PrivSecAI is a Riyadh-based advisory firm specializing in Privacy, Cybersecurity, and AI Governance. We help Saudi organizations comply with national regulations, manage digital risk, and adopt technology responsibly — in alignment with Vision 2030.

Contact Info
Riyadh, Tuwaiq District - Abu Sulaiman Al-Adwani, Saudi Arabia contact@privsecai.com.sa

Effective Date: 1st December 2025

PrivSecAI (“PrivSecAI”, “we”, “our”, or “us”) is committed to protecting the privacy and personal data of visitors, clients, and business partners. This Privacy Policy explains how we collect, use, disclose, and protect personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and other applicable regulations.

By using our website or engaging with our services, you acknowledge and agree to the practices described in this Privacy Policy.


1. Who We Are

PrivSecAI is a Riyadh-based advisory firm specializing in Privacy, Cybersecurity, and AI Governance, supporting organizations operating in Saudi Arabia and the GCC.

Contact Details:
📍 Riyadh, Tuwaiq District – Abu Sulaiman Al-Adwani, Saudi Arabia
📧 Email: contact@privsecai.com.sa


2. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity Information: Name, job title, organization

  • Contact Information: Email address, phone number

  • Professional Information: Company name, industry, role

  • Technical Information: IP address, browser type, device information

  • Communications: Messages sent via contact forms, email, or meetings

We do not intentionally collect sensitive personal data unless required for a specific engagement and permitted by law.


3. How We Collect Personal Data

We collect personal data through:

  • Website contact or inquiry forms

  • Email, phone, or business communications

  • Meetings, consultations, or contractual engagements

  • Cookies and similar technologies (see Section 9)


4. Purpose of Processing

We process personal data for legitimate and lawful purposes, including to:

  • Respond to inquiries and provide advisory services

  • Manage client relationships and engagements

  • Comply with legal and regulatory obligations

  • Improve our website, services, and communications

  • Conduct risk assessments, consultations, and professional services

Personal data is processed only to the extent necessary for these purposes.


5. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds under PDPL:

  • Your consent

  • Performance of a contract or pre-contractual measures

  • Compliance with legal or regulatory obligations

  • Legitimate interests that do not override your rights


6. Data Sharing & Disclosure

We do not sell or rent personal data.

Personal data may be shared only with:

  • Trusted service providers (e.g., IT, hosting, professional services)

  • Regulators or authorities where required by law

  • Professional advisors under confidentiality obligations

All third parties are required to implement appropriate data protection and security measures.


7. Cross-Border Data Transfers

Where personal data is transferred outside Saudi Arabia, we ensure such transfers comply with PDPL requirements, including appropriate safeguards and regulatory conditions, where applicable.


8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal and regulatory requirements. Data is securely deleted or anonymized once no longer required.


9. Cookies & Website Analytics

Our website may use cookies and similar technologies to:

  • Improve website functionality and performance

  • Analyze website traffic and usage

You may control or disable cookies through your browser settings. Disabling cookies may affect certain website features.


10. Data Security

We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, misuse, or disclosure, in line with Saudi cybersecurity and data protection expectations.


11. Your Rights Under PDPL

Subject to applicable laws, you have the right to:

  • Access your personal data

  • Request correction or update of inaccurate data

  • Request deletion of personal data where legally permissible

  • Withdraw consent where processing is based on consent

Requests can be submitted using the contact details below.


12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

📧 contact@privsecai.com.sa
📍 Riyadh, Tuwaiq District – Abu Sulaiman Al-Adwani, Saudi Arabia


13. Policy Updates

We may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes. Updates will be posted on this page with a revised effective date.