Privacy Notice

Last updated: [19 Nov 2025]

Purpose of this Privacy Notice

HALAPRIVACY (“we,” “us,” or “our”) operates ksapdpl.com as an informational resource dedicated to the Kingdom of Saudi Arabia’s Personal Data Protection Law. This Privacy Notice explains how we collect, use, disclose, and safeguard your personal data when you visit our website. We adhere to the Kingdom of Saudi Arabia’s Personal Data Protection Law, enacted by Royal Decree No. (M/19) on 16/09/2021 and amended by Royal Decree No. (M/148) on 27/03/2023.

This Notice applies to all personal data collected via our website and aims to maintain transparency regarding the personal data we handle, the purposes for which we handle it, and the measures we take to safeguard your rights.

Who is the Controller of your Personal Data?

HalaPrivacy is the data controller responsible for determining the purposes and means of processing your personal data through ksapdpl.com. If you have questions about our role or would like further clarification on our data protection practices, you can contact us.

What Personal Data We Collect

We collect the following categories of personal data through your use of the ksapdpl.com website:

Usage Data: Information about your interaction with our website, such as the pages you visit, the time and duration of your visit, and referral sources.

Technical Data: Your IP address (anonymized by Google Analytics), browser type, device information, and operating system.

Approximate Location Data: Country and city-level information, which is derived from your IP address by Google Analytics.

How We Collect Your Personal Data

We collect the personal data listed above through the following means:

Tracking Technologies: We use Google Analytics, a web analytics service, which employs cookies and similar technologies to collect and analyze usage data.

Server Logs: Our web hosting infrastructure automatically generates logs that contain technical information, such as IP addresses, for security and operational purposes.

No Direct Data Collection: This website does not contain contact forms, registration mechanisms, or any means for direct data submission.

How We Use Your Personal Data

We collect and process personal data for the following specific, lawful purposes:

Site and Service Improvement: We analyze, maintain, and enhance our website to optimize your user experience.

Operational Management: Monitor for technical issues and maintain website stability.

Legal Bases for Processing your Personal Data

We rely on one or more of the following legal bases under the KSA PDPL to process your personal data:

Consent: For analytical cookies and Google Analytics tracking, obtained through our cookie consent banner.

Legitimate Interests: For website security monitoring and operational maintenance, where these interests are not overridden by your data protection rights.

How We Protect Your Personal Data

We implement technical, administrative, and organizational measures as required by the KSA PDPL to safeguard your personal data:

Technical Measures

Secure HTTPS encryption for all data transmission.
IP address anonymization in Google Analytics.
Standard security protections from our hosting provider.

Administrative Measures

Internal policies governing data protection and retention.
Due diligence in selecting service providers.
Regular review of our data protection practices.

Organizational Measures

Restricted access to analytics data for authorized personnel only.
Ongoing monitoring of compliance with data protection policies.
Data processing agreements with processors.

Who We Share or Disclose Your Personal Data With

We share or disclose your personal data only where necessary to achieve the legitimate business or legal purposes described in this Notice. This may include the following categories of recipients:

Analytics Providers: We engage Google LLC as our analytics provider, which processes website usage data on our behalf under its Data Processing Terms.
You can review Google’s DPA and sub-processor list here:
https://business.safety.google/adsprocessorterms/ | https://business.safety.google/adssubprocessors/

Hosting Provider: We use Namecheap, Inc. as our website hosting provider. Namecheap processes server logs and technical data required to operate our website under its Data Processing Addendum. You can review Namecheap’s DPA here:
https://www.namecheap.com/legal/universal/data-processing-addendum/

Consent Management Provider: We use CookieHub as our consent management platform. CookieHub processes cookie consent preferences and related technical information on our behalf under its Data Processing Addendum. You can review CookieHub’s DPA here:
https://support.cookiehub.com/article/286-data-processing-addendum-dpa/

Government Authorities or Law Enforcement: We share or disclose personal data when required by applicable law or regulation, to comply with legal processes, to respond to lawful requests, to enforce our agreements, or to protect our rights and the rights of others.

