How we handle your data.

Last updated 6 July 2026. This policy explains what personal data this website collects, why, and the rights you hold under the Kingdom's Personal Data Protection Law (PDPL).

Who we are

IDFA (إضفاء) is a Riyadh-based advisory firm. For personal data collected through this website, IDFA is the controller. You can reach us about anything in this policy at info@idfa.com.sa.

What we collect

Only what you choose to send us through the contact form: your name, work email, organization, role, topic and message. The site itself is static; we do not run advertising trackers or sell data. Standard technical logs (such as IP address and browser type) may be processed by our hosting provider to serve and secure the site.

Why we collect it

To respond to your enquiry and prepare for a discovery conversation. We do not use your details for marketing without your separate, explicit consent.

Legal basis

Your consent, given when you submit the form. You may withdraw it at any time by emailing us, and we will stop processing and delete your enquiry data unless a legal obligation requires otherwise.

Sharing and processors

Form submissions are delivered to our inbox through an email delivery provider acting as a processor. Delivery may involve processing outside the Kingdom, limited to the enquiry content you choose to send. We share personal data with no one else unless the law requires it.

Retention

We keep enquiry data only as long as needed to handle your enquiry or the business relationship that follows, then delete it.

Your rights under PDPL

You have the right to know what data we hold about you, to access and correct it, to request deletion, and to withdraw consent. Write to info@idfa.com.sa and we will respond. PDPL is overseen by the Saudi Data and AI Authority (SDAIA).

Changes

If this policy changes, we update this page and its date. Material changes will be flagged clearly.