingdom of Saudi Arabia |
| General enquiries | info@emerge-sa.com · +966 57 760 2467 |
| Privacy requests | abdulmalikalrifaee@outlook.com |
This policy covers the website emerge-sa.com, including its English and Arabic versions and the contact form. It does not cover data processed inside the emerge platform on behalf of subscribing customers: that data is hosted on Oracle Cloud servers in the Kingdom of Saudi Arabia and is governed by each customer's subscription agreement.
What we collect and how
We collect personal data in three ways: what you give us, what our systems record automatically, and what we receive when you contact us on external channels.
| Source | Data | How |
|---|---|---|
| Contact form | Full name, job title, organisation, work email, mobile number, sector, modules of interest, a description of your current systems, and your marketing preference | You type it in and submit |
| Direct channels | Whatever you send us by email, phone or WhatsApp, and the contact details you use | You contact us |
| Website use | Page URL and language of the form you used and the submission time; IP address, browser type and pages requested, in our hosting provider's server logs; the advertising identifiers described under Cookies | Recorded automatically |
Why we use it and on what legal basis
The PDPL requires a legal basis for each purpose. Ours are set out below.
| Purpose | Data used | Legal basis |
|---|---|---|
| Answering your enquiry and scheduling a technical demo | Contact form data | Steps taken at your request before a contract, and our legitimate interest in responding to business enquiries |
| Sending you marketing about the emerge platform | Name, email, phone | Your consent, given through the checkbox on the form. You can withdraw it at any time |
| Securing the website and preventing abuse | IP address, request logs | Our legitimate interest in protecting our systems |
| Understanding how the site is used | Aggregated, cookieless statistics | Our legitimate interest. No personal identifiers are retained |
| Measuring our advertising | Google advertising cookies and identifiers | Your consent where required, and our legitimate interest in measuring campaigns. You can opt out as described under Cookies |
| Meeting legal obligations and defending claims | Whatever is strictly required | Compliance with the law |
Where we rely on legitimate interest, we have checked that our interest does not override your rights, and we never rely on it for sensitive data. If you do not provide the data marked as required on the form, we cannot respond to your request.
Transfers outside Saudi Arabia
Several providers above store or process data outside the Kingdom. We transfer personal data abroad only as the PDPL and the Personal Data Transfer Regulations allow: to a country that SDAIA recognises as offering an adequate level of protection, or under appropriate safeguards such as the provider's data-processing terms and standard contractual clauses, and always limited to the minimum data needed. Contact us at abdulmalikalrifaee@outlook.com for details of the safeguards used with a particular provider.
How long we keep data
| Data | Retention |
|---|---|
| Demo requests and related correspondence | 24 months after our last contact with you, or for the life of the contract and the statutory period after it if you become a customer |
| Server logs | A short rolling period set by our hosting provider, for security |
| Marketing consent records | Until you withdraw consent, plus the period needed to evidence it |
When data is no longer needed we delete it or anonymise it.
How we protect data
The website is served over HTTPS. Access to enquiries is limited to team members who need it, providers are bound by contractual confidentiality and security obligations, and we keep the data we hold to a minimum. No system is completely secure, so we cannot guarantee absolute security. If a breach of personal data occurs that may cause you harm, we will notify SDAIA within 72 hours of becoming aware of it and inform you without undue delay, as the PDPL requires.
Your rights
Under the PDPL you have the right to:
- be informed about how we process your personal data, which this policy provides;
- access your personal data and obtain a copy in a readable format;
- ask us to correct, complete or update it;
- ask us to destroy it when it is no longer needed for the purpose it was collected for;
- withdraw consent at any time, without affecting processing that took place before withdrawal;
- object to direct marketing at any time.
To exercise a right, email abdulmalikalrifaee@outlook.com with the subject “PDPL request”. We may ask you to verify your identity. We respond within 30 days, which the regulations allow us to extend once if the request is complex, and we do not charge a fee unless requests are manifestly excessive. If you are not satisfied with our response, you may lodge a complaint with SDAIA, the competent authority under the PDPL.
Direct marketing
We send marketing about the emerge platform by email or WhatsApp only to people who have opted in, for example by ticking the box on our contact form. Every message includes a way to opt out, and you can also opt out by emailing us. Replying to your enquiry or confirming a demo is not marketing.
Children
The website is intended for businesses and their representatives. It is not directed at anyone under 18, and we do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it.
Links to other services
The site links to WhatsApp, Instagram, TikTok and Google Maps. Those services are operated by third parties under their own privacy policies, which we encourage you to read. This policy does not apply to them.
Changes to this policy
We review this policy at least once a year and whenever our processing changes. The version number and date at the top tell you which edition you are reading. If a change materially affects you, we will highlight it on the website before it takes effect.
Contact
Privacy requests: abdulmalikalrifaee@outlook.com. General enquiries: info@emerge-sa.com, +966 57 760 2467. Postal address: [Street address], Al Khobar, Eastern Province, Kingdom of Saudi Arabia.
This policy is published in Arabic and English. If the two versions differ, the Arabic version prevails.