International Transfers

Your personal data may be transferred outside the Kingdom of Saudi Arabia because some of our service providers operate or store data in other jurisdictions. Each processor is engaged under a data processing agreement that requires them to apply appropriate safeguards and technical, administrative, and organizational measures to protect personal data during transfer and processing.

We ensure that any international transfers comply with the requirements of the KSA Personal Data Protection Law, including the use of Standard Contractual Clauses (SCCs) to maintain an adequate level of data protection.

How Long Will Your Personal Data Be Retained?

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting obligations. The precise duration may vary based on factors such as:

Operational Necessity: We keep data for as long as required to deliver services effectively and manage day-to-day operations.

Legal Compliance: Certain records must be maintained for specific time frames under various laws or regulatory guidelines. Once the relevant retention period ends, we either securely delete or anonymize the personal data to ensure it cannot be linked back to you.

How We Use Cookies

We use cookies on our website to enhance your experience, maintain functionality, and improve our services. Cookies used on our website are categorized below.

Necessary Cookies
These cookies enable core website functions and are required for the site to operate securely and correctly. They are always active and cannot be disabled.

CookieHub (Consent Management Platform)
CookieHub helps us store and manage your cookie consent preferences. This ensures that analytical cookies are used only when you have provided your permission.
Cookie name: cookiehub

Cloudflare (Security and Performance)
Cloudflare provides protection against malicious traffic, supports site reliability, and ensures secure delivery of content.
Cookie name: __cf_bm

Analytical Cookies
Analytical cookies help us understand how visitors interact with our website. This information allows us to improve website performance and content quality.

Google Analytics Cookies: Google Analytics measures website traffic, user interactions, and general usage patterns. Data collected includes anonymized IP addresses, pages visited, session information, and device details.
Cookie name: _ga & _ga_*

You can control your cookie preferences at any time through the cookie consent banner.

What Are Your Rights Regarding Your Personal Data?

Under the KSA PDPL, you have various rights concerning the processing of your personal data:

Right to be Informed: You can learn about how and why we collect, process, store, and disclose your data.

Right to Access: You can request to see the personal data we hold about you.

Right to Request Access (Formal Copy): You may request a formal copy of your personal data in a clear, readable format.

Right to Correct: You can ask us to update or rectify inaccurate, incomplete, or outdated personal data.

Right to Request Destruction: If the data is no longer needed, you may request its deletion or destruction, subject to legal or regulatory requirements.

Right to Withdraw Consent: If processing is based on consent, you may withdraw that consent at any time, without affecting the lawfulness of prior processing.

Right to File a Complaint: If you believe we have violated the PDPL, you can file a complaint with us and, if unsatisfied, escalate it to the Saudi Data & Artificial Intelligence Authority (SDAIA).

Right to Claim Compensation: You may seek compensation from the competent court for material or moral damages resulting from violations of the PDPL or its implementing regulations.

Exercising Your Rights
To exercise any of these rights, contact us. We may need to verify your identity before processing your request. Generally, we respond within 30 days, and we do not charge fees for fulfilling valid requests related to your personal data.

How to Contact Us

For questions about this privacy notice or your personal data:
Email: athif@halaprivacy.com

Complaint Filing Method

If you have concerns or believe we have not complied with the PDPL, you may file a complaint by contacting us. If you are unsatisfied with our response or if we fail to respond within 30 days, you can escalate your complaint to the Competent Authority, the Saudi Data & Artificial Intelligence Authority (SDAIA):

SDAIA Address:
Kingdom of Saudi Arabia, Riyadh

SDAIA Website:
Saudi Data & AI Authority (sdaia.gov.sa)
National Data Governance Platform “DGP” (dgp.sdaia.gov.sa)

Changes to This Privacy Notice

HalaPrivacy reserves the right to update or modify this Privacy Notice at any time to reflect changes in our data processing practices, legal requirements, or business operations. When we make changes, we will revise the “Last Updated” date at the top of this Notice and document the changes in our version history below.

Version History:

Version 1.0 [19 Nov 2025]: Initial version for ksapdpl.com

We encourage you to review this Notice periodically to stay informed about how we protect your personal data. Previous versions of this privacy notice will be archived and available upon request.

Table of Contents